# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jun 6 2019 12:21:16 # Log Creation Date: 06.07.2019 06:55:40.879 Process: id = "1" image_name = "white.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\white.exe" page_root = "0x4d6c0000" os_pid = "0x958" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\White.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x95c [0031.297] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0031.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\White.exe", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\White.exe", lpFilePart=0x0) returned 0x2f [0031.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\White.exe", nBufferLength=0x105, lpBuffer=0x27e230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\White.exe", lpFilePart=0x0) returned 0x2f [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0031.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0031.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x27e230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0031.705] GetVersionExW (in: lpVersionInformation=0x27e290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27e290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0031.724] GetVersionExW (in: lpVersionInformation=0x27e290*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27e290*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0032.662] CoTaskMemAlloc (cb=0x20c) returned 0xfe260 [0032.662] GetSystemDirectoryW (in: lpBuffer=0xfe260, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0032.663] CoTaskMemFree (pv=0xfe260) [0032.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e780, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0032.663] GetFullPathNameW (in: lpFileName="C:\\Perfect.sys", nBufferLength=0x105, lpBuffer=0x27e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Perfect.sys", lpFilePart=0x0) returned 0xe [0032.663] GetVersionExW (in: lpVersionInformation=0x27e970*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27e970*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0032.664] SetErrorMode (uMode=0x1) returned 0x0 [0032.664] GetFileAttributesExW (in: lpFileName="C:\\Perfect.sys" (normalized: "c:\\perfect.sys"), fInfoLevelId=0x0, lpFileInformation=0x27ead0 | out: lpFileInformation=0x27ead0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0032.674] SetErrorMode (uMode=0x0) returned 0x1 [0033.405] CoTaskMemAlloc (cb=0x20c) returned 0xfe260 [0033.405] GetSystemDirectoryW (in: lpBuffer=0xfe260, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0033.405] CoTaskMemFree (pv=0xfe260) [0033.405] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e780, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0033.427] GetFullPathNameW (in: lpFileName="C:\\Perfect.sys", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Perfect.sys", lpFilePart=0x0) returned 0xe [0033.427] SetErrorMode (uMode=0x1) returned 0x0 [0033.430] CreateFileW (lpFileName="C:\\Perfect.sys" (normalized: "c:\\perfect.sys"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x168 [0033.433] GetFileType (hFile=0x168) returned 0x1 [0033.433] SetErrorMode (uMode=0x0) returned 0x1 [0033.433] GetFileType (hFile=0x168) returned 0x1 [0033.440] WriteFile (in: hFile=0x168, lpBuffer=0x26ca978*, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0x27ea98, lpOverlapped=0x0 | out: lpBuffer=0x26ca978*, lpNumberOfBytesWritten=0x27ea98*=0x19, lpOverlapped=0x0) returned 1 [0033.443] CloseHandle (hObject=0x168) returned 1 [0033.515] CoCreateGuid (in: pguid=0x27eaa0 | out: pguid=0x27eaa0*(Data1=0x9613c460, Data2=0x9015, Data3=0x4bef, Data4=([0]=0x86, [1]=0x90, [2]=0x37, [3]=0xd, [4]=0x37, [5]=0x97, [6]=0xb6, [7]=0xf7))) returned 0x0 [0033.516] GetVersionExW (in: lpVersionInformation=0x27e980*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27e980*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0033.548] GetLogicalDrives () returned 0x4 [0034.135] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27e630, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0034.138] SetErrorMode (uMode=0x1) returned 0x0 [0034.140] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x27e7d0 | out: lpFindFileData=0x27e7d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0xd2770 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0034.141] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a571f0, ftCreationTime.dwHighDateTime=0x1d533c7, ftLastAccessTime.dwLowDateTime=0xe4a571f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe4a7d350, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Perfect.sys", cAlternateFileName="")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd5aaf50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xdd5aaf50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0034.142] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0034.143] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0034.143] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0034.143] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0034.143] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0034.143] FindClose (in: hFindFile=0xd2770 | out: hFindFile=0xd2770) returned 1 [0034.143] SetErrorMode (uMode=0x0) returned 0x1 [0034.143] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27e630, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0034.143] SetErrorMode (uMode=0x1) returned 0x0 [0034.144] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x27e7d0 | out: lpFindFileData=0x27e7d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0xd2770 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0034.144] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a571f0, ftCreationTime.dwHighDateTime=0x1d533c7, ftLastAccessTime.dwLowDateTime=0xe4a571f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe4a7d350, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Perfect.sys", cAlternateFileName="")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdd5aaf50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xdd5aaf50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0034.145] FindNextFileW (in: hFindFile=0xd2770, lpFindFileData=0x27e7e0 | out: lpFindFileData=0x27e7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0034.146] FindClose (in: hFindFile=0xd2770 | out: hFindFile=0xd2770) returned 1 [0034.146] SetErrorMode (uMode=0x0) returned 0x1 [0034.147] GetFullPathNameW (in: lpFileName="C:\\bootmgr", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x0) returned 0xa [0034.317] GetFullPathNameW (in: lpFileName="C:\\bootmgr", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x0) returned 0xa [0034.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0034.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0034.317] CoTaskMemFree (pv=0xffa70) [0034.317] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0034.317] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0034.775] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x27e7b0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0034.777] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x27e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0034.777] SetErrorMode (uMode=0x1) returned 0x0 [0034.777] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0034.814] GetFileType (hFile=0x178) returned 0x1 [0034.814] SetErrorMode (uMode=0x0) returned 0x1 [0034.814] GetFileType (hFile=0x178) returned 0x1 [0034.815] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x27eb28 | out: lpFileSizeHigh=0x27eb28*=0x0) returned 0x2000 [0034.818] ReadFile (in: hFile=0x178, lpBuffer=0x26db550, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27ea08, lpOverlapped=0x0 | out: lpBuffer=0x26db550*, lpNumberOfBytesRead=0x27ea08*=0x2000, lpOverlapped=0x0) returned 1 [0034.820] CloseHandle (hObject=0x178) returned 1 [0034.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0034.834] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0034.834] SetErrorMode (uMode=0x1) returned 0x0 [0034.834] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1 [0034.834] SetErrorMode (uMode=0x0) returned 0x1 [0034.834] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0034.834] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x27e360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0034.926] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x27e080 | out: pfEnabled=0x27e080) returned 0x0 [0034.952] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x27e7a0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0034.953] SetErrorMode (uMode=0x1) returned 0x0 [0034.953] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x27ea10 | out: lpFileInformation=0x27ea10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0034.953] SetErrorMode (uMode=0x0) returned 0x1 [0035.228] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x27e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0035.228] SetErrorMode (uMode=0x1) returned 0x0 [0035.228] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0035.303] SetErrorMode (uMode=0x0) returned 0x1 [0035.305] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x27c0a0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0035.306] DeleteFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0 [0035.319] GetFullPathNameW (in: lpFileName="C:\\hiberfil.sys", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\hiberfil.sys", lpFilePart=0x0) returned 0xf [0035.319] GetFullPathNameW (in: lpFileName="C:\\hiberfil.sys", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\hiberfil.sys", lpFilePart=0x0) returned 0xf [0035.319] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.320] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.320] CoTaskMemFree (pv=0xffa70) [0035.320] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.320] GetFullPathNameW (in: lpFileName="C:\\pagefile.sys", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\pagefile.sys", lpFilePart=0x0) returned 0xf [0035.320] GetFullPathNameW (in: lpFileName="C:\\pagefile.sys", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\pagefile.sys", lpFilePart=0x0) returned 0xf [0035.320] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.320] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.320] CoTaskMemFree (pv=0xffa70) [0035.320] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.320] GetFullPathNameW (in: lpFileName="C:\\Perfect.sys", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Perfect.sys", lpFilePart=0x0) returned 0xe [0035.321] GetFullPathNameW (in: lpFileName="C:\\Perfect.sys", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Perfect.sys", lpFilePart=0x0) returned 0xe [0035.321] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.321] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.321] CoTaskMemFree (pv=0xffa70) [0035.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.322] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0035.322] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0035.322] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0035.322] SetErrorMode (uMode=0x1) returned 0x0 [0035.322] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0035.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0035.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0035.325] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0035.325] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0035.325] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0035.325] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0035.325] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0035.325] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.325] SetErrorMode (uMode=0x0) returned 0x1 [0035.325] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0035.325] SetErrorMode (uMode=0x1) returned 0x0 [0035.325] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0035.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0035.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0035.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0035.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0035.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0035.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0035.328] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.328] SetErrorMode (uMode=0x0) returned 0x1 [0035.328] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x0) returned 0xb [0035.328] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x0) returned 0xb [0035.328] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.328] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.329] CoTaskMemFree (pv=0xffa70) [0035.329] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.329] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0035.329] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x27e710, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0035.329] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0035.329] SetErrorMode (uMode=0x1) returned 0x0 [0035.329] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0035.335] SetErrorMode (uMode=0x0) returned 0x1 [0035.335] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x27bff0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0035.335] DeleteFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log")) returned 0 [0035.338] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG1", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG1", lpFilePart=0x0) returned 0x10 [0035.338] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG1", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG1", lpFilePart=0x0) returned 0x10 [0035.338] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.338] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.338] CoTaskMemFree (pv=0xffa70) [0035.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG2", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG2", lpFilePart=0x0) returned 0x10 [0035.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG2", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG2", lpFilePart=0x0) returned 0x10 [0035.339] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.339] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.339] CoTaskMemFree (pv=0xffa70) [0035.339] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0035.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x27e710, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0035.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0035.339] SetErrorMode (uMode=0x1) returned 0x0 [0035.339] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0035.340] GetFileType (hFile=0x18c) returned 0x1 [0035.340] SetErrorMode (uMode=0x0) returned 0x1 [0035.341] GetFileType (hFile=0x18c) returned 0x1 [0035.341] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27ea88 | out: lpFileSizeHigh=0x27ea88*=0x0) returned 0x10000 [0035.341] ReadFile (in: hFile=0x18c, lpBuffer=0x27c22d8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x27e968, lpOverlapped=0x0 | out: lpBuffer=0x27c22d8*, lpNumberOfBytesRead=0x27e968*=0x10000, lpOverlapped=0x0) returned 1 [0035.342] CloseHandle (hObject=0x18c) returned 1 [0035.343] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x27e700, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0035.343] SetErrorMode (uMode=0x1) returned 0x0 [0035.343] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e970 | out: lpFileInformation=0x27e970*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0035.344] SetErrorMode (uMode=0x0) returned 0x1 [0035.453] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x27e430, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0035.453] SetErrorMode (uMode=0x1) returned 0x0 [0035.453] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0035.458] SetErrorMode (uMode=0x0) returned 0x1 [0035.460] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x27c000, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0035.460] DeleteFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0035.463] GetFullPathNameW (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x0) returned 0x13 [0035.463] GetFullPathNameW (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x0) returned 0x13 [0035.463] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.463] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.463] CoTaskMemFree (pv=0xffa70) [0035.463] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.463] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0035.463] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0035.464] SetErrorMode (uMode=0x1) returned 0x0 [0035.464] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.464] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.465] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.465] SetErrorMode (uMode=0x0) returned 0x1 [0035.465] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0035.465] SetErrorMode (uMode=0x1) returned 0x0 [0035.465] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.465] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.466] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.466] SetErrorMode (uMode=0x0) returned 0x1 [0035.466] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.466] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.466] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.466] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.466] CoTaskMemFree (pv=0xffa70) [0035.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.667] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.667] SetErrorMode (uMode=0x1) returned 0x0 [0035.667] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\cs-cz\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.667] GetFileType (hFile=0x18c) returned 0x1 [0035.668] SetErrorMode (uMode=0x0) returned 0x1 [0035.668] GetFileType (hFile=0x18c) returned 0x1 [0035.669] WriteFile (in: hFile=0x18c, lpBuffer=0x28a0d90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x28a0d90*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.671] WriteFile (in: hFile=0x18c, lpBuffer=0x28a0d90*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x28a0d90*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.673] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0035.673] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0035.673] SetErrorMode (uMode=0x1) returned 0x0 [0035.673] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.674] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.674] SetErrorMode (uMode=0x0) returned 0x1 [0035.674] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0035.674] SetErrorMode (uMode=0x1) returned 0x0 [0035.674] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.675] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.675] SetErrorMode (uMode=0x0) returned 0x1 [0035.675] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.675] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.675] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.675] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.675] CoTaskMemFree (pv=0xffa70) [0035.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.676] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.676] SetErrorMode (uMode=0x1) returned 0x0 [0035.676] CreateFileW (lpFileName="C:\\Boot\\da-DK\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\da-dk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.676] GetFileType (hFile=0x18c) returned 0x1 [0035.676] SetErrorMode (uMode=0x0) returned 0x1 [0035.676] GetFileType (hFile=0x18c) returned 0x1 [0035.678] WriteFile (in: hFile=0x18c, lpBuffer=0x28b9b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x28b9b68*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.679] WriteFile (in: hFile=0x18c, lpBuffer=0x28b9b68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x28b9b68*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.680] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0035.680] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0035.680] SetErrorMode (uMode=0x1) returned 0x0 [0035.680] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.681] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.681] SetErrorMode (uMode=0x0) returned 0x1 [0035.681] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0035.682] SetErrorMode (uMode=0x1) returned 0x0 [0035.682] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.682] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.682] SetErrorMode (uMode=0x0) returned 0x1 [0035.682] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.682] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.682] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.683] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.683] CoTaskMemFree (pv=0xffa70) [0035.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.683] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.683] SetErrorMode (uMode=0x1) returned 0x0 [0035.683] CreateFileW (lpFileName="C:\\Boot\\de-DE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\de-de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.683] GetFileType (hFile=0x18c) returned 0x1 [0035.683] SetErrorMode (uMode=0x0) returned 0x1 [0035.683] GetFileType (hFile=0x18c) returned 0x1 [0035.684] WriteFile (in: hFile=0x18c, lpBuffer=0x28d2940*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x28d2940*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.684] WriteFile (in: hFile=0x18c, lpBuffer=0x28d2940*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x28d2940*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.685] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0035.685] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0035.685] SetErrorMode (uMode=0x1) returned 0x0 [0035.685] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.685] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.686] SetErrorMode (uMode=0x0) returned 0x1 [0035.686] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0035.686] SetErrorMode (uMode=0x1) returned 0x0 [0035.686] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.686] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.686] SetErrorMode (uMode=0x0) returned 0x1 [0035.687] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.687] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.687] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.687] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.687] CoTaskMemFree (pv=0xffa70) [0035.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.687] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.687] SetErrorMode (uMode=0x1) returned 0x0 [0035.688] CreateFileW (lpFileName="C:\\Boot\\el-GR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\el-gr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.688] GetFileType (hFile=0x18c) returned 0x1 [0035.688] SetErrorMode (uMode=0x0) returned 0x1 [0035.688] GetFileType (hFile=0x18c) returned 0x1 [0035.688] WriteFile (in: hFile=0x18c, lpBuffer=0x28eb718*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x28eb718*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.689] WriteFile (in: hFile=0x18c, lpBuffer=0x28eb718*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x28eb718*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.689] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0035.689] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0035.689] SetErrorMode (uMode=0x1) returned 0x0 [0035.689] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0035.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0035.691] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.691] SetErrorMode (uMode=0x0) returned 0x1 [0035.692] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0035.692] SetErrorMode (uMode=0x1) returned 0x0 [0035.692] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0035.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0035.692] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.692] SetErrorMode (uMode=0x0) returned 0x1 [0035.692] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.693] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.693] CoTaskMemFree (pv=0xffa70) [0035.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.693] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0035.693] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0035.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.693] CoTaskMemFree (pv=0xffa70) [0035.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.697] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.697] SetErrorMode (uMode=0x1) returned 0x0 [0035.697] CreateFileW (lpFileName="C:\\Boot\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.698] GetFileType (hFile=0x18c) returned 0x1 [0035.698] SetErrorMode (uMode=0x0) returned 0x1 [0035.698] GetFileType (hFile=0x18c) returned 0x1 [0035.699] WriteFile (in: hFile=0x18c, lpBuffer=0x270ba50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x270ba50*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.699] WriteFile (in: hFile=0x18c, lpBuffer=0x270ba50*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x270ba50*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.700] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0035.700] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0035.700] SetErrorMode (uMode=0x1) returned 0x0 [0035.700] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.701] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.701] SetErrorMode (uMode=0x0) returned 0x1 [0035.701] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0035.701] SetErrorMode (uMode=0x1) returned 0x0 [0035.702] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.702] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.702] SetErrorMode (uMode=0x0) returned 0x1 [0035.702] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.703] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.703] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.703] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.703] CoTaskMemFree (pv=0xffa70) [0035.703] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.703] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.703] SetErrorMode (uMode=0x1) returned 0x0 [0035.703] CreateFileW (lpFileName="C:\\Boot\\es-ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\es-es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.703] GetFileType (hFile=0x18c) returned 0x1 [0035.704] SetErrorMode (uMode=0x0) returned 0x1 [0035.704] GetFileType (hFile=0x18c) returned 0x1 [0035.704] WriteFile (in: hFile=0x18c, lpBuffer=0x2724828*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x2724828*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.704] WriteFile (in: hFile=0x18c, lpBuffer=0x2724828*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x2724828*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.705] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0035.705] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0035.705] SetErrorMode (uMode=0x1) returned 0x0 [0035.705] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.706] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.706] SetErrorMode (uMode=0x0) returned 0x1 [0035.706] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0035.706] SetErrorMode (uMode=0x1) returned 0x0 [0035.706] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.706] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.707] SetErrorMode (uMode=0x0) returned 0x1 [0035.707] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.707] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.707] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.707] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.707] CoTaskMemFree (pv=0xffa70) [0035.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.707] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.707] SetErrorMode (uMode=0x1) returned 0x0 [0035.708] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\fi-fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.708] GetFileType (hFile=0x18c) returned 0x1 [0035.708] SetErrorMode (uMode=0x0) returned 0x1 [0035.708] GetFileType (hFile=0x18c) returned 0x1 [0035.708] WriteFile (in: hFile=0x18c, lpBuffer=0x273d600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x273d600*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.709] WriteFile (in: hFile=0x18c, lpBuffer=0x273d600*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x273d600*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.709] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0035.709] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0035.710] SetErrorMode (uMode=0x1) returned 0x0 [0035.710] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0035.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0035.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0035.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0035.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0035.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0035.711] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.711] SetErrorMode (uMode=0x0) returned 0x1 [0035.711] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0035.711] SetErrorMode (uMode=0x1) returned 0x0 [0035.711] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0035.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0035.712] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.712] SetErrorMode (uMode=0x0) returned 0x1 [0035.712] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\chs_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.712] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\chs_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.713] CoTaskMemFree (pv=0xffa70) [0035.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.713] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\cht_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.713] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\cht_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.713] CoTaskMemFree (pv=0xffa70) [0035.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.713] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\jpn_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.714] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\jpn_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.714] CoTaskMemFree (pv=0xffa70) [0035.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.714] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\kor_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.714] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\kor_boot.ttf", lpFilePart=0x0) returned 0x1a [0035.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.714] CoTaskMemFree (pv=0xffa70) [0035.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.714] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\wgl4_boot.ttf", lpFilePart=0x0) returned 0x1b [0035.715] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\wgl4_boot.ttf", lpFilePart=0x0) returned 0x1b [0035.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.715] CoTaskMemFree (pv=0xffa70) [0035.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.715] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.715] SetErrorMode (uMode=0x1) returned 0x0 [0035.715] CreateFileW (lpFileName="C:\\Boot\\Fonts\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\fonts\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.717] GetFileType (hFile=0x18c) returned 0x1 [0035.717] SetErrorMode (uMode=0x0) returned 0x1 [0035.717] GetFileType (hFile=0x18c) returned 0x1 [0035.717] WriteFile (in: hFile=0x18c, lpBuffer=0x2758f60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x2758f60*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.718] WriteFile (in: hFile=0x18c, lpBuffer=0x2758f60*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x2758f60*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.718] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0035.718] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0035.718] SetErrorMode (uMode=0x1) returned 0x0 [0035.719] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.720] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.720] SetErrorMode (uMode=0x0) returned 0x1 [0035.720] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0035.720] SetErrorMode (uMode=0x1) returned 0x0 [0035.720] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.720] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.721] SetErrorMode (uMode=0x0) returned 0x1 [0035.721] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.721] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.721] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.721] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.721] CoTaskMemFree (pv=0xffa70) [0035.721] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.721] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.721] SetErrorMode (uMode=0x1) returned 0x0 [0035.722] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\fr-fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.722] GetFileType (hFile=0x18c) returned 0x1 [0035.722] SetErrorMode (uMode=0x0) returned 0x1 [0035.722] GetFileType (hFile=0x18c) returned 0x1 [0035.722] WriteFile (in: hFile=0x18c, lpBuffer=0x2771d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x2771d38*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.723] WriteFile (in: hFile=0x18c, lpBuffer=0x2771d38*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x2771d38*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.726] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0035.726] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0035.726] SetErrorMode (uMode=0x1) returned 0x0 [0035.726] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.726] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.726] SetErrorMode (uMode=0x0) returned 0x1 [0035.727] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0035.727] SetErrorMode (uMode=0x1) returned 0x0 [0035.727] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.727] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.727] SetErrorMode (uMode=0x0) returned 0x1 [0035.727] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.727] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.727] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.727] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.727] CoTaskMemFree (pv=0xffa70) [0035.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.728] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.728] SetErrorMode (uMode=0x1) returned 0x0 [0035.728] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\hu-hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.728] GetFileType (hFile=0x18c) returned 0x1 [0035.728] SetErrorMode (uMode=0x0) returned 0x1 [0035.728] GetFileType (hFile=0x18c) returned 0x1 [0035.728] WriteFile (in: hFile=0x18c, lpBuffer=0x278ab10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x278ab10*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.729] WriteFile (in: hFile=0x18c, lpBuffer=0x278ab10*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x278ab10*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.729] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0035.729] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0035.729] SetErrorMode (uMode=0x1) returned 0x0 [0035.730] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.730] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.731] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.731] SetErrorMode (uMode=0x0) returned 0x1 [0035.731] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0035.731] SetErrorMode (uMode=0x1) returned 0x0 [0035.731] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.731] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.731] SetErrorMode (uMode=0x0) returned 0x1 [0035.731] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.732] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.732] CoTaskMemFree (pv=0xffa70) [0035.732] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.732] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.732] SetErrorMode (uMode=0x1) returned 0x0 [0035.732] CreateFileW (lpFileName="C:\\Boot\\it-IT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\it-it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.732] GetFileType (hFile=0x18c) returned 0x1 [0035.732] SetErrorMode (uMode=0x0) returned 0x1 [0035.732] GetFileType (hFile=0x18c) returned 0x1 [0035.733] WriteFile (in: hFile=0x18c, lpBuffer=0x27a38e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x27a38e8*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.734] WriteFile (in: hFile=0x18c, lpBuffer=0x27a38e8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x27a38e8*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.734] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0035.734] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0035.734] SetErrorMode (uMode=0x1) returned 0x0 [0035.734] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.735] SetErrorMode (uMode=0x0) returned 0x1 [0035.735] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0035.735] SetErrorMode (uMode=0x1) returned 0x0 [0035.735] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.735] SetErrorMode (uMode=0x0) returned 0x1 [0035.735] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.735] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.736] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.736] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.736] CoTaskMemFree (pv=0xffa70) [0035.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.736] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.736] SetErrorMode (uMode=0x1) returned 0x0 [0035.736] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\ja-jp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.736] GetFileType (hFile=0x18c) returned 0x1 [0035.736] SetErrorMode (uMode=0x0) returned 0x1 [0035.736] GetFileType (hFile=0x18c) returned 0x1 [0035.737] WriteFile (in: hFile=0x18c, lpBuffer=0x27bc6c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x27bc6c0*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0035.737] WriteFile (in: hFile=0x18c, lpBuffer=0x27bc6c0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x27bc6c0*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0035.738] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0035.738] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0035.738] SetErrorMode (uMode=0x1) returned 0x0 [0035.738] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.739] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.739] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.739] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.739] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.740] SetErrorMode (uMode=0x0) returned 0x1 [0035.740] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0035.740] SetErrorMode (uMode=0x1) returned 0x0 [0035.740] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.740] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.740] SetErrorMode (uMode=0x0) returned 0x1 [0035.740] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.740] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.740] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.740] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.740] CoTaskMemFree (pv=0xffa70) [0035.740] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.741] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.741] SetErrorMode (uMode=0x1) returned 0x0 [0035.741] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\ko-kr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.741] SetErrorMode (uMode=0x0) returned 0x1 [0035.741] GetFileType (hFile=0x18c) returned 0x1 [0035.743] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0035.743] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0035.743] SetErrorMode (uMode=0x1) returned 0x0 [0035.743] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.743] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.743] SetErrorMode (uMode=0x0) returned 0x1 [0035.743] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0035.743] SetErrorMode (uMode=0x1) returned 0x0 [0035.744] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.744] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.744] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.744] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.744] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.744] SetErrorMode (uMode=0x0) returned 0x1 [0035.744] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.744] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.744] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.744] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.744] CoTaskMemFree (pv=0xffa70) [0035.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.744] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.744] SetErrorMode (uMode=0x1) returned 0x0 [0035.744] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\nb-no\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.745] SetErrorMode (uMode=0x0) returned 0x1 [0035.745] GetFileType (hFile=0x18c) returned 0x1 [0035.746] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0035.746] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0035.746] SetErrorMode (uMode=0x1) returned 0x0 [0035.746] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.747] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.747] SetErrorMode (uMode=0x0) returned 0x1 [0035.747] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0035.747] SetErrorMode (uMode=0x1) returned 0x0 [0035.747] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.748] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.748] SetErrorMode (uMode=0x0) returned 0x1 [0035.748] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.748] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.748] CoTaskMemFree (pv=0xffa70) [0035.748] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.748] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.748] SetErrorMode (uMode=0x1) returned 0x0 [0035.748] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\nl-nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.748] SetErrorMode (uMode=0x0) returned 0x1 [0035.748] GetFileType (hFile=0x18c) returned 0x1 [0035.749] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0035.750] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0035.750] SetErrorMode (uMode=0x1) returned 0x0 [0035.750] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.750] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.750] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.750] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.750] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.750] SetErrorMode (uMode=0x0) returned 0x1 [0035.750] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0035.750] SetErrorMode (uMode=0x1) returned 0x0 [0035.750] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.751] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.751] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.751] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.751] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.751] SetErrorMode (uMode=0x0) returned 0x1 [0035.751] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.751] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.751] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.751] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.751] CoTaskMemFree (pv=0xffa70) [0035.751] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.751] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.751] SetErrorMode (uMode=0x1) returned 0x0 [0035.751] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\pl-pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.752] SetErrorMode (uMode=0x0) returned 0x1 [0035.752] GetFileType (hFile=0x18c) returned 0x1 [0035.753] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0035.753] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0035.753] SetErrorMode (uMode=0x1) returned 0x0 [0035.753] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.754] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.754] SetErrorMode (uMode=0x0) returned 0x1 [0035.754] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0035.754] SetErrorMode (uMode=0x1) returned 0x0 [0035.754] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.754] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.755] SetErrorMode (uMode=0x0) returned 0x1 [0035.755] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.755] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.755] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.755] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.755] CoTaskMemFree (pv=0xffa70) [0035.755] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.755] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.755] SetErrorMode (uMode=0x1) returned 0x0 [0035.755] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\pt-br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.755] SetErrorMode (uMode=0x0) returned 0x1 [0035.755] GetFileType (hFile=0x18c) returned 0x1 [0035.756] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0035.756] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0035.756] SetErrorMode (uMode=0x1) returned 0x0 [0035.756] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.757] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.757] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.757] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.757] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.757] SetErrorMode (uMode=0x0) returned 0x1 [0035.757] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0035.757] SetErrorMode (uMode=0x1) returned 0x0 [0035.757] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.757] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.757] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.757] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.758] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.758] SetErrorMode (uMode=0x0) returned 0x1 [0035.758] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.758] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.758] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.758] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.758] CoTaskMemFree (pv=0xffa70) [0035.758] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.758] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.758] SetErrorMode (uMode=0x1) returned 0x0 [0035.758] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\pt-pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.758] SetErrorMode (uMode=0x0) returned 0x1 [0035.758] GetFileType (hFile=0x18c) returned 0x1 [0035.759] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0035.759] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0035.759] SetErrorMode (uMode=0x1) returned 0x0 [0035.760] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.760] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.760] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.760] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.761] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.761] SetErrorMode (uMode=0x0) returned 0x1 [0035.761] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0035.761] SetErrorMode (uMode=0x1) returned 0x0 [0035.761] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.761] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.761] SetErrorMode (uMode=0x0) returned 0x1 [0035.761] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.761] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.761] CoTaskMemFree (pv=0xffa70) [0035.761] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.762] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.762] SetErrorMode (uMode=0x1) returned 0x0 [0035.762] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\ru-ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.762] SetErrorMode (uMode=0x0) returned 0x1 [0035.762] GetFileType (hFile=0x18c) returned 0x1 [0035.763] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0035.763] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0035.764] SetErrorMode (uMode=0x1) returned 0x0 [0035.764] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.764] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.764] SetErrorMode (uMode=0x0) returned 0x1 [0035.764] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0035.764] SetErrorMode (uMode=0x1) returned 0x0 [0035.765] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.765] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.765] SetErrorMode (uMode=0x0) returned 0x1 [0035.765] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.765] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.765] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.765] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.765] CoTaskMemFree (pv=0xffa70) [0035.765] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.765] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.765] SetErrorMode (uMode=0x1) returned 0x0 [0035.765] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\sv-se\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.766] SetErrorMode (uMode=0x0) returned 0x1 [0035.766] GetFileType (hFile=0x18c) returned 0x1 [0035.767] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0035.767] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0035.767] SetErrorMode (uMode=0x1) returned 0x0 [0035.767] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.775] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.775] SetErrorMode (uMode=0x0) returned 0x1 [0035.775] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0035.775] SetErrorMode (uMode=0x1) returned 0x0 [0035.775] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.776] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.776] SetErrorMode (uMode=0x0) returned 0x1 [0035.776] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.776] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.776] CoTaskMemFree (pv=0xffa70) [0035.776] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.776] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.776] SetErrorMode (uMode=0x1) returned 0x0 [0035.776] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\tr-tr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.777] SetErrorMode (uMode=0x0) returned 0x1 [0035.777] GetFileType (hFile=0x18c) returned 0x1 [0035.778] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0035.778] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0035.778] SetErrorMode (uMode=0x1) returned 0x0 [0035.778] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.778] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.778] SetErrorMode (uMode=0x0) returned 0x1 [0035.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0035.779] SetErrorMode (uMode=0x1) returned 0x0 [0035.779] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.779] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.779] SetErrorMode (uMode=0x0) returned 0x1 [0035.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.779] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.779] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.779] CoTaskMemFree (pv=0xffa70) [0035.779] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.779] SetErrorMode (uMode=0x1) returned 0x0 [0035.780] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\zh-cn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.780] SetErrorMode (uMode=0x0) returned 0x1 [0035.780] GetFileType (hFile=0x18c) returned 0x1 [0035.781] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0035.781] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0035.781] SetErrorMode (uMode=0x1) returned 0x0 [0035.781] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.782] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.782] SetErrorMode (uMode=0x0) returned 0x1 [0035.782] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0035.782] SetErrorMode (uMode=0x1) returned 0x0 [0035.782] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.783] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.783] SetErrorMode (uMode=0x0) returned 0x1 [0035.783] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.783] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.783] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.783] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.783] CoTaskMemFree (pv=0xffa70) [0035.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.783] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.783] SetErrorMode (uMode=0x1) returned 0x0 [0035.783] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\zh-hk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.784] SetErrorMode (uMode=0x0) returned 0x1 [0035.784] GetFileType (hFile=0x18c) returned 0x1 [0035.785] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0035.785] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0035.785] SetErrorMode (uMode=0x1) returned 0x0 [0035.785] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.785] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.785] SetErrorMode (uMode=0x0) returned 0x1 [0035.785] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0035.786] SetErrorMode (uMode=0x1) returned 0x0 [0035.786] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0035.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0035.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.786] SetErrorMode (uMode=0x0) returned 0x1 [0035.786] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.786] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0035.786] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.786] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.786] CoTaskMemFree (pv=0xffa70) [0035.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.786] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.786] SetErrorMode (uMode=0x1) returned 0x0 [0035.786] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\zh-tw\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.787] SetErrorMode (uMode=0x0) returned 0x1 [0035.787] GetFileType (hFile=0x18c) returned 0x1 [0035.788] GetFullPathNameW (in: lpFileName="C:\\Boot\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x21 [0035.788] SetErrorMode (uMode=0x1) returned 0x0 [0035.788] CreateFileW (lpFileName="C:\\Boot\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\boot\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.788] SetErrorMode (uMode=0x0) returned 0x1 [0035.789] GetFileType (hFile=0x18c) returned 0x1 [0035.791] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0035.791] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0035.791] SetErrorMode (uMode=0x1) returned 0x0 [0035.792] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0035.792] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.792] SetErrorMode (uMode=0x0) returned 0x1 [0035.792] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0035.792] SetErrorMode (uMode=0x1) returned 0x0 [0035.792] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0035.793] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.793] SetErrorMode (uMode=0x0) returned 0x1 [0035.793] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x27 [0035.793] SetErrorMode (uMode=0x1) returned 0x0 [0035.793] CreateFileW (lpFileName="C:\\Config.Msi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\config.msi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.793] SetErrorMode (uMode=0x0) returned 0x1 [0035.793] GetFileType (hFile=0x18c) returned 0x1 [0035.794] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0035.794] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0035.794] SetErrorMode (uMode=0x1) returned 0x0 [0035.795] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0035.802] SetErrorMode (uMode=0x0) returned 0x1 [0035.804] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x33 [0035.804] SetErrorMode (uMode=0x1) returned 0x0 [0035.804] CreateFileW (lpFileName="C:\\Documents and Settings\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\documents and settings\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0035.805] GetFileType (hFile=0x18c) returned 0x1 [0035.805] SetErrorMode (uMode=0x0) returned 0x1 [0035.805] GetFileType (hFile=0x18c) returned 0x1 [0035.806] WriteFile (in: hFile=0x18c, lpBuffer=0x2733818*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e928, lpOverlapped=0x0 | out: lpBuffer=0x2733818*, lpNumberOfBytesWritten=0x27e928*=0x1000, lpOverlapped=0x0) returned 1 [0035.808] WriteFile (in: hFile=0x18c, lpBuffer=0x2733818*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e988, lpOverlapped=0x0 | out: lpBuffer=0x2733818*, lpNumberOfBytesWritten=0x27e988*=0xb14, lpOverlapped=0x0) returned 1 [0035.808] CloseHandle (hObject=0x18c) returned 1 [0035.809] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0035.809] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0035.810] SetErrorMode (uMode=0x1) returned 0x0 [0035.810] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0035.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0035.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.811] SetErrorMode (uMode=0x0) returned 0x1 [0035.811] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0035.811] SetErrorMode (uMode=0x1) returned 0x0 [0035.811] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.811] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.811] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0035.811] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0035.812] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.812] SetErrorMode (uMode=0x0) returned 0x1 [0035.812] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0035.812] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0035.812] SetErrorMode (uMode=0x1) returned 0x0 [0035.812] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0035.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0035.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0035.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0035.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0035.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0035.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0035.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0035.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0035.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0035.817] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.818] SetErrorMode (uMode=0x0) returned 0x1 [0035.818] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0035.818] SetErrorMode (uMode=0x1) returned 0x0 [0035.818] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0035.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0035.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0035.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0035.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0035.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0035.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0035.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0035.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0035.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0035.821] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.822] SetErrorMode (uMode=0x0) returned 0x1 [0035.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0035.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0035.822] SetErrorMode (uMode=0x1) returned 0x0 [0035.823] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0035.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0035.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0035.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0035.825] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.825] SetErrorMode (uMode=0x0) returned 0x1 [0035.825] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0035.825] SetErrorMode (uMode=0x1) returned 0x0 [0035.825] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0035.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0035.826] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0035.826] SetErrorMode (uMode=0x0) returned 0x1 [0035.826] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpFilePart=0x0) returned 0x4a [0035.826] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpFilePart=0x0) returned 0x4a [0035.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.826] CoTaskMemFree (pv=0xffa70) [0035.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.826] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpFilePart=0x0) returned 0x4b [0035.827] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpFilePart=0x0) returned 0x4b [0035.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0035.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0035.827] CoTaskMemFree (pv=0xffa70) [0035.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0035.827] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0035.827] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0035.828] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0035.828] SetErrorMode (uMode=0x1) returned 0x0 [0035.828] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0035.829] GetFileType (hFile=0x18c) returned 0x1 [0035.829] SetErrorMode (uMode=0x0) returned 0x1 [0035.829] GetFileType (hFile=0x18c) returned 0x1 [0035.829] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x61d [0035.829] ReadFile (in: hFile=0x18c, lpBuffer=0x2743fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2743fa0*, lpNumberOfBytesRead=0x27e828*=0x61d, lpOverlapped=0x0) returned 1 [0035.831] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0035.831] SetErrorMode (uMode=0x1) returned 0x0 [0035.831] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0035.831] SetErrorMode (uMode=0x0) returned 0x1 [0035.929] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0035.929] SetErrorMode (uMode=0x1) returned 0x0 [0035.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0035.930] GetFileType (hFile=0x18c) returned 0x1 [0035.930] SetErrorMode (uMode=0x0) returned 0x1 [0035.930] GetFileType (hFile=0x18c) returned 0x1 [0035.930] WriteFile (in: hFile=0x18c, lpBuffer=0x27a0508*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x27a0508*, lpNumberOfBytesWritten=0x27e7c8*=0x720, lpOverlapped=0x0) returned 1 [0035.932] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0035.932] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\kq7pKfOLqG2bZuuj_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\kq7pKfOLqG2bZuuj_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0035.933] SetErrorMode (uMode=0x1) returned 0x0 [0035.933] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe61b29d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0035.933] SetErrorMode (uMode=0x0) returned 0x1 [0035.934] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\kq7pKfOLqG2bZuuj_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\kq7pkfolqg2bzuuj_encrypted_by.whiterose")) returned 1 [0036.127] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.144] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.144] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.144] SetErrorMode (uMode=0x1) returned 0x0 [0036.144] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.145] GetFileType (hFile=0x18c) returned 0x1 [0036.145] SetErrorMode (uMode=0x0) returned 0x1 [0036.145] GetFileType (hFile=0x18c) returned 0x1 [0036.145] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x8f8 [0036.145] ReadFile (in: hFile=0x18c, lpBuffer=0x27a3498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27a3498*, lpNumberOfBytesRead=0x27e828*=0x8f8, lpOverlapped=0x0) returned 1 [0036.148] CloseHandle (hObject=0x18c) returned 1 [0036.148] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.149] SetErrorMode (uMode=0x1) returned 0x0 [0036.149] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0036.149] SetErrorMode (uMode=0x0) returned 0x1 [0036.250] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.250] SetErrorMode (uMode=0x1) returned 0x0 [0036.250] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.251] GetFileType (hFile=0x18c) returned 0x1 [0036.251] SetErrorMode (uMode=0x0) returned 0x1 [0036.251] GetFileType (hFile=0x18c) returned 0x1 [0036.251] WriteFile (in: hFile=0x18c, lpBuffer=0x2803280*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x2803280*, lpNumberOfBytesWritten=0x27e7c8*=0xa00, lpOverlapped=0x0) returned 1 [0036.253] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.253] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\kZa1BUBh3JSLsOTa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\kZa1BUBh3JSLsOTa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0036.253] SetErrorMode (uMode=0x1) returned 0x0 [0036.253] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe64d26b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0036.253] SetErrorMode (uMode=0x0) returned 0x1 [0036.253] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\kZa1BUBh3JSLsOTa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\kza1bubh3jslsota_encrypted_by.whiterose")) returned 1 [0036.357] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0036.357] SetErrorMode (uMode=0x1) returned 0x0 [0036.358] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0036.358] GetFileType (hFile=0x18c) returned 0x1 [0036.358] SetErrorMode (uMode=0x0) returned 0x1 [0036.358] GetFileType (hFile=0x18c) returned 0x1 [0036.360] WriteFile (in: hFile=0x18c, lpBuffer=0x28166d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x28166d0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0036.361] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0036.361] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0036.362] SetErrorMode (uMode=0x1) returned 0x0 [0036.362] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0036.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0036.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0036.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0036.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.374] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0036.375] SetErrorMode (uMode=0x0) returned 0x1 [0036.375] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0036.375] SetErrorMode (uMode=0x1) returned 0x0 [0036.376] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0036.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0036.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0036.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0036.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.377] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0036.377] SetErrorMode (uMode=0x0) returned 0x1 [0036.378] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpFilePart=0x0) returned 0x50 [0036.379] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpFilePart=0x0) returned 0x50 [0036.379] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0036.379] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0036.379] CoTaskMemFree (pv=0xffa70) [0036.379] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0036.379] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0036.380] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0036.380] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0036.380] SetErrorMode (uMode=0x1) returned 0x0 [0036.380] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.381] GetFileType (hFile=0x18c) returned 0x1 [0036.381] SetErrorMode (uMode=0x0) returned 0x1 [0036.381] GetFileType (hFile=0x18c) returned 0x1 [0036.381] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x5aa [0036.381] ReadFile (in: hFile=0x18c, lpBuffer=0x281f9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x281f9c0*, lpNumberOfBytesRead=0x27e828*=0x5aa, lpOverlapped=0x0) returned 1 [0036.384] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0036.384] SetErrorMode (uMode=0x1) returned 0x0 [0036.384] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0036.385] SetErrorMode (uMode=0x0) returned 0x1 [0036.454] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0036.454] SetErrorMode (uMode=0x1) returned 0x0 [0036.454] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.455] GetFileType (hFile=0x18c) returned 0x1 [0036.455] SetErrorMode (uMode=0x0) returned 0x1 [0036.455] GetFileType (hFile=0x18c) returned 0x1 [0036.456] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0036.456] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ADKXforGZ3gskyGj_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ADKXforGZ3gskyGj_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0036.456] SetErrorMode (uMode=0x1) returned 0x0 [0036.456] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe66c1890, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0036.456] SetErrorMode (uMode=0x0) returned 0x1 [0036.456] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ADKXforGZ3gskyGj_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\adkxforgz3gskygj_encrypted_by.whiterose")) returned 1 [0036.560] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpFilePart=0x0) returned 0x48 [0036.560] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpFilePart=0x0) returned 0x48 [0036.560] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0036.560] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0036.560] CoTaskMemFree (pv=0xffa70) [0036.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0036.560] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.561] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.561] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.561] SetErrorMode (uMode=0x1) returned 0x0 [0036.561] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.561] GetFileType (hFile=0x18c) returned 0x1 [0036.561] SetErrorMode (uMode=0x0) returned 0x1 [0036.561] GetFileType (hFile=0x18c) returned 0x1 [0036.561] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x75e [0036.561] ReadFile (in: hFile=0x18c, lpBuffer=0x28815a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28815a0*, lpNumberOfBytesRead=0x27e828*=0x75e, lpOverlapped=0x0) returned 1 [0036.563] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.563] SetErrorMode (uMode=0x1) returned 0x0 [0036.563] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0036.564] SetErrorMode (uMode=0x0) returned 0x1 [0036.625] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.626] SetErrorMode (uMode=0x1) returned 0x0 [0036.626] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.627] GetFileType (hFile=0x18c) returned 0x1 [0036.627] SetErrorMode (uMode=0x0) returned 0x1 [0036.627] GetFileType (hFile=0x18c) returned 0x1 [0036.627] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.628] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\gvsRGPev8Z4rSQz7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\gvsRGPev8Z4rSQz7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0036.628] SetErrorMode (uMode=0x1) returned 0x0 [0036.628] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe68647b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0036.628] SetErrorMode (uMode=0x0) returned 0x1 [0036.628] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\gvsRGPev8Z4rSQz7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\gvsrgpev8z4rsqz7_encrypted_by.whiterose")) returned 1 [0036.732] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0036.732] SetErrorMode (uMode=0x1) returned 0x0 [0036.732] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0036.733] GetFileType (hFile=0x18c) returned 0x1 [0036.733] SetErrorMode (uMode=0x0) returned 0x1 [0036.733] GetFileType (hFile=0x18c) returned 0x1 [0036.734] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0036.734] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0036.734] SetErrorMode (uMode=0x1) returned 0x0 [0036.734] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0036.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0036.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0036.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0036.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.738] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0036.739] SetErrorMode (uMode=0x0) returned 0x1 [0036.739] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0036.739] SetErrorMode (uMode=0x1) returned 0x0 [0036.739] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0036.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0036.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0036.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0036.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.740] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0036.741] SetErrorMode (uMode=0x0) returned 0x1 [0036.741] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpFilePart=0x0) returned 0x4f [0036.741] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpFilePart=0x0) returned 0x4f [0036.741] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0036.741] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0036.742] CoTaskMemFree (pv=0xffa70) [0036.742] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0036.742] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0036.742] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0036.742] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0036.742] SetErrorMode (uMode=0x1) returned 0x0 [0036.742] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.744] GetFileType (hFile=0x18c) returned 0x1 [0036.744] SetErrorMode (uMode=0x0) returned 0x1 [0036.744] GetFileType (hFile=0x18c) returned 0x1 [0036.744] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x5aa [0036.744] ReadFile (in: hFile=0x18c, lpBuffer=0x28fcf00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28fcf00*, lpNumberOfBytesRead=0x27e828*=0x5aa, lpOverlapped=0x0) returned 1 [0036.745] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0036.745] SetErrorMode (uMode=0x1) returned 0x0 [0036.745] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0036.745] SetErrorMode (uMode=0x0) returned 0x1 [0036.824] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0036.824] SetErrorMode (uMode=0x1) returned 0x0 [0036.825] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.826] GetFileType (hFile=0x18c) returned 0x1 [0036.826] SetErrorMode (uMode=0x0) returned 0x1 [0036.826] GetFileType (hFile=0x18c) returned 0x1 [0036.828] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0036.828] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\9ZGzk9iNopLJ9jYv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\9ZGzk9iNopLJ9jYv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0036.828] SetErrorMode (uMode=0x1) returned 0x0 [0036.828] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe6a53990, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0036.828] SetErrorMode (uMode=0x0) returned 0x1 [0036.828] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\9ZGzk9iNopLJ9jYv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\9zgzk9inoplj9jyv_encrypted_by.whiterose")) returned 1 [0036.935] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpFilePart=0x0) returned 0x48 [0036.935] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpFilePart=0x0) returned 0x48 [0036.935] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0036.935] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0036.935] CoTaskMemFree (pv=0xffa70) [0036.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0036.935] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.936] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.936] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.936] SetErrorMode (uMode=0x1) returned 0x0 [0036.936] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0036.936] GetFileType (hFile=0x18c) returned 0x1 [0036.936] SetErrorMode (uMode=0x0) returned 0x1 [0036.937] GetFileType (hFile=0x18c) returned 0x1 [0036.937] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x648 [0036.937] ReadFile (in: hFile=0x18c, lpBuffer=0x275ebb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x275ebb8*, lpNumberOfBytesRead=0x27e828*=0x648, lpOverlapped=0x0) returned 1 [0036.939] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0036.939] SetErrorMode (uMode=0x1) returned 0x0 [0036.939] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1 [0036.939] SetErrorMode (uMode=0x0) returned 0x1 [0037.001] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.002] SetErrorMode (uMode=0x1) returned 0x0 [0037.002] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.003] GetFileType (hFile=0x18c) returned 0x1 [0037.003] SetErrorMode (uMode=0x0) returned 0x1 [0037.003] GetFileType (hFile=0x18c) returned 0x1 [0037.003] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.004] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\bxzUZxfDvgjdGW5h_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\bxzUZxfDvgjdGW5h_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0037.004] SetErrorMode (uMode=0x1) returned 0x0 [0037.004] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe6bf68b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0037.004] SetErrorMode (uMode=0x0) returned 0x1 [0037.004] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\bxzUZxfDvgjdGW5h_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\bxzuzxfdvgjdgw5h_encrypted_by.whiterose")) returned 1 [0037.106] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0037.106] SetErrorMode (uMode=0x1) returned 0x0 [0037.107] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0037.107] GetFileType (hFile=0x18c) returned 0x1 [0037.107] SetErrorMode (uMode=0x0) returned 0x1 [0037.107] GetFileType (hFile=0x18c) returned 0x1 [0037.108] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.108] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.108] SetErrorMode (uMode=0x1) returned 0x0 [0037.109] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0037.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0037.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0037.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0037.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0037.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0037.111] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0037.112] SetErrorMode (uMode=0x0) returned 0x1 [0037.112] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.112] SetErrorMode (uMode=0x1) returned 0x0 [0037.112] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0037.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0037.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0037.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0037.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0037.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0037.113] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0037.114] SetErrorMode (uMode=0x0) returned 0x1 [0037.114] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpFilePart=0x0) returned 0x4a [0037.114] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpFilePart=0x0) returned 0x4a [0037.114] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0037.114] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.114] CoTaskMemFree (pv=0xffa70) [0037.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0037.115] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpFilePart=0x0) returned 0x4d [0037.115] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpFilePart=0x0) returned 0x4d [0037.115] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0037.115] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.115] CoTaskMemFree (pv=0xffa70) [0037.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0037.115] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0037.115] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0037.115] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0037.116] SetErrorMode (uMode=0x1) returned 0x0 [0037.116] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.116] GetFileType (hFile=0x18c) returned 0x1 [0037.117] SetErrorMode (uMode=0x0) returned 0x1 [0037.117] GetFileType (hFile=0x18c) returned 0x1 [0037.117] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xc72 [0037.117] ReadFile (in: hFile=0x18c, lpBuffer=0x27daeb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27daeb0*, lpNumberOfBytesRead=0x27e828*=0xc72, lpOverlapped=0x0) returned 1 [0037.118] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0037.118] SetErrorMode (uMode=0x1) returned 0x0 [0037.118] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1 [0037.118] SetErrorMode (uMode=0x0) returned 0x1 [0037.179] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0037.179] SetErrorMode (uMode=0x1) returned 0x0 [0037.180] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.180] GetFileType (hFile=0x18c) returned 0x1 [0037.180] SetErrorMode (uMode=0x0) returned 0x1 [0037.181] GetFileType (hFile=0x18c) returned 0x1 [0037.181] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0037.181] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\wI7obYSqFjiIdTL6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\wI7obYSqFjiIdTL6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0037.182] SetErrorMode (uMode=0x1) returned 0x0 [0037.182] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe6d997d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0037.182] SetErrorMode (uMode=0x0) returned 0x1 [0037.182] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\wI7obYSqFjiIdTL6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\wi7obysqfjiidtl6_encrypted_by.whiterose")) returned 1 [0037.277] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.278] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.278] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.278] SetErrorMode (uMode=0x1) returned 0x0 [0037.278] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.286] GetFileType (hFile=0x18c) returned 0x1 [0037.286] SetErrorMode (uMode=0x0) returned 0x1 [0037.286] GetFileType (hFile=0x18c) returned 0x1 [0037.286] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x106f [0037.286] ReadFile (in: hFile=0x18c, lpBuffer=0x283eae8, nNumberOfBytesToRead=0x106f, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x283eae8*, lpNumberOfBytesRead=0x27e828*=0x106f, lpOverlapped=0x0) returned 1 [0037.287] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.288] SetErrorMode (uMode=0x1) returned 0x0 [0037.288] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1 [0037.288] SetErrorMode (uMode=0x0) returned 0x1 [0037.348] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.348] SetErrorMode (uMode=0x1) returned 0x0 [0037.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.349] GetFileType (hFile=0x18c) returned 0x1 [0037.349] SetErrorMode (uMode=0x0) returned 0x1 [0037.349] GetFileType (hFile=0x18c) returned 0x1 [0037.349] WriteFile (in: hFile=0x18c, lpBuffer=0x28a0168*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a0168*, lpNumberOfBytesWritten=0x27e8a8*=0x1170, lpOverlapped=0x0) returned 1 [0037.350] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.350] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\nbk8RhWIWK21tn*v_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\nbk8RhWIWK21tn*v_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0037.362] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.362] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0037.368] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0037.368] SetErrorMode (uMode=0x1) returned 0x0 [0037.368] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0037.369] GetFileType (hFile=0x18c) returned 0x1 [0037.369] SetErrorMode (uMode=0x0) returned 0x1 [0037.369] GetFileType (hFile=0x18c) returned 0x1 [0037.371] WriteFile (in: hFile=0x18c, lpBuffer=0x28b3f58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x28b3f58*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0037.372] WriteFile (in: hFile=0x18c, lpBuffer=0x28b3f58*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x28b3f58*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0037.372] CloseHandle (hObject=0x18c) returned 1 [0037.373] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.373] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.373] SetErrorMode (uMode=0x1) returned 0x0 [0037.373] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0037.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0037.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0037.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0037.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0037.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0037.375] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0037.375] SetErrorMode (uMode=0x0) returned 0x1 [0037.375] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.375] SetErrorMode (uMode=0x1) returned 0x0 [0037.375] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0037.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0037.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0037.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0037.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0037.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0037.376] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0037.376] SetErrorMode (uMode=0x0) returned 0x1 [0037.376] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.376] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.376] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.376] SetErrorMode (uMode=0x1) returned 0x0 [0037.377] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.377] GetFileType (hFile=0x18c) returned 0x1 [0037.377] SetErrorMode (uMode=0x0) returned 0x1 [0037.377] GetFileType (hFile=0x18c) returned 0x1 [0037.377] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x978 [0037.377] ReadFile (in: hFile=0x18c, lpBuffer=0x28bc9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28bc9a0*, lpNumberOfBytesRead=0x27e828*=0x978, lpOverlapped=0x0) returned 1 [0037.378] CloseHandle (hObject=0x18c) returned 1 [0037.379] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.379] SetErrorMode (uMode=0x1) returned 0x0 [0037.379] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1 [0037.379] SetErrorMode (uMode=0x0) returned 0x1 [0037.477] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.477] SetErrorMode (uMode=0x1) returned 0x0 [0037.477] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.478] GetFileType (hFile=0x18c) returned 0x1 [0037.478] SetErrorMode (uMode=0x0) returned 0x1 [0037.478] GetFileType (hFile=0x18c) returned 0x1 [0037.478] WriteFile (in: hFile=0x18c, lpBuffer=0x271c070*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x271c070*, lpNumberOfBytesWritten=0x27e7c8*=0xa80, lpOverlapped=0x0) returned 1 [0037.480] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0037.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\YtkYQyBmr3wBoLfA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\YtkYQyBmr3wBoLfA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0037.481] SetErrorMode (uMode=0x1) returned 0x0 [0037.481] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe706d1f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0037.481] SetErrorMode (uMode=0x0) returned 0x1 [0037.481] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\YtkYQyBmr3wBoLfA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\ytkyqybmr3wbolfa_encrypted_by.whiterose")) returned 1 [0037.589] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpFilePart=0x0) returned 0x49 [0037.590] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpFilePart=0x0) returned 0x49 [0037.590] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0037.590] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.590] CoTaskMemFree (pv=0xffa70) [0037.590] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0037.590] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpFilePart=0x0) returned 0x4a [0037.590] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpFilePart=0x0) returned 0x4a [0037.590] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0037.590] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.590] CoTaskMemFree (pv=0xffa70) [0037.590] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0037.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0037.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0037.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0037.591] SetErrorMode (uMode=0x1) returned 0x0 [0037.591] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.591] GetFileType (hFile=0x18c) returned 0x1 [0037.591] SetErrorMode (uMode=0x0) returned 0x1 [0037.591] GetFileType (hFile=0x18c) returned 0x1 [0037.591] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x708 [0037.592] ReadFile (in: hFile=0x18c, lpBuffer=0x27202d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27202d0*, lpNumberOfBytesRead=0x27e828*=0x708, lpOverlapped=0x0) returned 1 [0037.593] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0037.593] SetErrorMode (uMode=0x1) returned 0x0 [0037.593] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1 [0037.593] SetErrorMode (uMode=0x0) returned 0x1 [0037.657] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0037.658] SetErrorMode (uMode=0x1) returned 0x0 [0037.658] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.659] GetFileType (hFile=0x18c) returned 0x1 [0037.659] SetErrorMode (uMode=0x0) returned 0x1 [0037.659] GetFileType (hFile=0x18c) returned 0x1 [0037.659] WriteFile (in: hFile=0x18c, lpBuffer=0x277ef60*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x277ef60*, lpNumberOfBytesWritten=0x27e7c8*=0x810, lpOverlapped=0x0) returned 1 [0037.661] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0037.661] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\nJpHIWJexNSAXHyl_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\nJpHIWJexNSAXHyl_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0037.661] SetErrorMode (uMode=0x1) returned 0x0 [0037.661] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7236270, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0037.661] SetErrorMode (uMode=0x0) returned 0x1 [0037.662] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\nJpHIWJexNSAXHyl_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\njphiwjexnsaxhyl_encrypted_by.whiterose")) returned 1 [0037.762] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0037.762] SetErrorMode (uMode=0x1) returned 0x0 [0037.762] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0037.763] GetFileType (hFile=0x18c) returned 0x1 [0037.763] SetErrorMode (uMode=0x0) returned 0x1 [0037.763] GetFileType (hFile=0x18c) returned 0x1 [0037.765] WriteFile (in: hFile=0x18c, lpBuffer=0x27923b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x27923b0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0037.766] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.766] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.767] SetErrorMode (uMode=0x1) returned 0x0 [0037.767] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0037.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0037.769] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0037.770] SetErrorMode (uMode=0x0) returned 0x1 [0037.770] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0037.770] SetErrorMode (uMode=0x1) returned 0x0 [0037.770] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0037.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0037.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0037.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0037.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0037.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0037.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0037.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0037.772] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0037.772] SetErrorMode (uMode=0x0) returned 0x1 [0037.773] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpFilePart=0x0) returned 0x4b [0037.773] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpFilePart=0x0) returned 0x4b [0037.773] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0037.773] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.773] CoTaskMemFree (pv=0xffa70) [0037.773] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0037.773] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0037.773] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0037.774] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0037.774] SetErrorMode (uMode=0x1) returned 0x0 [0037.774] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.775] GetFileType (hFile=0x18c) returned 0x1 [0037.775] SetErrorMode (uMode=0x0) returned 0x1 [0037.775] GetFileType (hFile=0x18c) returned 0x1 [0037.775] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x32b [0037.775] ReadFile (in: hFile=0x18c, lpBuffer=0x279b830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x279b830*, lpNumberOfBytesRead=0x27e828*=0x32b, lpOverlapped=0x0) returned 1 [0037.785] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0037.785] SetErrorMode (uMode=0x1) returned 0x0 [0037.785] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1 [0037.785] SetErrorMode (uMode=0x0) returned 0x1 [0037.848] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0037.848] SetErrorMode (uMode=0x1) returned 0x0 [0037.848] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0037.849] GetFileType (hFile=0x18c) returned 0x1 [0037.849] SetErrorMode (uMode=0x0) returned 0x1 [0037.849] GetFileType (hFile=0x18c) returned 0x1 [0037.850] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0037.850] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\IUWcVml3HRR6vFe0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\IUWcVml3HRR6vFe0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0037.850] SetErrorMode (uMode=0x1) returned 0x0 [0037.850] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe73ff2f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0037.850] SetErrorMode (uMode=0x0) returned 0x1 [0037.850] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\IUWcVml3HRR6vFe0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\iuwcvml3hrr6vfe0_encrypted_by.whiterose")) returned 1 [0038.051] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.051] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.051] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.051] SetErrorMode (uMode=0x1) returned 0x0 [0038.051] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.051] GetFileType (hFile=0x18c) returned 0x1 [0038.051] SetErrorMode (uMode=0x0) returned 0x1 [0038.052] GetFileType (hFile=0x18c) returned 0x1 [0038.052] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x16fc [0038.052] ReadFile (in: hFile=0x18c, lpBuffer=0x27fb3a0, nNumberOfBytesToRead=0x16fc, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27fb3a0*, lpNumberOfBytesRead=0x27e828*=0x16fc, lpOverlapped=0x0) returned 1 [0038.053] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.053] SetErrorMode (uMode=0x1) returned 0x0 [0038.053] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0038.053] SetErrorMode (uMode=0x0) returned 0x1 [0038.116] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.116] SetErrorMode (uMode=0x1) returned 0x0 [0038.117] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.118] GetFileType (hFile=0x18c) returned 0x1 [0038.118] SetErrorMode (uMode=0x0) returned 0x1 [0038.118] GetFileType (hFile=0x18c) returned 0x1 [0038.118] WriteFile (in: hFile=0x18c, lpBuffer=0x28601c0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x28601c0*, lpNumberOfBytesWritten=0x27e8a8*=0x1800, lpOverlapped=0x0) returned 1 [0038.119] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.119] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\vmlaNWf1stSsGRWD_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\vmlaNWf1stSsGRWD_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0038.119] SetErrorMode (uMode=0x1) returned 0x0 [0038.119] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7686a50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1 [0038.119] SetErrorMode (uMode=0x0) returned 0x1 [0038.119] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\vmlaNWf1stSsGRWD_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\vmlanwf1stssgrwd_encrypted_by.whiterose")) returned 1 [0038.229] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0038.229] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0038.230] SetErrorMode (uMode=0x1) returned 0x0 [0038.230] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.230] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.230] SetErrorMode (uMode=0x0) returned 0x1 [0038.231] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0038.231] SetErrorMode (uMode=0x1) returned 0x0 [0038.231] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.231] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.231] SetErrorMode (uMode=0x0) returned 0x1 [0038.231] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpFilePart=0x0) returned 0x51 [0038.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpFilePart=0x0) returned 0x51 [0038.232] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.232] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.232] CoTaskMemFree (pv=0xffa70) [0038.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpFilePart=0x0) returned 0x51 [0038.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpFilePart=0x0) returned 0x51 [0038.232] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.232] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.232] CoTaskMemFree (pv=0xffa70) [0038.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.233] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.233] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.233] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.233] SetErrorMode (uMode=0x1) returned 0x0 [0038.233] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.234] GetFileType (hFile=0x18c) returned 0x1 [0038.234] SetErrorMode (uMode=0x0) returned 0x1 [0038.234] GetFileType (hFile=0x18c) returned 0x1 [0038.234] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x543 [0038.234] ReadFile (in: hFile=0x18c, lpBuffer=0x2867ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2867ae0*, lpNumberOfBytesRead=0x27e788*=0x543, lpOverlapped=0x0) returned 1 [0038.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.236] SetErrorMode (uMode=0x1) returned 0x0 [0038.236] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1 [0038.236] SetErrorMode (uMode=0x0) returned 0x1 [0038.297] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.297] SetErrorMode (uMode=0x1) returned 0x0 [0038.297] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.298] GetFileType (hFile=0x18c) returned 0x1 [0038.298] SetErrorMode (uMode=0x0) returned 0x1 [0038.298] GetFileType (hFile=0x18c) returned 0x1 [0038.299] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.299] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\cd57dl4OBqEse0Pq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\cd57dl4OBqEse0Pq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0038.299] SetErrorMode (uMode=0x1) returned 0x0 [0038.299] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xe784fad0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0038.299] SetErrorMode (uMode=0x0) returned 0x1 [0038.299] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\cd57dl4OBqEse0Pq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\cd57dl4obqese0pq_encrypted_by.whiterose")) returned 1 [0038.401] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0038.401] SetErrorMode (uMode=0x1) returned 0x0 [0038.401] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0038.403] GetFileType (hFile=0x18c) returned 0x1 [0038.403] SetErrorMode (uMode=0x0) returned 0x1 [0038.403] GetFileType (hFile=0x18c) returned 0x1 [0038.404] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0038.404] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0038.404] SetErrorMode (uMode=0x1) returned 0x0 [0038.404] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.405] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.405] SetErrorMode (uMode=0x0) returned 0x1 [0038.405] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0038.405] SetErrorMode (uMode=0x1) returned 0x0 [0038.405] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.406] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.406] SetErrorMode (uMode=0x0) returned 0x1 [0038.406] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpFilePart=0x0) returned 0x51 [0038.406] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpFilePart=0x0) returned 0x51 [0038.406] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.406] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.406] CoTaskMemFree (pv=0xffa70) [0038.406] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.406] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpFilePart=0x0) returned 0x51 [0038.407] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpFilePart=0x0) returned 0x51 [0038.407] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.407] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.407] CoTaskMemFree (pv=0xffa70) [0038.407] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.407] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.407] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.407] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.407] SetErrorMode (uMode=0x1) returned 0x0 [0038.408] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.408] GetFileType (hFile=0x18c) returned 0x1 [0038.408] SetErrorMode (uMode=0x0) returned 0x1 [0038.408] GetFileType (hFile=0x18c) returned 0x1 [0038.408] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x5b1 [0038.408] ReadFile (in: hFile=0x18c, lpBuffer=0x28e2e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28e2e28*, lpNumberOfBytesRead=0x27e788*=0x5b1, lpOverlapped=0x0) returned 1 [0038.409] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.409] SetErrorMode (uMode=0x1) returned 0x0 [0038.410] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0038.410] SetErrorMode (uMode=0x0) returned 0x1 [0038.470] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.470] SetErrorMode (uMode=0x1) returned 0x0 [0038.470] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.471] GetFileType (hFile=0x18c) returned 0x1 [0038.471] SetErrorMode (uMode=0x0) returned 0x1 [0038.471] GetFileType (hFile=0x18c) returned 0x1 [0038.472] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.472] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\5HhOSF87SRmKtCdQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\5HhOSF87SRmKtCdQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0038.472] SetErrorMode (uMode=0x1) returned 0x0 [0038.473] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe79f29f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0038.473] SetErrorMode (uMode=0x0) returned 0x1 [0038.473] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\5HhOSF87SRmKtCdQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\5hhosf87srmktcdq_encrypted_by.whiterose")) returned 1 [0038.572] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0038.572] SetErrorMode (uMode=0x1) returned 0x0 [0038.573] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0038.575] GetFileType (hFile=0x18c) returned 0x1 [0038.575] SetErrorMode (uMode=0x0) returned 0x1 [0038.575] GetFileType (hFile=0x18c) returned 0x1 [0038.576] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0038.576] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0038.576] SetErrorMode (uMode=0x1) returned 0x0 [0038.576] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.577] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.577] SetErrorMode (uMode=0x0) returned 0x1 [0038.577] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0038.577] SetErrorMode (uMode=0x1) returned 0x0 [0038.577] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.577] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.578] SetErrorMode (uMode=0x0) returned 0x1 [0038.578] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpFilePart=0x0) returned 0x51 [0038.578] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpFilePart=0x0) returned 0x51 [0038.578] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.578] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.578] CoTaskMemFree (pv=0xffa70) [0038.578] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.578] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpFilePart=0x0) returned 0x51 [0038.578] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpFilePart=0x0) returned 0x51 [0038.578] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.579] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.579] CoTaskMemFree (pv=0xffa70) [0038.579] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.579] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.579] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.579] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.579] SetErrorMode (uMode=0x1) returned 0x0 [0038.579] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.579] GetFileType (hFile=0x18c) returned 0x1 [0038.579] SetErrorMode (uMode=0x0) returned 0x1 [0038.580] GetFileType (hFile=0x18c) returned 0x1 [0038.580] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x5b2 [0038.580] ReadFile (in: hFile=0x18c, lpBuffer=0x275e5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x275e5e8*, lpNumberOfBytesRead=0x27e788*=0x5b2, lpOverlapped=0x0) returned 1 [0038.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.581] SetErrorMode (uMode=0x1) returned 0x0 [0038.581] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1 [0038.581] SetErrorMode (uMode=0x0) returned 0x1 [0038.641] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.641] SetErrorMode (uMode=0x1) returned 0x0 [0038.642] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.643] GetFileType (hFile=0x18c) returned 0x1 [0038.643] SetErrorMode (uMode=0x0) returned 0x1 [0038.643] GetFileType (hFile=0x18c) returned 0x1 [0038.643] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.644] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\V*wwwZao*g63I8Cf_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\V*wwwZao*g63I8Cf_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0038.653] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x27bff0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0038.653] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 1 [0038.655] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0038.655] SetErrorMode (uMode=0x1) returned 0x0 [0038.655] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0038.655] GetFileType (hFile=0x18c) returned 0x1 [0038.655] SetErrorMode (uMode=0x0) returned 0x1 [0038.655] GetFileType (hFile=0x18c) returned 0x1 [0038.657] WriteFile (in: hFile=0x18c, lpBuffer=0x27d0658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x27d0658*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0038.658] WriteFile (in: hFile=0x18c, lpBuffer=0x27d0658*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d0658*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0038.659] CloseHandle (hObject=0x18c) returned 1 [0038.659] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0038.659] SetErrorMode (uMode=0x1) returned 0x0 [0038.659] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0038.660] GetFileType (hFile=0x18c) returned 0x1 [0038.660] SetErrorMode (uMode=0x0) returned 0x1 [0038.660] GetFileType (hFile=0x18c) returned 0x1 [0038.661] WriteFile (in: hFile=0x18c, lpBuffer=0x27e6778*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x27e6778*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0038.662] WriteFile (in: hFile=0x18c, lpBuffer=0x27e6778*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x27e6778*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0038.663] CloseHandle (hObject=0x18c) returned 1 [0038.663] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0038.663] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0038.663] SetErrorMode (uMode=0x1) returned 0x0 [0038.663] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.665] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.665] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0038.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0038.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0038.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0038.666] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.667] SetErrorMode (uMode=0x0) returned 0x1 [0038.667] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0038.667] SetErrorMode (uMode=0x1) returned 0x0 [0038.667] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0038.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0038.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0038.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0038.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0038.669] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0038.669] SetErrorMode (uMode=0x0) returned 0x1 [0038.669] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpFilePart=0x0) returned 0x4e [0038.670] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpFilePart=0x0) returned 0x4e [0038.670] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.670] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.670] CoTaskMemFree (pv=0xffa70) [0038.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.670] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0038.670] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0038.670] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0038.670] SetErrorMode (uMode=0x1) returned 0x0 [0038.671] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.671] GetFileType (hFile=0x18c) returned 0x1 [0038.671] SetErrorMode (uMode=0x0) returned 0x1 [0038.671] GetFileType (hFile=0x18c) returned 0x1 [0038.671] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x567 [0038.671] ReadFile (in: hFile=0x18c, lpBuffer=0x27ef9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27ef9b8*, lpNumberOfBytesRead=0x27e828*=0x567, lpOverlapped=0x0) returned 1 [0038.673] CloseHandle (hObject=0x18c) returned 1 [0038.673] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0038.673] SetErrorMode (uMode=0x1) returned 0x0 [0038.674] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1 [0038.674] SetErrorMode (uMode=0x0) returned 0x1 [0038.781] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0038.781] SetErrorMode (uMode=0x1) returned 0x0 [0038.781] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.785] GetFileType (hFile=0x18c) returned 0x1 [0038.785] SetErrorMode (uMode=0x0) returned 0x1 [0038.785] GetFileType (hFile=0x18c) returned 0x1 [0038.787] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0038.787] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\vrwmvfQ4FzBDEuIk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\vrwmvfQ4FzBDEuIk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0038.787] SetErrorMode (uMode=0x1) returned 0x0 [0038.787] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7cec570, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0038.787] SetErrorMode (uMode=0x0) returned 0x1 [0038.787] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\vrwmvfQ4FzBDEuIk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\vrwmvfq4fzbdeuik_encrypted_by.whiterose")) returned 1 [0038.884] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpFilePart=0x0) returned 0x4b [0038.885] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpFilePart=0x0) returned 0x4b [0038.885] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0038.885] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0038.885] CoTaskMemFree (pv=0xffa70) [0038.885] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0038.885] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.885] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.885] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.885] SetErrorMode (uMode=0x1) returned 0x0 [0038.885] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.886] GetFileType (hFile=0x18c) returned 0x1 [0038.886] SetErrorMode (uMode=0x0) returned 0x1 [0038.886] GetFileType (hFile=0x18c) returned 0x1 [0038.886] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x93a [0038.886] ReadFile (in: hFile=0x18c, lpBuffer=0x28506c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28506c8*, lpNumberOfBytesRead=0x27e828*=0x93a, lpOverlapped=0x0) returned 1 [0038.889] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.889] SetErrorMode (uMode=0x1) returned 0x0 [0038.889] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0038.889] SetErrorMode (uMode=0x0) returned 0x1 [0038.953] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.953] SetErrorMode (uMode=0x1) returned 0x0 [0038.953] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0038.954] GetFileType (hFile=0x18c) returned 0x1 [0038.954] SetErrorMode (uMode=0x0) returned 0x1 [0038.954] GetFileType (hFile=0x18c) returned 0x1 [0038.955] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0038.955] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\VIB8oDYVKkWBcq28_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\VIB8oDYVKkWBcq28_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0038.955] SetErrorMode (uMode=0x1) returned 0x0 [0038.955] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e8f490, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0038.955] SetErrorMode (uMode=0x0) returned 0x1 [0038.955] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\VIB8oDYVKkWBcq28_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\vib8odyvkkwbcq28_encrypted_by.whiterose")) returned 1 [0039.056] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0039.056] SetErrorMode (uMode=0x1) returned 0x0 [0039.056] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0039.057] GetFileType (hFile=0x18c) returned 0x1 [0039.057] SetErrorMode (uMode=0x0) returned 0x1 [0039.057] GetFileType (hFile=0x18c) returned 0x1 [0039.058] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.058] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.059] SetErrorMode (uMode=0x1) returned 0x0 [0039.059] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0039.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0039.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0039.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0039.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.061] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0039.061] SetErrorMode (uMode=0x0) returned 0x1 [0039.061] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.062] SetErrorMode (uMode=0x1) returned 0x0 [0039.062] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0039.062] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0039.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0039.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0039.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.063] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0039.064] SetErrorMode (uMode=0x0) returned 0x1 [0039.064] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpFilePart=0x0) returned 0x48 [0039.064] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpFilePart=0x0) returned 0x48 [0039.064] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0039.064] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.064] CoTaskMemFree (pv=0xffa70) [0039.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0039.064] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpFilePart=0x0) returned 0x4e [0039.064] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpFilePart=0x0) returned 0x4e [0039.064] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0039.065] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.065] CoTaskMemFree (pv=0xffa70) [0039.065] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0039.065] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0039.065] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0039.065] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0039.065] SetErrorMode (uMode=0x1) returned 0x0 [0039.065] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.066] GetFileType (hFile=0x18c) returned 0x1 [0039.066] SetErrorMode (uMode=0x0) returned 0x1 [0039.066] GetFileType (hFile=0x18c) returned 0x1 [0039.066] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x4cf [0039.066] ReadFile (in: hFile=0x18c, lpBuffer=0x28cd700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28cd700*, lpNumberOfBytesRead=0x27e828*=0x4cf, lpOverlapped=0x0) returned 1 [0039.068] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0039.068] SetErrorMode (uMode=0x1) returned 0x0 [0039.068] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1 [0039.068] SetErrorMode (uMode=0x0) returned 0x1 [0039.134] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0039.134] SetErrorMode (uMode=0x1) returned 0x0 [0039.134] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.135] GetFileType (hFile=0x18c) returned 0x1 [0039.135] SetErrorMode (uMode=0x0) returned 0x1 [0039.135] GetFileType (hFile=0x18c) returned 0x1 [0039.136] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0039.136] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\fT9CA5AHUnV8LoIU_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\fT9CA5AHUnV8LoIU_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0039.136] SetErrorMode (uMode=0x1) returned 0x0 [0039.136] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8058510, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0039.136] SetErrorMode (uMode=0x0) returned 0x1 [0039.136] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\fT9CA5AHUnV8LoIU_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\ft9ca5ahunv8loiu_encrypted_by.whiterose")) returned 1 [0039.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.244] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.244] SetErrorMode (uMode=0x1) returned 0x0 [0039.244] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.244] GetFileType (hFile=0x18c) returned 0x1 [0039.244] SetErrorMode (uMode=0x0) returned 0x1 [0039.244] GetFileType (hFile=0x18c) returned 0x1 [0039.244] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x73c [0039.244] ReadFile (in: hFile=0x18c, lpBuffer=0x272e1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x272e1e0*, lpNumberOfBytesRead=0x27e828*=0x73c, lpOverlapped=0x0) returned 1 [0039.246] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.246] SetErrorMode (uMode=0x1) returned 0x0 [0039.246] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1 [0039.246] SetErrorMode (uMode=0x0) returned 0x1 [0039.309] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.309] SetErrorMode (uMode=0x1) returned 0x0 [0039.309] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.310] GetFileType (hFile=0x18c) returned 0x1 [0039.310] SetErrorMode (uMode=0x0) returned 0x1 [0039.310] GetFileType (hFile=0x18c) returned 0x1 [0039.311] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.311] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\WKQw2umw4kH8jGBG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\WKQw2umw4kH8jGBG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0039.312] SetErrorMode (uMode=0x1) returned 0x0 [0039.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe81fb430, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0039.312] SetErrorMode (uMode=0x0) returned 0x1 [0039.312] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\WKQw2umw4kH8jGBG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\wkqw2umw4kh8jgbg_encrypted_by.whiterose")) returned 1 [0039.419] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0039.420] SetErrorMode (uMode=0x1) returned 0x0 [0039.420] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0039.420] GetFileType (hFile=0x18c) returned 0x1 [0039.420] SetErrorMode (uMode=0x0) returned 0x1 [0039.421] GetFileType (hFile=0x18c) returned 0x1 [0039.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.422] SetErrorMode (uMode=0x1) returned 0x0 [0039.422] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0039.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0039.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0039.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0039.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0039.423] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0039.423] SetErrorMode (uMode=0x0) returned 0x1 [0039.423] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.423] SetErrorMode (uMode=0x1) returned 0x0 [0039.423] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0039.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0039.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0039.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0039.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0039.424] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0039.424] SetErrorMode (uMode=0x0) returned 0x1 [0039.424] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.424] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.424] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.425] SetErrorMode (uMode=0x1) returned 0x0 [0039.425] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.426] GetFileType (hFile=0x18c) returned 0x1 [0039.426] SetErrorMode (uMode=0x0) returned 0x1 [0039.426] GetFileType (hFile=0x18c) returned 0x1 [0039.426] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x1861 [0039.426] ReadFile (in: hFile=0x18c, lpBuffer=0x27a8970, nNumberOfBytesToRead=0x1861, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27a8970*, lpNumberOfBytesRead=0x27e828*=0x1861, lpOverlapped=0x0) returned 1 [0039.427] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.427] SetErrorMode (uMode=0x1) returned 0x0 [0039.428] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1 [0039.428] SetErrorMode (uMode=0x0) returned 0x1 [0039.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.491] SetErrorMode (uMode=0x1) returned 0x0 [0039.491] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.492] GetFileType (hFile=0x18c) returned 0x1 [0039.492] SetErrorMode (uMode=0x0) returned 0x1 [0039.492] GetFileType (hFile=0x18c) returned 0x1 [0039.492] WriteFile (in: hFile=0x18c, lpBuffer=0x280dd88*, nNumberOfBytesToWrite=0x1970, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x280dd88*, lpNumberOfBytesWritten=0x27e8a8*=0x1970, lpOverlapped=0x0) returned 1 [0039.493] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.493] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Nd5eGNrOjLpny*18_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Nd5eGNrOjLpny*18_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0039.503] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.503] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0039.506] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpFilePart=0x0) returned 0x4a [0039.506] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpFilePart=0x0) returned 0x4a [0039.506] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0039.506] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.506] CoTaskMemFree (pv=0xffa70) [0039.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0039.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpFilePart=0x0) returned 0x4b [0039.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpFilePart=0x0) returned 0x4b [0039.507] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0039.507] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.507] CoTaskMemFree (pv=0xffa70) [0039.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0039.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0039.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0039.508] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0039.508] SetErrorMode (uMode=0x1) returned 0x0 [0039.508] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.508] GetFileType (hFile=0x18c) returned 0x1 [0039.508] SetErrorMode (uMode=0x0) returned 0x1 [0039.508] GetFileType (hFile=0x18c) returned 0x1 [0039.508] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x251f [0039.508] ReadFile (in: hFile=0x18c, lpBuffer=0x28129e8, nNumberOfBytesToRead=0x251f, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28129e8*, lpNumberOfBytesRead=0x27e828*=0x251f, lpOverlapped=0x0) returned 1 [0039.510] CloseHandle (hObject=0x18c) returned 1 [0039.511] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0039.511] SetErrorMode (uMode=0x1) returned 0x0 [0039.511] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1 [0039.511] SetErrorMode (uMode=0x0) returned 0x1 [0039.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0039.622] SetErrorMode (uMode=0x1) returned 0x0 [0039.623] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.623] GetFileType (hFile=0x18c) returned 0x1 [0039.623] SetErrorMode (uMode=0x0) returned 0x1 [0039.623] GetFileType (hFile=0x18c) returned 0x1 [0039.624] WriteFile (in: hFile=0x18c, lpBuffer=0x287c570*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x287c570*, lpNumberOfBytesWritten=0x27e8a8*=0x2620, lpOverlapped=0x0) returned 1 [0039.625] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0039.625] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\y8ATTYnWYwShaKAP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\y8ATTYnWYwShaKAP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0039.626] SetErrorMode (uMode=0x1) returned 0x0 [0039.626] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xe84f4fb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2620)) returned 1 [0039.626] SetErrorMode (uMode=0x0) returned 0x1 [0039.626] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\y8ATTYnWYwShaKAP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\y8attynwywshakap_encrypted_by.whiterose")) returned 1 [0039.727] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0039.727] SetErrorMode (uMode=0x1) returned 0x0 [0039.727] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0039.729] GetFileType (hFile=0x18c) returned 0x1 [0039.729] SetErrorMode (uMode=0x0) returned 0x1 [0039.729] GetFileType (hFile=0x18c) returned 0x1 [0039.731] WriteFile (in: hFile=0x18c, lpBuffer=0x2891340*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2891340*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0039.732] WriteFile (in: hFile=0x18c, lpBuffer=0x2891340*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2891340*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0039.733] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.733] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.733] SetErrorMode (uMode=0x1) returned 0x0 [0039.733] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0039.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0039.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0039.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0039.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0039.736] SetErrorMode (uMode=0x0) returned 0x1 [0039.736] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0039.736] SetErrorMode (uMode=0x1) returned 0x0 [0039.737] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0039.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0039.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0039.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0039.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.738] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0039.738] SetErrorMode (uMode=0x0) returned 0x1 [0039.738] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpFilePart=0x0) returned 0x4d [0039.739] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpFilePart=0x0) returned 0x4d [0039.739] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0039.739] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.739] CoTaskMemFree (pv=0xffa70) [0039.739] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0039.739] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0039.739] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0039.739] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0039.739] SetErrorMode (uMode=0x1) returned 0x0 [0039.740] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.740] GetFileType (hFile=0x18c) returned 0x1 [0039.740] SetErrorMode (uMode=0x0) returned 0x1 [0039.740] GetFileType (hFile=0x18c) returned 0x1 [0039.740] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x646 [0039.741] ReadFile (in: hFile=0x18c, lpBuffer=0x289a650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x289a650*, lpNumberOfBytesRead=0x27e828*=0x646, lpOverlapped=0x0) returned 1 [0039.742] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0039.742] SetErrorMode (uMode=0x1) returned 0x0 [0039.742] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1 [0039.742] SetErrorMode (uMode=0x0) returned 0x1 [0039.804] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0039.804] SetErrorMode (uMode=0x1) returned 0x0 [0039.804] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.811] GetFileType (hFile=0x18c) returned 0x1 [0039.811] SetErrorMode (uMode=0x0) returned 0x1 [0039.811] GetFileType (hFile=0x18c) returned 0x1 [0039.812] WriteFile (in: hFile=0x18c, lpBuffer=0x28f7218*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x28f7218*, lpNumberOfBytesWritten=0x27e7c8*=0x750, lpOverlapped=0x0) returned 1 [0039.812] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0039.813] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\NL0QxsekVOgY3tnX_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\NL0QxsekVOgY3tnX_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0039.813] SetErrorMode (uMode=0x1) returned 0x0 [0039.813] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe86be030, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0039.813] SetErrorMode (uMode=0x0) returned 0x1 [0039.813] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\NL0QxsekVOgY3tnX_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\nl0qxsekvogy3tnx_encrypted_by.whiterose")) returned 1 [0039.918] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpFilePart=0x0) returned 0x4a [0039.918] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpFilePart=0x0) returned 0x4a [0039.918] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0039.918] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.919] CoTaskMemFree (pv=0xffa70) [0039.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0039.919] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.919] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.919] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.919] SetErrorMode (uMode=0x1) returned 0x0 [0039.919] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.921] GetFileType (hFile=0x18c) returned 0x1 [0039.921] SetErrorMode (uMode=0x0) returned 0x1 [0039.921] GetFileType (hFile=0x18c) returned 0x1 [0039.921] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x7c4 [0039.921] ReadFile (in: hFile=0x18c, lpBuffer=0x28faaa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28faaa8*, lpNumberOfBytesRead=0x27e828*=0x7c4, lpOverlapped=0x0) returned 1 [0039.923] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.923] SetErrorMode (uMode=0x1) returned 0x0 [0039.923] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1 [0039.923] SetErrorMode (uMode=0x0) returned 0x1 [0039.987] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.987] SetErrorMode (uMode=0x1) returned 0x0 [0039.987] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0039.988] GetFileType (hFile=0x18c) returned 0x1 [0039.988] SetErrorMode (uMode=0x0) returned 0x1 [0039.988] GetFileType (hFile=0x18c) returned 0x1 [0039.988] WriteFile (in: hFile=0x18c, lpBuffer=0x2759f78*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x2759f78*, lpNumberOfBytesWritten=0x27e7c8*=0x8d0, lpOverlapped=0x0) returned 1 [0039.989] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.989] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\uDRKYS2*5M3YAMhK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\uDRKYS2*5M3YAMhK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0039.991] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0039.991] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0040.031] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0040.031] SetErrorMode (uMode=0x1) returned 0x0 [0040.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0040.031] GetFileType (hFile=0x18c) returned 0x1 [0040.031] SetErrorMode (uMode=0x0) returned 0x1 [0040.031] GetFileType (hFile=0x18c) returned 0x1 [0040.033] WriteFile (in: hFile=0x18c, lpBuffer=0x276d800*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x276d800*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0040.034] WriteFile (in: hFile=0x18c, lpBuffer=0x276d800*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x276d800*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0040.034] CloseHandle (hObject=0x18c) returned 1 [0040.034] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.034] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.035] SetErrorMode (uMode=0x1) returned 0x0 [0040.035] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0040.039] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.039] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0040.039] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0040.039] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0040.039] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.039] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.039] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0040.040] SetErrorMode (uMode=0x0) returned 0x1 [0040.040] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.040] SetErrorMode (uMode=0x1) returned 0x0 [0040.040] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0040.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0040.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0040.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0040.042] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.042] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.042] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0040.042] SetErrorMode (uMode=0x0) returned 0x1 [0040.043] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpFilePart=0x0) returned 0x4d [0040.043] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpFilePart=0x0) returned 0x4d [0040.043] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.043] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.043] CoTaskMemFree (pv=0xffa70) [0040.043] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.043] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0040.043] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0040.044] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0040.044] SetErrorMode (uMode=0x1) returned 0x0 [0040.044] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.045] GetFileType (hFile=0x18c) returned 0x1 [0040.045] SetErrorMode (uMode=0x0) returned 0x1 [0040.045] GetFileType (hFile=0x18c) returned 0x1 [0040.045] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x5ac [0040.045] ReadFile (in: hFile=0x18c, lpBuffer=0x2776a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2776a78*, lpNumberOfBytesRead=0x27e828*=0x5ac, lpOverlapped=0x0) returned 1 [0040.047] CloseHandle (hObject=0x18c) returned 1 [0040.047] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0040.047] SetErrorMode (uMode=0x1) returned 0x0 [0040.047] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0040.047] SetErrorMode (uMode=0x0) returned 0x1 [0040.143] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0040.143] SetErrorMode (uMode=0x1) returned 0x0 [0040.143] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.144] GetFileType (hFile=0x18c) returned 0x1 [0040.144] SetErrorMode (uMode=0x0) returned 0x1 [0040.144] GetFileType (hFile=0x18c) returned 0x1 [0040.146] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0040.146] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Njeqo83RwS9ywOMO_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Njeqo83RwS9ywOMO_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0040.146] SetErrorMode (uMode=0x1) returned 0x0 [0040.146] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xe89ddd10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0040.146] SetErrorMode (uMode=0x0) returned 0x1 [0040.146] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Njeqo83RwS9ywOMO_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\njeqo83rws9ywomo_encrypted_by.whiterose")) returned 1 [0040.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpFilePart=0x0) returned 0x49 [0040.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpFilePart=0x0) returned 0x49 [0040.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.242] CoTaskMemFree (pv=0xffa70) [0040.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.243] SetErrorMode (uMode=0x1) returned 0x0 [0040.243] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.244] GetFileType (hFile=0x18c) returned 0x1 [0040.244] SetErrorMode (uMode=0x0) returned 0x1 [0040.244] GetFileType (hFile=0x18c) returned 0x1 [0040.244] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x750 [0040.244] ReadFile (in: hFile=0x18c, lpBuffer=0x27d87b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27d87b0*, lpNumberOfBytesRead=0x27e828*=0x750, lpOverlapped=0x0) returned 1 [0040.245] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.245] SetErrorMode (uMode=0x1) returned 0x0 [0040.245] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0040.246] SetErrorMode (uMode=0x0) returned 0x1 [0040.306] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.306] SetErrorMode (uMode=0x1) returned 0x0 [0040.306] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.307] GetFileType (hFile=0x18c) returned 0x1 [0040.307] SetErrorMode (uMode=0x0) returned 0x1 [0040.307] GetFileType (hFile=0x18c) returned 0x1 [0040.308] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.308] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\QS9L4vZHDJG36pSA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\QS9L4vZHDJG36pSA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0040.308] SetErrorMode (uMode=0x1) returned 0x0 [0040.308] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xe8b80c30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0040.308] SetErrorMode (uMode=0x0) returned 0x1 [0040.308] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\QS9L4vZHDJG36pSA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\qs9l4vzhdjg36psa_encrypted_by.whiterose")) returned 1 [0040.413] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0040.413] SetErrorMode (uMode=0x1) returned 0x0 [0040.413] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0040.414] GetFileType (hFile=0x18c) returned 0x1 [0040.414] SetErrorMode (uMode=0x0) returned 0x1 [0040.414] GetFileType (hFile=0x18c) returned 0x1 [0040.415] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.415] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.416] SetErrorMode (uMode=0x1) returned 0x0 [0040.416] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0040.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0040.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0040.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0040.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.418] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0040.418] SetErrorMode (uMode=0x0) returned 0x1 [0040.418] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.419] SetErrorMode (uMode=0x1) returned 0x0 [0040.419] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0040.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0040.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0040.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0040.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.420] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0040.420] SetErrorMode (uMode=0x0) returned 0x1 [0040.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpFilePart=0x0) returned 0x4b [0040.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpFilePart=0x0) returned 0x4b [0040.421] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.421] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.421] CoTaskMemFree (pv=0xffa70) [0040.421] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpFilePart=0x0) returned 0x4c [0040.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpFilePart=0x0) returned 0x4c [0040.421] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.421] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.421] CoTaskMemFree (pv=0xffa70) [0040.421] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0040.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0040.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0040.422] SetErrorMode (uMode=0x1) returned 0x0 [0040.422] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.424] GetFileType (hFile=0x18c) returned 0x1 [0040.424] SetErrorMode (uMode=0x0) returned 0x1 [0040.424] GetFileType (hFile=0x18c) returned 0x1 [0040.424] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x391 [0040.424] ReadFile (in: hFile=0x18c, lpBuffer=0x28549a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28549a8*, lpNumberOfBytesRead=0x27e828*=0x391, lpOverlapped=0x0) returned 1 [0040.425] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0040.425] SetErrorMode (uMode=0x1) returned 0x0 [0040.425] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1 [0040.425] SetErrorMode (uMode=0x0) returned 0x1 [0040.493] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0040.493] SetErrorMode (uMode=0x1) returned 0x0 [0040.493] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.494] GetFileType (hFile=0x18c) returned 0x1 [0040.494] SetErrorMode (uMode=0x0) returned 0x1 [0040.494] GetFileType (hFile=0x18c) returned 0x1 [0040.495] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0040.495] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\a4EffXBuNMFxDnzn_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\a4EffXBuNMFxDnzn_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0040.495] SetErrorMode (uMode=0x1) returned 0x0 [0040.495] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8d49cb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0040.495] SetErrorMode (uMode=0x0) returned 0x1 [0040.495] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\a4EffXBuNMFxDnzn_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\a4effxbunmfxdnzn_encrypted_by.whiterose")) returned 1 [0040.600] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.601] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.601] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.601] SetErrorMode (uMode=0x1) returned 0x0 [0040.601] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.601] GetFileType (hFile=0x18c) returned 0x1 [0040.601] SetErrorMode (uMode=0x0) returned 0x1 [0040.601] GetFileType (hFile=0x18c) returned 0x1 [0040.601] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x5ac [0040.601] ReadFile (in: hFile=0x18c, lpBuffer=0x28b4c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28b4c70*, lpNumberOfBytesRead=0x27e828*=0x5ac, lpOverlapped=0x0) returned 1 [0040.603] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.603] SetErrorMode (uMode=0x1) returned 0x0 [0040.603] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0040.603] SetErrorMode (uMode=0x0) returned 0x1 [0040.663] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.663] SetErrorMode (uMode=0x1) returned 0x0 [0040.663] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.664] GetFileType (hFile=0x18c) returned 0x1 [0040.664] SetErrorMode (uMode=0x0) returned 0x1 [0040.664] GetFileType (hFile=0x18c) returned 0x1 [0040.665] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.665] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\od5n0eQO48ajSb*N_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\od5n0eQO48ajSb*N_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0040.674] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0040.674] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0040.676] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0040.676] SetErrorMode (uMode=0x1) returned 0x0 [0040.676] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0040.676] GetFileType (hFile=0x18c) returned 0x1 [0040.676] SetErrorMode (uMode=0x0) returned 0x1 [0040.676] GetFileType (hFile=0x18c) returned 0x1 [0040.678] WriteFile (in: hFile=0x18c, lpBuffer=0x2726dd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2726dd0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0040.679] WriteFile (in: hFile=0x18c, lpBuffer=0x2726dd0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2726dd0*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0040.680] CloseHandle (hObject=0x18c) returned 1 [0040.680] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.680] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.680] SetErrorMode (uMode=0x1) returned 0x0 [0040.680] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0040.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0040.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0040.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0040.684] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0040.684] SetErrorMode (uMode=0x0) returned 0x1 [0040.685] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0040.685] SetErrorMode (uMode=0x1) returned 0x0 [0040.685] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0040.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0040.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0040.687] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0040.688] SetErrorMode (uMode=0x0) returned 0x1 [0040.688] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0040.689] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0040.689] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0040.689] SetErrorMode (uMode=0x1) returned 0x0 [0040.689] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.690] GetFileType (hFile=0x18c) returned 0x1 [0040.690] SetErrorMode (uMode=0x0) returned 0x1 [0040.690] GetFileType (hFile=0x18c) returned 0x1 [0040.690] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x91975 [0040.692] ReadFile (in: hFile=0x18c, lpBuffer=0x126f4228, nNumberOfBytesToRead=0x91975, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x126f4228*, lpNumberOfBytesRead=0x27e828*=0x91975, lpOverlapped=0x0) returned 1 [0040.703] CloseHandle (hObject=0x18c) returned 1 [0040.710] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0040.710] SetErrorMode (uMode=0x1) returned 0x0 [0040.710] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1 [0040.710] SetErrorMode (uMode=0x0) returned 0x1 [0040.857] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0040.857] SetErrorMode (uMode=0x1) returned 0x0 [0040.857] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.863] GetFileType (hFile=0x18c) returned 0x1 [0040.863] SetErrorMode (uMode=0x0) returned 0x1 [0040.863] GetFileType (hFile=0x18c) returned 0x1 [0040.863] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x91a80, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e8a8*=0x91a80, lpOverlapped=0x0) returned 1 [0040.873] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0040.874] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\07A3lpMWHSDcuLLu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\07A3lpMWHSDcuLLu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0040.874] SetErrorMode (uMode=0x1) returned 0x0 [0040.874] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe90dbdb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x91a80)) returned 1 [0040.874] SetErrorMode (uMode=0x0) returned 0x1 [0040.874] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\07A3lpMWHSDcuLLu_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\07a3lpmwhsdcullu_encrypted_by.whiterose")) returned 1 [0040.975] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpFilePart=0x0) returned 0x47 [0040.975] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpFilePart=0x0) returned 0x47 [0040.975] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.975] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.975] CoTaskMemFree (pv=0xffa70) [0040.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.975] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", lpFilePart=0x0) returned 0x4a [0040.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", lpFilePart=0x0) returned 0x4a [0040.976] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.976] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.976] CoTaskMemFree (pv=0xffa70) [0040.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpFilePart=0x0) returned 0x4b [0040.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpFilePart=0x0) returned 0x4b [0040.976] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.976] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.976] CoTaskMemFree (pv=0xffa70) [0040.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpFilePart=0x0) returned 0x5a [0040.977] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpFilePart=0x0) returned 0x5a [0040.977] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.977] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.977] CoTaskMemFree (pv=0xffa70) [0040.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.977] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", lpFilePart=0x0) returned 0x4a [0040.977] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", lpFilePart=0x0) returned 0x4a [0040.977] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.977] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.977] CoTaskMemFree (pv=0xffa70) [0040.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.977] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpFilePart=0x0) returned 0x4b [0040.978] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpFilePart=0x0) returned 0x4b [0040.978] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.978] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.978] CoTaskMemFree (pv=0xffa70) [0040.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.978] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpFilePart=0x0) returned 0x4c [0040.978] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpFilePart=0x0) returned 0x4c [0040.978] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0040.978] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.978] CoTaskMemFree (pv=0xffa70) [0040.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0040.978] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0040.979] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0040.979] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0040.979] SetErrorMode (uMode=0x1) returned 0x0 [0040.979] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0040.979] GetFileType (hFile=0x18c) returned 0x1 [0040.979] SetErrorMode (uMode=0x0) returned 0x1 [0040.979] GetFileType (hFile=0x18c) returned 0x1 [0040.979] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x15b5 [0040.980] ReadFile (in: hFile=0x18c, lpBuffer=0x26f34d0, nNumberOfBytesToRead=0x15b5, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x26f34d0*, lpNumberOfBytesRead=0x27e828*=0x15b5, lpOverlapped=0x0) returned 1 [0040.998] CloseHandle (hObject=0x18c) returned 1 [0040.999] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0041.000] SetErrorMode (uMode=0x1) returned 0x0 [0041.000] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1 [0041.000] SetErrorMode (uMode=0x0) returned 0x1 [0041.090] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0041.090] SetErrorMode (uMode=0x1) returned 0x0 [0041.090] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.091] GetFileType (hFile=0x18c) returned 0x1 [0041.091] SetErrorMode (uMode=0x0) returned 0x1 [0041.091] GetFileType (hFile=0x18c) returned 0x1 [0041.092] WriteFile (in: hFile=0x18c, lpBuffer=0x2758530*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x2758530*, lpNumberOfBytesWritten=0x27e8a8*=0x16c0, lpOverlapped=0x0) returned 1 [0041.093] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0041.093] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\MXuc16prj2IiZLXm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\MXuc16prj2IiZLXm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0041.094] SetErrorMode (uMode=0x1) returned 0x0 [0041.094] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe92f10f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0041.094] SetErrorMode (uMode=0x0) returned 0x1 [0041.094] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\MXuc16prj2IiZLXm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\mxuc16prj2iizlxm_encrypted_by.whiterose")) returned 1 [0041.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpFilePart=0x0) returned 0x4f [0041.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpFilePart=0x0) returned 0x4f [0041.194] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.194] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.194] CoTaskMemFree (pv=0xffa70) [0041.194] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.195] SetErrorMode (uMode=0x1) returned 0x0 [0041.195] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.195] GetFileType (hFile=0x18c) returned 0x1 [0041.195] SetErrorMode (uMode=0x0) returned 0x1 [0041.195] GetFileType (hFile=0x18c) returned 0x1 [0041.195] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x333 [0041.195] ReadFile (in: hFile=0x18c, lpBuffer=0x275c3c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x275c3c0*, lpNumberOfBytesRead=0x27e828*=0x333, lpOverlapped=0x0) returned 1 [0041.197] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.197] SetErrorMode (uMode=0x1) returned 0x0 [0041.197] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0041.197] SetErrorMode (uMode=0x0) returned 0x1 [0041.258] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.258] SetErrorMode (uMode=0x1) returned 0x0 [0041.258] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.259] GetFileType (hFile=0x18c) returned 0x1 [0041.259] SetErrorMode (uMode=0x0) returned 0x1 [0041.259] GetFileType (hFile=0x18c) returned 0x1 [0041.259] WriteFile (in: hFile=0x18c, lpBuffer=0x27bd588*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x27bd588*, lpNumberOfBytesWritten=0x27e7c8*=0x440, lpOverlapped=0x0) returned 1 [0041.260] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.260] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\FVSKpA6OhpjuQaxv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\FVSKpA6OhpjuQaxv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0041.260] SetErrorMode (uMode=0x1) returned 0x0 [0041.260] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe9494010, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0041.260] SetErrorMode (uMode=0x0) returned 0x1 [0041.260] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\FVSKpA6OhpjuQaxv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\fvskpa6ohpjuqaxv_encrypted_by.whiterose")) returned 1 [0041.365] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", lpFilePart=0x0) returned 0x4b [0041.365] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", lpFilePart=0x0) returned 0x4b [0041.365] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.365] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.365] CoTaskMemFree (pv=0xffa70) [0041.365] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.365] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpFilePart=0x0) returned 0x49 [0041.366] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpFilePart=0x0) returned 0x49 [0041.366] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.366] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.366] CoTaskMemFree (pv=0xffa70) [0041.366] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.366] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpFilePart=0x0) returned 0x48 [0041.366] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpFilePart=0x0) returned 0x48 [0041.366] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.366] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.366] CoTaskMemFree (pv=0xffa70) [0041.366] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.367] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.367] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.367] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.367] SetErrorMode (uMode=0x1) returned 0x0 [0041.367] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.367] GetFileType (hFile=0x18c) returned 0x1 [0041.367] SetErrorMode (uMode=0x0) returned 0x1 [0041.368] GetFileType (hFile=0x18c) returned 0x1 [0041.368] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x2488 [0041.368] ReadFile (in: hFile=0x18c, lpBuffer=0x27c1b80, nNumberOfBytesToRead=0x2488, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27c1b80*, lpNumberOfBytesRead=0x27e828*=0x2488, lpOverlapped=0x0) returned 1 [0041.369] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.369] SetErrorMode (uMode=0x1) returned 0x0 [0041.369] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1 [0041.370] SetErrorMode (uMode=0x0) returned 0x1 [0041.430] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.430] SetErrorMode (uMode=0x1) returned 0x0 [0041.431] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.431] GetFileType (hFile=0x18c) returned 0x1 [0041.432] SetErrorMode (uMode=0x0) returned 0x1 [0041.432] GetFileType (hFile=0x18c) returned 0x1 [0041.432] WriteFile (in: hFile=0x18c, lpBuffer=0x282dca8*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x282dca8*, lpNumberOfBytesWritten=0x27e8a8*=0x2590, lpOverlapped=0x0) returned 1 [0041.433] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.433] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\wn7s6U07zP3M6FWV_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\wn7s6U07zP3M6FWV_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0041.433] SetErrorMode (uMode=0x1) returned 0x0 [0041.433] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe9636f30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0041.433] SetErrorMode (uMode=0x0) returned 0x1 [0041.433] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\wn7s6U07zP3M6FWV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\wn7s6u07zp3m6fwv_encrypted_by.whiterose")) returned 1 [0041.542] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpFilePart=0x0) returned 0x4a [0041.542] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpFilePart=0x0) returned 0x4a [0041.542] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.542] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.543] CoTaskMemFree (pv=0xffa70) [0041.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.543] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0041.543] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0041.543] SetErrorMode (uMode=0x1) returned 0x0 [0041.543] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0041.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0041.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0041.544] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0041.544] SetErrorMode (uMode=0x0) returned 0x1 [0041.545] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0041.545] SetErrorMode (uMode=0x1) returned 0x0 [0041.545] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0041.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0041.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0041.545] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0041.545] SetErrorMode (uMode=0x0) returned 0x1 [0041.545] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", lpFilePart=0x0) returned 0x50 [0041.546] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", lpFilePart=0x0) returned 0x50 [0041.546] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.546] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.546] CoTaskMemFree (pv=0xffa70) [0041.546] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.546] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0041.546] SetErrorMode (uMode=0x1) returned 0x0 [0041.546] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0041.547] GetFileType (hFile=0x18c) returned 0x1 [0041.547] SetErrorMode (uMode=0x0) returned 0x1 [0041.547] GetFileType (hFile=0x18c) returned 0x1 [0041.551] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0041.551] SetErrorMode (uMode=0x1) returned 0x0 [0041.551] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0041.551] GetFileType (hFile=0x18c) returned 0x1 [0041.551] SetErrorMode (uMode=0x0) returned 0x1 [0041.551] GetFileType (hFile=0x18c) returned 0x1 [0041.552] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0041.553] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0041.553] SetErrorMode (uMode=0x1) returned 0x0 [0041.553] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0041.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0041.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0041.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0041.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.555] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0041.556] SetErrorMode (uMode=0x0) returned 0x1 [0041.556] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0041.556] SetErrorMode (uMode=0x1) returned 0x0 [0041.556] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0041.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0041.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0041.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0041.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.557] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0041.558] SetErrorMode (uMode=0x0) returned 0x1 [0041.558] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpFilePart=0x0) returned 0x4f [0041.558] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpFilePart=0x0) returned 0x4f [0041.558] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.558] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.559] CoTaskMemFree (pv=0xffa70) [0041.559] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.559] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.559] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.559] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.559] SetErrorMode (uMode=0x1) returned 0x0 [0041.559] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.560] GetFileType (hFile=0x18c) returned 0x1 [0041.560] SetErrorMode (uMode=0x0) returned 0x1 [0041.560] GetFileType (hFile=0x18c) returned 0x1 [0041.560] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x333 [0041.560] ReadFile (in: hFile=0x18c, lpBuffer=0x2865dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2865dd0*, lpNumberOfBytesRead=0x27e828*=0x333, lpOverlapped=0x0) returned 1 [0041.562] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.562] SetErrorMode (uMode=0x1) returned 0x0 [0041.562] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0041.562] SetErrorMode (uMode=0x0) returned 0x1 [0041.624] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.624] SetErrorMode (uMode=0x1) returned 0x0 [0041.624] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.627] GetFileType (hFile=0x18c) returned 0x1 [0041.627] SetErrorMode (uMode=0x0) returned 0x1 [0041.627] GetFileType (hFile=0x18c) returned 0x1 [0041.628] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0041.628] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\dfOmvjWUHNOMDXQH_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\dfOmvjWUHNOMDXQH_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0041.628] SetErrorMode (uMode=0x1) returned 0x0 [0041.628] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe97fffb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0041.628] SetErrorMode (uMode=0x0) returned 0x1 [0041.628] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\dfOmvjWUHNOMDXQH_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\dfomvjwuhnomdxqh_encrypted_by.whiterose")) returned 1 [0041.723] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.724] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.724] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.724] SetErrorMode (uMode=0x1) returned 0x0 [0041.724] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.724] GetFileType (hFile=0x18c) returned 0x1 [0041.724] SetErrorMode (uMode=0x0) returned 0x1 [0041.724] GetFileType (hFile=0x18c) returned 0x1 [0041.725] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xa40 [0041.725] ReadFile (in: hFile=0x18c, lpBuffer=0x28ccee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28ccee8*, lpNumberOfBytesRead=0x27e828*=0xa40, lpOverlapped=0x0) returned 1 [0041.726] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.726] SetErrorMode (uMode=0x1) returned 0x0 [0041.726] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0041.726] SetErrorMode (uMode=0x0) returned 0x1 [0041.801] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.801] SetErrorMode (uMode=0x1) returned 0x0 [0041.801] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.802] GetFileType (hFile=0x18c) returned 0x1 [0041.802] SetErrorMode (uMode=0x0) returned 0x1 [0041.802] GetFileType (hFile=0x18c) returned 0x1 [0041.803] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.803] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\6J36*D1cZcw5Sqe9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\6J36*D1cZcw5Sqe9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0041.813] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0041.813] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0041.815] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0041.815] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0041.815] SetErrorMode (uMode=0x1) returned 0x0 [0041.815] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0041.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0041.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0041.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0041.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0041.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0041.818] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0041.818] SetErrorMode (uMode=0x0) returned 0x1 [0041.819] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0041.819] SetErrorMode (uMode=0x1) returned 0x0 [0041.819] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0041.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0041.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0041.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0041.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0041.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0041.820] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0041.821] SetErrorMode (uMode=0x0) returned 0x1 [0041.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpFilePart=0x0) returned 0x59 [0041.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpFilePart=0x0) returned 0x59 [0041.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0041.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.821] CoTaskMemFree (pv=0xffa70) [0041.821] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0041.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0041.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0041.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0041.822] SetErrorMode (uMode=0x1) returned 0x0 [0041.822] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.823] GetFileType (hFile=0x18c) returned 0x1 [0041.823] SetErrorMode (uMode=0x0) returned 0x1 [0041.823] GetFileType (hFile=0x18c) returned 0x1 [0041.823] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x545 [0041.824] ReadFile (in: hFile=0x18c, lpBuffer=0x2735860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2735860*, lpNumberOfBytesRead=0x27e788*=0x545, lpOverlapped=0x0) returned 1 [0041.825] CloseHandle (hObject=0x18c) returned 1 [0041.826] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0041.826] SetErrorMode (uMode=0x1) returned 0x0 [0041.826] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1 [0041.826] SetErrorMode (uMode=0x0) returned 0x1 [0041.932] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0041.932] SetErrorMode (uMode=0x1) returned 0x0 [0041.932] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0041.933] GetFileType (hFile=0x18c) returned 0x1 [0041.933] SetErrorMode (uMode=0x0) returned 0x1 [0041.933] GetFileType (hFile=0x18c) returned 0x1 [0041.933] WriteFile (in: hFile=0x18c, lpBuffer=0x27974c8*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x27974c8*, lpNumberOfBytesWritten=0x27e728*=0x650, lpOverlapped=0x0) returned 1 [0041.935] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0041.935] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\F23W0UFRuv3FOPkc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\F23W0UFRuv3FOPkc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x73 [0041.935] SetErrorMode (uMode=0x1) returned 0x0 [0041.935] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe9af9b30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0041.935] SetErrorMode (uMode=0x0) returned 0x1 [0041.935] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\F23W0UFRuv3FOPkc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\f23w0ufruv3fopkc_encrypted_by.whiterose")) returned 1 [0042.036] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpFilePart=0x0) returned 0x55 [0042.036] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpFilePart=0x0) returned 0x55 [0042.036] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.036] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.037] CoTaskMemFree (pv=0xffa70) [0042.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.037] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0042.037] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0042.037] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0042.037] SetErrorMode (uMode=0x1) returned 0x0 [0042.037] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.038] GetFileType (hFile=0x18c) returned 0x1 [0042.038] SetErrorMode (uMode=0x0) returned 0x1 [0042.038] GetFileType (hFile=0x18c) returned 0x1 [0042.038] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x91975 [0042.043] ReadFile (in: hFile=0x18c, lpBuffer=0x12817660, nNumberOfBytesToRead=0x91975, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x12817660*, lpNumberOfBytesRead=0x27e788*=0x91975, lpOverlapped=0x0) returned 1 [0042.055] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0042.056] SetErrorMode (uMode=0x1) returned 0x0 [0042.056] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1 [0042.056] SetErrorMode (uMode=0x0) returned 0x1 [0042.169] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0042.169] SetErrorMode (uMode=0x1) returned 0x0 [0042.169] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.174] GetFileType (hFile=0x18c) returned 0x1 [0042.174] SetErrorMode (uMode=0x0) returned 0x1 [0042.174] GetFileType (hFile=0x18c) returned 0x1 [0042.174] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x91a80, lpNumberOfBytesWritten=0x27e808, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e808*=0x91a80, lpOverlapped=0x0) returned 1 [0042.185] CloseHandle (hObject=0x18c) returned 1 [0042.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0042.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\6g8F2hNJAgnDmKCY_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\6g8F2hNJAgnDmKCY_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x73 [0042.189] SetErrorMode (uMode=0x1) returned 0x0 [0042.189] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe9d5b130, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x91a80)) returned 1 [0042.189] SetErrorMode (uMode=0x0) returned 0x1 [0042.189] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\6g8F2hNJAgnDmKCY_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\6g8f2hnjagndmkcy_encrypted_by.whiterose")) returned 1 [0042.286] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0042.286] SetErrorMode (uMode=0x1) returned 0x0 [0042.286] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0042.287] GetFileType (hFile=0x18c) returned 0x1 [0042.287] SetErrorMode (uMode=0x0) returned 0x1 [0042.287] GetFileType (hFile=0x18c) returned 0x1 [0042.288] WriteFile (in: hFile=0x18c, lpBuffer=0x2700270*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x2700270*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0042.290] WriteFile (in: hFile=0x18c, lpBuffer=0x2700270*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2700270*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0042.290] CloseHandle (hObject=0x18c) returned 1 [0042.290] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0042.291] SetErrorMode (uMode=0x1) returned 0x0 [0042.291] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0042.291] GetFileType (hFile=0x18c) returned 0x1 [0042.291] SetErrorMode (uMode=0x0) returned 0x1 [0042.291] GetFileType (hFile=0x18c) returned 0x1 [0042.293] WriteFile (in: hFile=0x18c, lpBuffer=0x2716390*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2716390*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0042.294] WriteFile (in: hFile=0x18c, lpBuffer=0x2716390*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2716390*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0042.294] CloseHandle (hObject=0x18c) returned 1 [0042.294] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0042.294] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0042.295] SetErrorMode (uMode=0x1) returned 0x0 [0042.295] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0042.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0042.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0042.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0042.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0042.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0042.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.299] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0042.300] SetErrorMode (uMode=0x0) returned 0x1 [0042.300] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0042.300] SetErrorMode (uMode=0x1) returned 0x0 [0042.300] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0042.301] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.301] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0042.301] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0042.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0042.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.303] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0042.303] SetErrorMode (uMode=0x0) returned 0x1 [0042.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpFilePart=0x0) returned 0x4d [0042.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpFilePart=0x0) returned 0x4d [0042.304] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.304] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.304] CoTaskMemFree (pv=0xffa70) [0042.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.305] SetErrorMode (uMode=0x1) returned 0x0 [0042.305] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.306] GetFileType (hFile=0x18c) returned 0x1 [0042.306] SetErrorMode (uMode=0x0) returned 0x1 [0042.306] GetFileType (hFile=0x18c) returned 0x1 [0042.306] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x10b2 [0042.306] ReadFile (in: hFile=0x18c, lpBuffer=0x271feb0, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x271feb0*, lpNumberOfBytesRead=0x27e828*=0x10b2, lpOverlapped=0x0) returned 1 [0042.308] CloseHandle (hObject=0x18c) returned 1 [0042.308] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.308] SetErrorMode (uMode=0x1) returned 0x0 [0042.308] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0042.309] SetErrorMode (uMode=0x0) returned 0x1 [0042.391] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.391] SetErrorMode (uMode=0x1) returned 0x0 [0042.391] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.392] GetFileType (hFile=0x18c) returned 0x1 [0042.392] SetErrorMode (uMode=0x0) returned 0x1 [0042.392] GetFileType (hFile=0x18c) returned 0x1 [0042.392] WriteFile (in: hFile=0x18c, lpBuffer=0x2784468*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x2784468*, lpNumberOfBytesWritten=0x27e8a8*=0x11c0, lpOverlapped=0x0) returned 1 [0042.394] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.394] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\w3leFSwFmZCwxC8t_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\w3leFSwFmZCwxC8t_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0042.394] SetErrorMode (uMode=0x1) returned 0x0 [0042.394] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xe9f4a310, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c0)) returned 1 [0042.394] SetErrorMode (uMode=0x0) returned 0x1 [0042.394] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\w3leFSwFmZCwxC8t_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\w3lefswfmzcwxc8t_encrypted_by.whiterose")) returned 1 [0042.512] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpFilePart=0x0) returned 0x46 [0042.513] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpFilePart=0x0) returned 0x46 [0042.513] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.513] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.513] CoTaskMemFree (pv=0xffa70) [0042.513] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.513] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", lpFilePart=0x0) returned 0x49 [0042.514] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", lpFilePart=0x0) returned 0x49 [0042.514] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.514] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.514] CoTaskMemFree (pv=0xffa70) [0042.514] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.514] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpFilePart=0x0) returned 0x4b [0042.514] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpFilePart=0x0) returned 0x4b [0042.514] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.514] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.514] CoTaskMemFree (pv=0xffa70) [0042.514] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.514] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpFilePart=0x0) returned 0x4a [0042.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpFilePart=0x0) returned 0x4a [0042.515] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.515] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.515] CoTaskMemFree (pv=0xffa70) [0042.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpFilePart=0x0) returned 0x57 [0042.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpFilePart=0x0) returned 0x57 [0042.515] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.515] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.515] CoTaskMemFree (pv=0xffa70) [0042.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpFilePart=0x0) returned 0x4d [0042.516] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpFilePart=0x0) returned 0x4d [0042.516] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.516] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.516] CoTaskMemFree (pv=0xffa70) [0042.516] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.516] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0042.516] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0042.516] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0042.516] SetErrorMode (uMode=0x1) returned 0x0 [0042.517] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.521] GetFileType (hFile=0x18c) returned 0x1 [0042.521] SetErrorMode (uMode=0x0) returned 0x1 [0042.522] GetFileType (hFile=0x18c) returned 0x1 [0042.522] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x41d4 [0042.522] ReadFile (in: hFile=0x18c, lpBuffer=0x278afe8, nNumberOfBytesToRead=0x41d4, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x278afe8*, lpNumberOfBytesRead=0x27e828*=0x41d4, lpOverlapped=0x0) returned 1 [0042.523] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0042.524] SetErrorMode (uMode=0x1) returned 0x0 [0042.524] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1 [0042.524] SetErrorMode (uMode=0x0) returned 0x1 [0042.598] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0042.598] SetErrorMode (uMode=0x1) returned 0x0 [0042.598] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.599] GetFileType (hFile=0x18c) returned 0x1 [0042.599] SetErrorMode (uMode=0x0) returned 0x1 [0042.599] GetFileType (hFile=0x18c) returned 0x1 [0042.599] WriteFile (in: hFile=0x18c, lpBuffer=0x2805960*, nNumberOfBytesToWrite=0x42e0, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x2805960*, lpNumberOfBytesWritten=0x27e8a8*=0x42e0, lpOverlapped=0x0) returned 1 [0042.601] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0042.601] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\zAezjguvuQa27ecf_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\zAezjguvuQa27ecf_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0042.601] SetErrorMode (uMode=0x1) returned 0x0 [0042.601] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xea15f650, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x42e0)) returned 1 [0042.601] SetErrorMode (uMode=0x0) returned 0x1 [0042.601] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\zAezjguvuQa27ecf_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\zaezjguvuqa27ecf_encrypted_by.whiterose")) returned 1 [0042.707] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpFilePart=0x0) returned 0x4a [0042.708] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpFilePart=0x0) returned 0x4a [0042.708] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.708] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.708] CoTaskMemFree (pv=0xffa70) [0042.708] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.708] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpFilePart=0x0) returned 0x4b [0042.708] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpFilePart=0x0) returned 0x4b [0042.708] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.708] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.708] CoTaskMemFree (pv=0xffa70) [0042.708] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.708] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpFilePart=0x0) returned 0x48 [0042.709] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpFilePart=0x0) returned 0x48 [0042.709] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.709] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.709] CoTaskMemFree (pv=0xffa70) [0042.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.709] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.709] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.709] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.709] SetErrorMode (uMode=0x1) returned 0x0 [0042.710] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.711] GetFileType (hFile=0x18c) returned 0x1 [0042.711] SetErrorMode (uMode=0x0) returned 0x1 [0042.711] GetFileType (hFile=0x18c) returned 0x1 [0042.711] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x7976 [0042.711] ReadFile (in: hFile=0x18c, lpBuffer=0x280d5a0, nNumberOfBytesToRead=0x7976, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x280d5a0*, lpNumberOfBytesRead=0x27e828*=0x7976, lpOverlapped=0x0) returned 1 [0042.713] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.713] SetErrorMode (uMode=0x1) returned 0x0 [0042.713] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1 [0042.713] SetErrorMode (uMode=0x0) returned 0x1 [0042.772] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.772] SetErrorMode (uMode=0x1) returned 0x0 [0042.772] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.773] GetFileType (hFile=0x18c) returned 0x1 [0042.773] SetErrorMode (uMode=0x0) returned 0x1 [0042.774] GetFileType (hFile=0x18c) returned 0x1 [0042.774] WriteFile (in: hFile=0x18c, lpBuffer=0x28a6650*, nNumberOfBytesToWrite=0x7a80, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a6650*, lpNumberOfBytesWritten=0x27e8a8*=0x7a80, lpOverlapped=0x0) returned 1 [0042.775] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.775] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\C*9TYFrlBHJuDQi3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\C*9TYFrlBHJuDQi3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0042.786] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0042.786] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0042.789] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0042.789] SetErrorMode (uMode=0x1) returned 0x0 [0042.789] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0042.790] GetFileType (hFile=0x18c) returned 0x1 [0042.790] SetErrorMode (uMode=0x0) returned 0x1 [0042.790] GetFileType (hFile=0x18c) returned 0x1 [0042.792] WriteFile (in: hFile=0x18c, lpBuffer=0x28c0cb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x28c0cb0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0042.793] WriteFile (in: hFile=0x18c, lpBuffer=0x28c0cb0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x28c0cb0*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0042.794] CloseHandle (hObject=0x18c) returned 1 [0042.794] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0042.794] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0042.794] SetErrorMode (uMode=0x1) returned 0x0 [0042.794] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0042.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0042.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0042.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0042.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0042.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.797] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0042.798] SetErrorMode (uMode=0x0) returned 0x1 [0042.798] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0042.798] SetErrorMode (uMode=0x1) returned 0x0 [0042.799] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0042.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0042.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0042.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0042.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0042.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0042.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.801] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0042.802] SetErrorMode (uMode=0x0) returned 0x1 [0042.802] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpFilePart=0x0) returned 0x4d [0042.802] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpFilePart=0x0) returned 0x4d [0042.802] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0042.802] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0042.802] CoTaskMemFree (pv=0xffa70) [0042.802] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0042.802] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.803] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.803] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.803] SetErrorMode (uMode=0x1) returned 0x0 [0042.803] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.804] GetFileType (hFile=0x18c) returned 0x1 [0042.804] SetErrorMode (uMode=0x0) returned 0x1 [0042.804] GetFileType (hFile=0x18c) returned 0x1 [0042.804] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x10b2 [0042.804] ReadFile (in: hFile=0x18c, lpBuffer=0x28ca680, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28ca680*, lpNumberOfBytesRead=0x27e828*=0x10b2, lpOverlapped=0x0) returned 1 [0042.805] CloseHandle (hObject=0x18c) returned 1 [0042.806] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.806] SetErrorMode (uMode=0x1) returned 0x0 [0042.806] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0042.806] SetErrorMode (uMode=0x0) returned 0x1 [0042.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.913] SetErrorMode (uMode=0x1) returned 0x0 [0042.913] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0042.914] GetFileType (hFile=0x18c) returned 0x1 [0042.914] SetErrorMode (uMode=0x0) returned 0x1 [0042.914] GetFileType (hFile=0x18c) returned 0x1 [0042.914] WriteFile (in: hFile=0x18c, lpBuffer=0x273e268*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x273e268*, lpNumberOfBytesWritten=0x27e8a8*=0x11c0, lpOverlapped=0x0) returned 1 [0042.916] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0042.916] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\cr0KXW828Ze8zdo8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\cr0KXW828Ze8zdo8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0042.916] SetErrorMode (uMode=0x1) returned 0x0 [0042.916] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xea4591d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c0)) returned 1 [0042.916] SetErrorMode (uMode=0x0) returned 0x1 [0042.916] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\cr0KXW828Ze8zdo8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\cr0kxw828ze8zdo8_encrypted_by.whiterose")) returned 1 [0043.018] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpFilePart=0x0) returned 0x46 [0043.018] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpFilePart=0x0) returned 0x46 [0043.019] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.019] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.019] CoTaskMemFree (pv=0xffa70) [0043.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", lpFilePart=0x0) returned 0x49 [0043.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", lpFilePart=0x0) returned 0x49 [0043.019] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.019] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.019] CoTaskMemFree (pv=0xffa70) [0043.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpFilePart=0x0) returned 0x4b [0043.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpFilePart=0x0) returned 0x4b [0043.019] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.019] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.019] CoTaskMemFree (pv=0xffa70) [0043.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpFilePart=0x0) returned 0x4a [0043.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpFilePart=0x0) returned 0x4a [0043.019] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.019] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.020] CoTaskMemFree (pv=0xffa70) [0043.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpFilePart=0x0) returned 0x57 [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpFilePart=0x0) returned 0x57 [0043.020] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.020] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.020] CoTaskMemFree (pv=0xffa70) [0043.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpFilePart=0x0) returned 0x4c [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpFilePart=0x0) returned 0x4c [0043.020] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.020] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.020] CoTaskMemFree (pv=0xffa70) [0043.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.020] SetErrorMode (uMode=0x1) returned 0x0 [0043.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.022] GetFileType (hFile=0x18c) returned 0x1 [0043.022] SetErrorMode (uMode=0x0) returned 0x1 [0043.022] GetFileType (hFile=0x18c) returned 0x1 [0043.023] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x1915 [0043.023] ReadFile (in: hFile=0x18c, lpBuffer=0x2744de8, nNumberOfBytesToRead=0x1915, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2744de8*, lpNumberOfBytesRead=0x27e828*=0x1915, lpOverlapped=0x0) returned 1 [0043.024] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.024] SetErrorMode (uMode=0x1) returned 0x0 [0043.025] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1 [0043.025] SetErrorMode (uMode=0x0) returned 0x1 [0043.093] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.094] SetErrorMode (uMode=0x1) returned 0x0 [0043.094] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.095] GetFileType (hFile=0x18c) returned 0x1 [0043.095] SetErrorMode (uMode=0x0) returned 0x1 [0043.095] GetFileType (hFile=0x18c) returned 0x1 [0043.095] WriteFile (in: hFile=0x18c, lpBuffer=0x27ad7e8*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ad7e8*, lpNumberOfBytesWritten=0x27e8a8*=0x1a20, lpOverlapped=0x0) returned 1 [0043.096] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.096] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\CHduPkeTcKA69*HS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\CHduPkeTcKA69*HS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0043.100] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0043.101] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 1 [0043.103] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpFilePart=0x0) returned 0x4b [0043.103] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpFilePart=0x0) returned 0x4b [0043.103] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.103] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.103] CoTaskMemFree (pv=0xffa70) [0043.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.103] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpFilePart=0x0) returned 0x48 [0043.103] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpFilePart=0x0) returned 0x48 [0043.104] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.104] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.104] CoTaskMemFree (pv=0xffa70) [0043.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.104] SetErrorMode (uMode=0x1) returned 0x0 [0043.104] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.105] GetFileType (hFile=0x18c) returned 0x1 [0043.105] SetErrorMode (uMode=0x0) returned 0x1 [0043.105] GetFileType (hFile=0x18c) returned 0x1 [0043.105] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x412b [0043.105] ReadFile (in: hFile=0x18c, lpBuffer=0x27b2508, nNumberOfBytesToRead=0x412b, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27b2508*, lpNumberOfBytesRead=0x27e828*=0x412b, lpOverlapped=0x0) returned 1 [0043.106] CloseHandle (hObject=0x18c) returned 1 [0043.107] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.107] SetErrorMode (uMode=0x1) returned 0x0 [0043.107] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1 [0043.107] SetErrorMode (uMode=0x0) returned 0x1 [0043.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.194] SetErrorMode (uMode=0x1) returned 0x0 [0043.194] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.195] GetFileType (hFile=0x18c) returned 0x1 [0043.195] SetErrorMode (uMode=0x0) returned 0x1 [0043.195] GetFileType (hFile=0x18c) returned 0x1 [0043.195] WriteFile (in: hFile=0x18c, lpBuffer=0x28285c0*, nNumberOfBytesToWrite=0x4230, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x28285c0*, lpNumberOfBytesWritten=0x27e8a8*=0x4230, lpOverlapped=0x0) returned 1 [0043.197] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.197] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\mAK04ub2Qv4ZKKhA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\mAK04ub2Qv4ZKKhA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0043.197] SetErrorMode (uMode=0x1) returned 0x0 [0043.197] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xea706a90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x4230)) returned 1 [0043.197] SetErrorMode (uMode=0x0) returned 0x1 [0043.198] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\mAK04ub2Qv4ZKKhA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\mak04ub2qv4zkkha_encrypted_by.whiterose")) returned 1 [0043.300] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0043.300] SetErrorMode (uMode=0x1) returned 0x0 [0043.300] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.301] GetFileType (hFile=0x18c) returned 0x1 [0043.301] SetErrorMode (uMode=0x0) returned 0x1 [0043.301] GetFileType (hFile=0x18c) returned 0x1 [0043.302] WriteFile (in: hFile=0x18c, lpBuffer=0x283ef98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x283ef98*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0043.304] WriteFile (in: hFile=0x18c, lpBuffer=0x283ef98*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x283ef98*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0043.305] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0043.305] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0043.305] SetErrorMode (uMode=0x1) returned 0x0 [0043.305] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0043.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0043.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0043.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0043.308] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.309] SetErrorMode (uMode=0x0) returned 0x1 [0043.309] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0043.309] SetErrorMode (uMode=0x1) returned 0x0 [0043.309] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0043.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0043.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0043.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0043.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0043.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0043.311] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.311] SetErrorMode (uMode=0x0) returned 0x1 [0043.312] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpFilePart=0x0) returned 0x4d [0043.312] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpFilePart=0x0) returned 0x4d [0043.312] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.312] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.312] CoTaskMemFree (pv=0xffa70) [0043.312] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.312] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0043.312] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0043.312] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0043.313] SetErrorMode (uMode=0x1) returned 0x0 [0043.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.313] GetFileType (hFile=0x18c) returned 0x1 [0043.314] SetErrorMode (uMode=0x0) returned 0x1 [0043.314] GetFileType (hFile=0x18c) returned 0x1 [0043.314] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x10b2 [0043.314] ReadFile (in: hFile=0x18c, lpBuffer=0x2848888, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2848888*, lpNumberOfBytesRead=0x27e828*=0x10b2, lpOverlapped=0x0) returned 1 [0043.315] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0043.315] SetErrorMode (uMode=0x1) returned 0x0 [0043.315] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0043.316] SetErrorMode (uMode=0x0) returned 0x1 [0043.376] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0043.377] SetErrorMode (uMode=0x1) returned 0x0 [0043.377] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.378] GetFileType (hFile=0x18c) returned 0x1 [0043.378] SetErrorMode (uMode=0x0) returned 0x1 [0043.378] GetFileType (hFile=0x18c) returned 0x1 [0043.378] WriteFile (in: hFile=0x18c, lpBuffer=0x28a8480*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a8480*, lpNumberOfBytesWritten=0x27e8a8*=0x11c0, lpOverlapped=0x0) returned 1 [0043.379] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0043.379] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\URWff2HlQ1SGCQGK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\URWff2HlQ1SGCQGK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0043.379] SetErrorMode (uMode=0x1) returned 0x0 [0043.379] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0xea8cfb10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c0)) returned 1 [0043.379] SetErrorMode (uMode=0x0) returned 0x1 [0043.379] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\URWff2HlQ1SGCQGK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\urwff2hlq1sgcqgk_encrypted_by.whiterose")) returned 1 [0043.486] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpFilePart=0x0) returned 0x46 [0043.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpFilePart=0x0) returned 0x46 [0043.487] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.487] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.487] CoTaskMemFree (pv=0xffa70) [0043.487] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", lpFilePart=0x0) returned 0x49 [0043.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", lpFilePart=0x0) returned 0x49 [0043.487] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.487] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.487] CoTaskMemFree (pv=0xffa70) [0043.487] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.488] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpFilePart=0x0) returned 0x4b [0043.488] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpFilePart=0x0) returned 0x4b [0043.488] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.488] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.488] CoTaskMemFree (pv=0xffa70) [0043.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.488] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpFilePart=0x0) returned 0x4a [0043.488] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpFilePart=0x0) returned 0x4a [0043.488] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.488] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.488] CoTaskMemFree (pv=0xffa70) [0043.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpFilePart=0x0) returned 0x57 [0043.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpFilePart=0x0) returned 0x57 [0043.489] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.489] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.489] CoTaskMemFree (pv=0xffa70) [0043.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpFilePart=0x0) returned 0x48 [0043.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpFilePart=0x0) returned 0x48 [0043.489] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.489] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.489] CoTaskMemFree (pv=0xffa70) [0043.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.490] SetErrorMode (uMode=0x1) returned 0x0 [0043.490] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.491] GetFileType (hFile=0x18c) returned 0x1 [0043.491] SetErrorMode (uMode=0x0) returned 0x1 [0043.491] GetFileType (hFile=0x18c) returned 0x1 [0043.491] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x5061 [0043.491] ReadFile (in: hFile=0x18c, lpBuffer=0x28aefb8, nNumberOfBytesToRead=0x5061, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28aefb8*, lpNumberOfBytesRead=0x27e828*=0x5061, lpOverlapped=0x0) returned 1 [0043.492] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.492] SetErrorMode (uMode=0x1) returned 0x0 [0043.493] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1 [0043.493] SetErrorMode (uMode=0x0) returned 0x1 [0043.566] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.566] SetErrorMode (uMode=0x1) returned 0x0 [0043.566] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.567] GetFileType (hFile=0x18c) returned 0x1 [0043.567] SetErrorMode (uMode=0x0) returned 0x1 [0043.567] GetFileType (hFile=0x18c) returned 0x1 [0043.567] WriteFile (in: hFile=0x18c, lpBuffer=0x27330b0*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x27330b0*, lpNumberOfBytesWritten=0x27e8a8*=0x5170, lpOverlapped=0x0) returned 1 [0043.569] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.569] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\82ln9jVF7jnsREh*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\82ln9jVF7jnsREh*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0043.578] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0043.578] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0043.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpFilePart=0x0) returned 0x4b [0043.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpFilePart=0x0) returned 0x4b [0043.581] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.581] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.581] CoTaskMemFree (pv=0xffa70) [0043.581] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpFilePart=0x0) returned 0x4b [0043.582] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpFilePart=0x0) returned 0x4b [0043.582] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.582] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.582] CoTaskMemFree (pv=0xffa70) [0043.582] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.582] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0043.582] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0043.582] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0043.582] SetErrorMode (uMode=0x1) returned 0x0 [0043.583] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.583] GetFileType (hFile=0x18c) returned 0x1 [0043.583] SetErrorMode (uMode=0x0) returned 0x1 [0043.583] GetFileType (hFile=0x18c) returned 0x1 [0043.584] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x2213 [0043.584] ReadFile (in: hFile=0x18c, lpBuffer=0x273b518, nNumberOfBytesToRead=0x2213, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x273b518*, lpNumberOfBytesRead=0x27e828*=0x2213, lpOverlapped=0x0) returned 1 [0043.585] CloseHandle (hObject=0x18c) returned 1 [0043.586] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0043.586] SetErrorMode (uMode=0x1) returned 0x0 [0043.586] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1 [0043.586] SetErrorMode (uMode=0x0) returned 0x1 [0043.685] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0043.685] SetErrorMode (uMode=0x1) returned 0x0 [0043.685] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.686] GetFileType (hFile=0x18c) returned 0x1 [0043.686] SetErrorMode (uMode=0x0) returned 0x1 [0043.687] GetFileType (hFile=0x18c) returned 0x1 [0043.687] WriteFile (in: hFile=0x18c, lpBuffer=0x279b0d8*, nNumberOfBytesToWrite=0x2320, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x279b0d8*, lpNumberOfBytesWritten=0x27e8a8*=0x2320, lpOverlapped=0x0) returned 1 [0043.688] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0043.688] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Hjld8AAkBCT5N3ne_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Hjld8AAkBCT5N3ne_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0043.689] SetErrorMode (uMode=0x1) returned 0x0 [0043.689] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0xeaba3530, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2320)) returned 1 [0043.689] SetErrorMode (uMode=0x0) returned 0x1 [0043.689] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Hjld8AAkBCT5N3ne_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\hjld8aakbct5n3ne_encrypted_by.whiterose")) returned 1 [0043.798] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0043.799] SetErrorMode (uMode=0x1) returned 0x0 [0043.799] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.799] GetFileType (hFile=0x18c) returned 0x1 [0043.799] SetErrorMode (uMode=0x0) returned 0x1 [0043.799] GetFileType (hFile=0x18c) returned 0x1 [0043.801] WriteFile (in: hFile=0x18c, lpBuffer=0x27afba8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x27afba8*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0043.803] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x2f [0043.803] SetErrorMode (uMode=0x1) returned 0x0 [0043.803] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\all users\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.804] GetFileType (hFile=0x18c) returned 0x1 [0043.804] SetErrorMode (uMode=0x0) returned 0x1 [0043.804] GetFileType (hFile=0x18c) returned 0x1 [0043.805] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x25 [0043.805] SetErrorMode (uMode=0x1) returned 0x0 [0043.805] CreateFileW (lpFileName="C:\\MSOCache\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\msocache\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.805] GetFileType (hFile=0x18c) returned 0x1 [0043.805] SetErrorMode (uMode=0x0) returned 0x1 [0043.806] GetFileType (hFile=0x18c) returned 0x1 [0043.807] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0043.807] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0043.807] SetErrorMode (uMode=0x1) returned 0x0 [0043.807] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0043.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0043.808] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.808] SetErrorMode (uMode=0x0) returned 0x1 [0043.808] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0043.808] SetErrorMode (uMode=0x1) returned 0x0 [0043.808] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0043.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0043.808] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.808] SetErrorMode (uMode=0x0) returned 0x1 [0043.808] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0043.809] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0043.809] SetErrorMode (uMode=0x1) returned 0x0 [0043.809] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0043.809] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.809] SetErrorMode (uMode=0x0) returned 0x1 [0043.809] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0043.810] SetErrorMode (uMode=0x1) returned 0x0 [0043.810] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0043.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.810] SetErrorMode (uMode=0x0) returned 0x1 [0043.810] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x2b [0043.810] SetErrorMode (uMode=0x1) returned 0x0 [0043.810] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\perflogs\\admin\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.811] GetFileType (hFile=0x18c) returned 0x1 [0043.811] SetErrorMode (uMode=0x0) returned 0x1 [0043.811] GetFileType (hFile=0x18c) returned 0x1 [0043.812] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x25 [0043.812] SetErrorMode (uMode=0x1) returned 0x0 [0043.812] CreateFileW (lpFileName="C:\\PerfLogs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\perflogs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.812] GetFileType (hFile=0x18c) returned 0x1 [0043.812] SetErrorMode (uMode=0x0) returned 0x1 [0043.813] GetFileType (hFile=0x18c) returned 0x1 [0043.814] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0043.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0043.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0043.814] SetErrorMode (uMode=0x1) returned 0x0 [0043.814] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0043.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0043.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd7673f50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd7673f50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0043.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6d86cd0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6d86cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0043.816] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.816] SetErrorMode (uMode=0x0) returned 0x1 [0043.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0043.816] SetErrorMode (uMode=0x1) returned 0x0 [0043.816] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd7673f50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd7673f50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0043.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0043.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0043.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0043.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6d86cd0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6d86cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0043.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0043.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0043.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0043.818] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.818] SetErrorMode (uMode=0x0) returned 0x1 [0043.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\desktop.ini", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\desktop.ini", lpFilePart=0x0) returned 0x22 [0043.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\desktop.ini", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\desktop.ini", lpFilePart=0x0) returned 0x22 [0043.818] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.818] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.818] CoTaskMemFree (pv=0xffa70) [0043.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0043.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0043.818] SetErrorMode (uMode=0x1) returned 0x0 [0043.819] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0043.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 0 [0043.819] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.819] SetErrorMode (uMode=0x0) returned 0x1 [0043.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0043.819] SetErrorMode (uMode=0x1) returned 0x0 [0043.819] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0043.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 0 [0043.820] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.820] SetErrorMode (uMode=0x0) returned 0x1 [0043.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0", lpFilePart=0x0) returned 0x28 [0043.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0", lpFilePart=0x0) returned 0x28 [0043.820] SetErrorMode (uMode=0x1) returned 0x0 [0043.820] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0043.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80815880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0043.822] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0043.822] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.822] SetErrorMode (uMode=0x0) returned 0x1 [0043.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0", lpFilePart=0x0) returned 0x28 [0043.823] SetErrorMode (uMode=0x1) returned 0x0 [0043.823] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0043.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80815880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0043.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0043.824] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.824] SetErrorMode (uMode=0x0) returned 0x1 [0043.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", lpFilePart=0x0) returned 0x34 [0043.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", lpFilePart=0x0) returned 0x34 [0043.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.825] CoTaskMemFree (pv=0xffa70) [0043.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", lpFilePart=0x0) returned 0x33 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", lpFilePart=0x0) returned 0x33 [0043.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.825] CoTaskMemFree (pv=0xffa70) [0043.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm", lpFilePart=0x0) returned 0x34 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm", lpFilePart=0x0) returned 0x34 [0043.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.825] CoTaskMemFree (pv=0xffa70) [0043.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm", lpFilePart=0x0) returned 0x32 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm", lpFilePart=0x0) returned 0x32 [0043.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.825] CoTaskMemFree (pv=0xffa70) [0043.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm", lpFilePart=0x0) returned 0x34 [0043.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm", lpFilePart=0x0) returned 0x34 [0043.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.825] CoTaskMemFree (pv=0xffa70) [0043.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm", lpFilePart=0x0) returned 0x34 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm", lpFilePart=0x0) returned 0x34 [0043.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.826] CoTaskMemFree (pv=0xffa70) [0043.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm", lpFilePart=0x0) returned 0x33 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm", lpFilePart=0x0) returned 0x33 [0043.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.826] CoTaskMemFree (pv=0xffa70) [0043.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm", lpFilePart=0x0) returned 0x35 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm", lpFilePart=0x0) returned 0x35 [0043.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.826] CoTaskMemFree (pv=0xffa70) [0043.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm", lpFilePart=0x0) returned 0x35 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm", lpFilePart=0x0) returned 0x35 [0043.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.826] CoTaskMemFree (pv=0xffa70) [0043.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm", lpFilePart=0x0) returned 0x36 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm", lpFilePart=0x0) returned 0x36 [0043.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.827] CoTaskMemFree (pv=0xffa70) [0043.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm", lpFilePart=0x0) returned 0x35 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm", lpFilePart=0x0) returned 0x35 [0043.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.827] CoTaskMemFree (pv=0xffa70) [0043.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm", lpFilePart=0x0) returned 0x33 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm", lpFilePart=0x0) returned 0x33 [0043.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.827] CoTaskMemFree (pv=0xffa70) [0043.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm", lpFilePart=0x0) returned 0x35 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm", lpFilePart=0x0) returned 0x35 [0043.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.827] CoTaskMemFree (pv=0xffa70) [0043.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm", lpFilePart=0x0) returned 0x35 [0043.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm", lpFilePart=0x0) returned 0x35 [0043.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.828] CoTaskMemFree (pv=0xffa70) [0043.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", lpFilePart=0x0) returned 0x36 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", lpFilePart=0x0) returned 0x36 [0043.828] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.828] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.828] CoTaskMemFree (pv=0xffa70) [0043.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", lpFilePart=0x0) returned 0x36 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", lpFilePart=0x0) returned 0x36 [0043.828] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.828] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.828] CoTaskMemFree (pv=0xffa70) [0043.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", lpFilePart=0x0) returned 0x36 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", lpFilePart=0x0) returned 0x36 [0043.828] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.828] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.828] CoTaskMemFree (pv=0xffa70) [0043.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm", lpFilePart=0x0) returned 0x34 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm", lpFilePart=0x0) returned 0x34 [0043.828] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.828] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.828] CoTaskMemFree (pv=0xffa70) [0043.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm", lpFilePart=0x0) returned 0x34 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm", lpFilePart=0x0) returned 0x34 [0043.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.829] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.829] CoTaskMemFree (pv=0xffa70) [0043.829] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", lpFilePart=0x0) returned 0x36 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", lpFilePart=0x0) returned 0x36 [0043.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.829] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.829] CoTaskMemFree (pv=0xffa70) [0043.829] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", lpFilePart=0x0) returned 0x36 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", lpFilePart=0x0) returned 0x36 [0043.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.829] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.829] CoTaskMemFree (pv=0xffa70) [0043.829] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", lpFilePart=0x0) returned 0x36 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", lpFilePart=0x0) returned 0x36 [0043.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.829] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.829] CoTaskMemFree (pv=0xffa70) [0043.829] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", lpFilePart=0x0) returned 0x36 [0043.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", lpFilePart=0x0) returned 0x36 [0043.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.830] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.830] CoTaskMemFree (pv=0xffa70) [0043.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", lpFilePart=0x0) returned 0x36 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", lpFilePart=0x0) returned 0x36 [0043.830] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.830] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.830] CoTaskMemFree (pv=0xffa70) [0043.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm", lpFilePart=0x0) returned 0x34 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm", lpFilePart=0x0) returned 0x34 [0043.830] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.830] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.830] CoTaskMemFree (pv=0xffa70) [0043.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm", lpFilePart=0x0) returned 0x33 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm", lpFilePart=0x0) returned 0x33 [0043.830] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.830] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.830] CoTaskMemFree (pv=0xffa70) [0043.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm", lpFilePart=0x0) returned 0x34 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm", lpFilePart=0x0) returned 0x34 [0043.830] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.830] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.830] CoTaskMemFree (pv=0xffa70) [0043.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", lpFilePart=0x0) returned 0x2c [0043.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", lpFilePart=0x0) returned 0x2c [0043.831] SetErrorMode (uMode=0x1) returned 0x0 [0043.831] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0043.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0043.831] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.831] SetErrorMode (uMode=0x0) returned 0x1 [0043.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", lpFilePart=0x0) returned 0x2c [0043.831] SetErrorMode (uMode=0x1) returned 0x0 [0043.832] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0043.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0043.832] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.832] SetErrorMode (uMode=0x0) returned 0x1 [0043.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll", lpFilePart=0x0) returned 0x39 [0043.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll", lpFilePart=0x0) returned 0x39 [0043.832] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.832] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.832] CoTaskMemFree (pv=0xffa70) [0043.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x46 [0043.832] SetErrorMode (uMode=0x1) returned 0x0 [0043.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0043.833] SetErrorMode (uMode=0x0) returned 0x1 [0043.833] GetFileType (hFile=0x18c) returned 0x1 [0043.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", lpFilePart=0x0) returned 0x2f [0043.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", lpFilePart=0x0) returned 0x2f [0043.834] SetErrorMode (uMode=0x1) returned 0x0 [0043.834] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0043.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0043.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0043.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80352c80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff9aa20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0043.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802945a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x837d71e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0043.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="SPPLUG~1")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 0 [0043.837] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.837] SetErrorMode (uMode=0x0) returned 0x1 [0043.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", lpFilePart=0x0) returned 0x2f [0043.837] SetErrorMode (uMode=0x1) returned 0x0 [0043.837] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0043.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80352c80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0043.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff9aa20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802945a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x837d71e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0043.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0043.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0043.840] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0043.840] SetErrorMode (uMode=0x0) returned 0x1 [0043.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll", lpFilePart=0x0) returned 0x3c [0043.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll", lpFilePart=0x0) returned 0x3c [0043.840] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.840] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.840] CoTaskMemFree (pv=0xffa70) [0043.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll", lpFilePart=0x0) returned 0x37 [0043.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll", lpFilePart=0x0) returned 0x37 [0043.840] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.841] CoTaskMemFree (pv=0xffa70) [0043.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x3e [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x3e [0043.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.841] CoTaskMemFree (pv=0xffa70) [0043.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll", lpFilePart=0x0) returned 0x3c [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll", lpFilePart=0x0) returned 0x3c [0043.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.841] CoTaskMemFree (pv=0xffa70) [0043.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll", lpFilePart=0x0) returned 0x3c [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll", lpFilePart=0x0) returned 0x3c [0043.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.841] CoTaskMemFree (pv=0xffa70) [0043.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x3c [0043.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x3c [0043.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.841] CoTaskMemFree (pv=0xffa70) [0043.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x40 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x40 [0043.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.842] CoTaskMemFree (pv=0xffa70) [0043.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x45 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x45 [0043.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.842] CoTaskMemFree (pv=0xffa70) [0043.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", lpFilePart=0x0) returned 0x52 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", lpFilePart=0x0) returned 0x52 [0043.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.842] CoTaskMemFree (pv=0xffa70) [0043.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x43 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x43 [0043.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.842] CoTaskMemFree (pv=0xffa70) [0043.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll", lpFilePart=0x0) returned 0x43 [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll", lpFilePart=0x0) returned 0x43 [0043.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.843] CoTaskMemFree (pv=0xffa70) [0043.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll", lpFilePart=0x0) returned 0x3c [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll", lpFilePart=0x0) returned 0x3c [0043.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.843] CoTaskMemFree (pv=0xffa70) [0043.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll", lpFilePart=0x0) returned 0x3c [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll", lpFilePart=0x0) returned 0x3c [0043.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.843] CoTaskMemFree (pv=0xffa70) [0043.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll", lpFilePart=0x0) returned 0x37 [0043.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll", lpFilePart=0x0) returned 0x37 [0043.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.843] CoTaskMemFree (pv=0xffa70) [0043.843] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0043.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.844] CoTaskMemFree (pv=0xffa70) [0043.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.845] CoTaskMemFree (pv=0xffa70) [0043.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.846] CoTaskMemFree (pv=0xffa70) [0043.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.846] CoTaskMemFree (pv=0xffa70) [0043.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.846] CoTaskMemFree (pv=0xffa70) [0043.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.846] CoTaskMemFree (pv=0xffa70) [0043.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.846] CoTaskMemFree (pv=0xffa70) [0043.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0043.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0043.846] CoTaskMemFree (pv=0xffa70) [0043.846] SetErrorMode (uMode=0x1) returned 0x0 [0043.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0043.847] SetErrorMode (uMode=0x0) returned 0x1 [0043.847] GetFileType (hFile=0x18c) returned 0x1 [0043.847] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x724ee [0043.898] SetErrorMode (uMode=0x1) returned 0x0 [0043.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee)) returned 1 [0043.898] SetErrorMode (uMode=0x0) returned 0x1 [0044.012] SetErrorMode (uMode=0x1) returned 0x0 [0044.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.013] SetErrorMode (uMode=0x0) returned 0x1 [0044.013] GetFileType (hFile=0x18c) returned 0x1 [0044.013] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x725f0, lpNumberOfBytesWritten=0x27e808, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e808*=0x725f0, lpOverlapped=0x0) returned 1 [0044.023] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 1 [0044.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll", lpFilePart=0x0) returned 0x36 [0044.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll", lpFilePart=0x0) returned 0x36 [0044.034] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.034] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.034] CoTaskMemFree (pv=0xffa70) [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll", lpFilePart=0x0) returned 0x44 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll", lpFilePart=0x0) returned 0x44 [0044.034] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.034] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.034] CoTaskMemFree (pv=0xffa70) [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x37 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x37 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x37 [0044.034] SetErrorMode (uMode=0x1) returned 0x0 [0044.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.035] GetFileType (hFile=0x18c) returned 0x1 [0044.035] SetErrorMode (uMode=0x0) returned 0x1 [0044.035] GetFileType (hFile=0x18c) returned 0x1 [0044.035] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1a4 [0044.035] ReadFile (in: hFile=0x18c, lpBuffer=0x26f3a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x26f3a60*, lpNumberOfBytesRead=0x27e788*=0x1a4, lpOverlapped=0x0) returned 1 [0044.036] CloseHandle (hObject=0x18c) returned 1 [0044.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x37 [0044.037] SetErrorMode (uMode=0x1) returned 0x0 [0044.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4)) returned 1 [0044.037] SetErrorMode (uMode=0x0) returned 0x1 [0044.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x37 [0044.121] SetErrorMode (uMode=0x1) returned 0x0 [0044.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.122] GetFileType (hFile=0x18c) returned 0x1 [0044.122] SetErrorMode (uMode=0x0) returned 0x1 [0044.122] GetFileType (hFile=0x18c) returned 0x1 [0044.122] WriteFile (in: hFile=0x18c, lpBuffer=0x2751388*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x2751388*, lpNumberOfBytesWritten=0x27e728*=0x2b0, lpOverlapped=0x0) returned 1 [0044.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x37 [0044.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\mdZVDszAEEDJcHs0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\mdZVDszAEEDJcHs0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x57 [0044.124] SetErrorMode (uMode=0x1) returned 0x0 [0044.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeafcdbb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0044.124] SetErrorMode (uMode=0x0) returned 0x1 [0044.124] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\mdZVDszAEEDJcHs0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\mdzvdszaeedjchs0_encrypted_by.whiterose")) returned 1 [0044.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x3d [0044.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x3d [0044.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.251] CoTaskMemFree (pv=0xffa70) [0044.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll", lpFilePart=0x0) returned 0x38 [0044.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll", lpFilePart=0x0) returned 0x38 [0044.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.252] CoTaskMemFree (pv=0xffa70) [0044.252] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", lpFilePart=0x0) returned 0x37 [0044.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", lpFilePart=0x0) returned 0x37 [0044.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", lpFilePart=0x0) returned 0x37 [0044.253] SetErrorMode (uMode=0x1) returned 0x0 [0044.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.254] GetFileType (hFile=0x18c) returned 0x1 [0044.254] SetErrorMode (uMode=0x0) returned 0x1 [0044.254] GetFileType (hFile=0x18c) returned 0x1 [0044.254] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x44a [0044.254] ReadFile (in: hFile=0x18c, lpBuffer=0x2755188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2755188*, lpNumberOfBytesRead=0x27e788*=0x44a, lpOverlapped=0x0) returned 1 [0044.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", lpFilePart=0x0) returned 0x37 [0044.258] SetErrorMode (uMode=0x1) returned 0x0 [0044.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a)) returned 1 [0044.258] SetErrorMode (uMode=0x0) returned 0x1 [0044.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", lpFilePart=0x0) returned 0x37 [0044.319] SetErrorMode (uMode=0x1) returned 0x0 [0044.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.320] GetFileType (hFile=0x18c) returned 0x1 [0044.320] SetErrorMode (uMode=0x0) returned 0x1 [0044.320] GetFileType (hFile=0x18c) returned 0x1 [0044.320] WriteFile (in: hFile=0x18c, lpBuffer=0x27b4188*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x27b4188*, lpNumberOfBytesWritten=0x27e728*=0x550, lpOverlapped=0x0) returned 1 [0044.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der", lpFilePart=0x0) returned 0x37 [0044.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\fbmr5YeXC4eV585h_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\fbmr5YeXC4eV585h_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x57 [0044.321] SetErrorMode (uMode=0x1) returned 0x0 [0044.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeb1bcd90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0044.322] SetErrorMode (uMode=0x0) returned 0x1 [0044.322] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\fbmr5YeXC4eV585h_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\fbmr5yexc4ev585h_encrypted_by.whiterose")) returned 1 [0044.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll", lpFilePart=0x0) returned 0x3a [0044.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll", lpFilePart=0x0) returned 0x3a [0044.423] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.423] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.423] CoTaskMemFree (pv=0xffa70) [0044.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll", lpFilePart=0x0) returned 0x3a [0044.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll", lpFilePart=0x0) returned 0x3a [0044.423] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.423] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.423] CoTaskMemFree (pv=0xffa70) [0044.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll", lpFilePart=0x0) returned 0x3c [0044.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll", lpFilePart=0x0) returned 0x3c [0044.424] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.424] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.424] CoTaskMemFree (pv=0xffa70) [0044.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x3e [0044.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x3e [0044.424] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.424] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.424] CoTaskMemFree (pv=0xffa70) [0044.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", lpFilePart=0x0) returned 0x33 [0044.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", lpFilePart=0x0) returned 0x33 [0044.425] SetErrorMode (uMode=0x1) returned 0x0 [0044.425] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0044.431] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0044.432] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0044.432] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.433] SetErrorMode (uMode=0x0) returned 0x1 [0044.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", lpFilePart=0x0) returned 0x33 [0044.433] SetErrorMode (uMode=0x1) returned 0x0 [0044.434] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0044.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0044.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0044.435] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0044.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0044.436] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.437] SetErrorMode (uMode=0x0) returned 0x1 [0044.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", lpFilePart=0x0) returned 0x3f [0044.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", lpFilePart=0x0) returned 0x3f [0044.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.437] CoTaskMemFree (pv=0xffa70) [0044.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", lpFilePart=0x0) returned 0x3f [0044.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", lpFilePart=0x0) returned 0x3f [0044.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.438] CoTaskMemFree (pv=0xffa70) [0044.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", lpFilePart=0x0) returned 0x3f [0044.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", lpFilePart=0x0) returned 0x3f [0044.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.439] CoTaskMemFree (pv=0xffa70) [0044.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", lpFilePart=0x0) returned 0x3f [0044.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", lpFilePart=0x0) returned 0x3f [0044.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.439] CoTaskMemFree (pv=0xffa70) [0044.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", lpFilePart=0x0) returned 0x3f [0044.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", lpFilePart=0x0) returned 0x3f [0044.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.440] CoTaskMemFree (pv=0xffa70) [0044.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", lpFilePart=0x0) returned 0x3f [0044.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", lpFilePart=0x0) returned 0x3f [0044.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.440] CoTaskMemFree (pv=0xffa70) [0044.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll", lpFilePart=0x0) returned 0x3f [0044.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll", lpFilePart=0x0) returned 0x3f [0044.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.441] CoTaskMemFree (pv=0xffa70) [0044.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", lpFilePart=0x0) returned 0x3f [0044.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", lpFilePart=0x0) returned 0x3f [0044.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.441] CoTaskMemFree (pv=0xffa70) [0044.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", lpFilePart=0x0) returned 0x3f [0044.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", lpFilePart=0x0) returned 0x3f [0044.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.442] CoTaskMemFree (pv=0xffa70) [0044.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", lpFilePart=0x0) returned 0x3f [0044.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", lpFilePart=0x0) returned 0x3f [0044.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.442] CoTaskMemFree (pv=0xffa70) [0044.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", lpFilePart=0x0) returned 0x3f [0044.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", lpFilePart=0x0) returned 0x3f [0044.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.443] CoTaskMemFree (pv=0xffa70) [0044.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", lpFilePart=0x0) returned 0x3f [0044.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", lpFilePart=0x0) returned 0x3f [0044.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.443] CoTaskMemFree (pv=0xffa70) [0044.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", lpFilePart=0x0) returned 0x3f [0044.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", lpFilePart=0x0) returned 0x3f [0044.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.444] CoTaskMemFree (pv=0xffa70) [0044.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", lpFilePart=0x0) returned 0x3f [0044.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", lpFilePart=0x0) returned 0x3f [0044.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.444] CoTaskMemFree (pv=0xffa70) [0044.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", lpFilePart=0x0) returned 0x3f [0044.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", lpFilePart=0x0) returned 0x3f [0044.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.445] CoTaskMemFree (pv=0xffa70) [0044.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", lpFilePart=0x0) returned 0x3f [0044.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", lpFilePart=0x0) returned 0x3f [0044.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.445] CoTaskMemFree (pv=0xffa70) [0044.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", lpFilePart=0x0) returned 0x3f [0044.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", lpFilePart=0x0) returned 0x3f [0044.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.446] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.446] CoTaskMemFree (pv=0xffa70) [0044.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", lpFilePart=0x0) returned 0x3f [0044.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", lpFilePart=0x0) returned 0x3f [0044.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.446] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.446] CoTaskMemFree (pv=0xffa70) [0044.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", lpFilePart=0x0) returned 0x3f [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", lpFilePart=0x0) returned 0x3f [0044.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.447] CoTaskMemFree (pv=0xffa70) [0044.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", lpFilePart=0x0) returned 0x3f [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", lpFilePart=0x0) returned 0x3f [0044.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.447] CoTaskMemFree (pv=0xffa70) [0044.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", lpFilePart=0x0) returned 0x3f [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", lpFilePart=0x0) returned 0x3f [0044.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.447] CoTaskMemFree (pv=0xffa70) [0044.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", lpFilePart=0x0) returned 0x3f [0044.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", lpFilePart=0x0) returned 0x3f [0044.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.448] CoTaskMemFree (pv=0xffa70) [0044.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", lpFilePart=0x0) returned 0x3f [0044.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", lpFilePart=0x0) returned 0x3f [0044.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.448] CoTaskMemFree (pv=0xffa70) [0044.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", lpFilePart=0x0) returned 0x3f [0044.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", lpFilePart=0x0) returned 0x3f [0044.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", lpFilePart=0x0) returned 0x3f [0044.448] SetErrorMode (uMode=0x1) returned 0x0 [0044.448] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.449] GetFileType (hFile=0x18c) returned 0x1 [0044.449] SetErrorMode (uMode=0x0) returned 0x1 [0044.449] GetFileType (hFile=0x18c) returned 0x1 [0044.449] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1e00 [0044.449] ReadFile (in: hFile=0x18c, lpBuffer=0x27cc958, nNumberOfBytesToRead=0x1e00, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cc958*, lpNumberOfBytesRead=0x27e6e8*=0x1e00, lpOverlapped=0x0) returned 1 [0044.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", lpFilePart=0x0) returned 0x3f [0044.452] SetErrorMode (uMode=0x1) returned 0x0 [0044.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0044.452] SetErrorMode (uMode=0x0) returned 0x1 [0044.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", lpFilePart=0x0) returned 0x3f [0044.512] SetErrorMode (uMode=0x1) returned 0x0 [0044.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.514] GetFileType (hFile=0x18c) returned 0x1 [0044.514] SetErrorMode (uMode=0x0) returned 0x1 [0044.514] GetFileType (hFile=0x18c) returned 0x1 [0044.514] WriteFile (in: hFile=0x18c, lpBuffer=0x2837dd8*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x2837dd8*, lpNumberOfBytesWritten=0x27e768*=0x1f10, lpOverlapped=0x0) returned 1 [0044.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", lpFilePart=0x0) returned 0x3f [0044.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\W56mun3MK11VCpX6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\W56mun3MK11VCpX6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0044.515] SetErrorMode (uMode=0x1) returned 0x0 [0044.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeb385e10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1f10)) returned 1 [0044.516] SetErrorMode (uMode=0x0) returned 0x1 [0044.516] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\W56mun3MK11VCpX6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\w56mun3mk11vcpx6_encrypted_by.whiterose")) returned 1 [0044.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", lpFilePart=0x0) returned 0x3f [0044.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", lpFilePart=0x0) returned 0x3f [0044.626] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.626] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.626] CoTaskMemFree (pv=0xffa70) [0044.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", lpFilePart=0x0) returned 0x3f [0044.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", lpFilePart=0x0) returned 0x3f [0044.626] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.626] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.626] CoTaskMemFree (pv=0xffa70) [0044.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", lpFilePart=0x0) returned 0x3f [0044.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", lpFilePart=0x0) returned 0x3f [0044.626] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.626] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.626] CoTaskMemFree (pv=0xffa70) [0044.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4d [0044.626] SetErrorMode (uMode=0x1) returned 0x0 [0044.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0044.627] GetFileType (hFile=0x18c) returned 0x1 [0044.627] SetErrorMode (uMode=0x0) returned 0x1 [0044.627] GetFileType (hFile=0x18c) returned 0x1 [0044.629] WriteFile (in: hFile=0x18c, lpBuffer=0x284e320*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x284e320*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0044.630] WriteFile (in: hFile=0x18c, lpBuffer=0x284e320*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x284e320*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0044.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", lpFilePart=0x0) returned 0x37 [0044.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", lpFilePart=0x0) returned 0x37 [0044.631] SetErrorMode (uMode=0x1) returned 0x0 [0044.631] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0044.634] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.635] SetErrorMode (uMode=0x0) returned 0x1 [0044.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", lpFilePart=0x0) returned 0x37 [0044.635] SetErrorMode (uMode=0x1) returned 0x0 [0044.635] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0044.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0044.637] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.637] SetErrorMode (uMode=0x0) returned 0x1 [0044.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", lpFilePart=0x0) returned 0x43 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", lpFilePart=0x0) returned 0x43 [0044.638] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.638] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.638] CoTaskMemFree (pv=0xffa70) [0044.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", lpFilePart=0x0) returned 0x43 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", lpFilePart=0x0) returned 0x43 [0044.638] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.638] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.638] CoTaskMemFree (pv=0xffa70) [0044.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", lpFilePart=0x0) returned 0x43 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", lpFilePart=0x0) returned 0x43 [0044.638] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.638] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.638] CoTaskMemFree (pv=0xffa70) [0044.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", lpFilePart=0x0) returned 0x43 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", lpFilePart=0x0) returned 0x43 [0044.638] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.638] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.638] CoTaskMemFree (pv=0xffa70) [0044.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", lpFilePart=0x0) returned 0x43 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", lpFilePart=0x0) returned 0x43 [0044.638] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.639] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.639] CoTaskMemFree (pv=0xffa70) [0044.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", lpFilePart=0x0) returned 0x43 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", lpFilePart=0x0) returned 0x43 [0044.639] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.639] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.639] CoTaskMemFree (pv=0xffa70) [0044.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll", lpFilePart=0x0) returned 0x43 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll", lpFilePart=0x0) returned 0x43 [0044.639] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.639] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.639] CoTaskMemFree (pv=0xffa70) [0044.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", lpFilePart=0x0) returned 0x43 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", lpFilePart=0x0) returned 0x43 [0044.639] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.639] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.639] CoTaskMemFree (pv=0xffa70) [0044.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", lpFilePart=0x0) returned 0x43 [0044.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", lpFilePart=0x0) returned 0x43 [0044.639] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.639] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.639] CoTaskMemFree (pv=0xffa70) [0044.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", lpFilePart=0x0) returned 0x43 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", lpFilePart=0x0) returned 0x43 [0044.640] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.640] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.640] CoTaskMemFree (pv=0xffa70) [0044.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", lpFilePart=0x0) returned 0x43 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", lpFilePart=0x0) returned 0x43 [0044.640] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.640] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.640] CoTaskMemFree (pv=0xffa70) [0044.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", lpFilePart=0x0) returned 0x43 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", lpFilePart=0x0) returned 0x43 [0044.640] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.640] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.640] CoTaskMemFree (pv=0xffa70) [0044.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", lpFilePart=0x0) returned 0x43 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", lpFilePart=0x0) returned 0x43 [0044.640] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.640] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.640] CoTaskMemFree (pv=0xffa70) [0044.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", lpFilePart=0x0) returned 0x43 [0044.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", lpFilePart=0x0) returned 0x43 [0044.641] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.641] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.641] CoTaskMemFree (pv=0xffa70) [0044.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", lpFilePart=0x0) returned 0x43 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", lpFilePart=0x0) returned 0x43 [0044.641] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.641] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.641] CoTaskMemFree (pv=0xffa70) [0044.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", lpFilePart=0x0) returned 0x43 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", lpFilePart=0x0) returned 0x43 [0044.641] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.641] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.641] CoTaskMemFree (pv=0xffa70) [0044.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", lpFilePart=0x0) returned 0x43 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", lpFilePart=0x0) returned 0x43 [0044.641] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.641] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.641] CoTaskMemFree (pv=0xffa70) [0044.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", lpFilePart=0x0) returned 0x43 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", lpFilePart=0x0) returned 0x43 [0044.641] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.641] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.641] CoTaskMemFree (pv=0xffa70) [0044.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", lpFilePart=0x0) returned 0x43 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", lpFilePart=0x0) returned 0x43 [0044.642] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.642] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.642] CoTaskMemFree (pv=0xffa70) [0044.642] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", lpFilePart=0x0) returned 0x43 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", lpFilePart=0x0) returned 0x43 [0044.642] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.642] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.642] CoTaskMemFree (pv=0xffa70) [0044.642] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", lpFilePart=0x0) returned 0x43 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", lpFilePart=0x0) returned 0x43 [0044.642] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.642] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.642] CoTaskMemFree (pv=0xffa70) [0044.642] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", lpFilePart=0x0) returned 0x43 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", lpFilePart=0x0) returned 0x43 [0044.642] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.642] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.642] CoTaskMemFree (pv=0xffa70) [0044.642] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", lpFilePart=0x0) returned 0x43 [0044.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", lpFilePart=0x0) returned 0x43 [0044.643] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.643] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.643] CoTaskMemFree (pv=0xffa70) [0044.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", lpFilePart=0x0) returned 0x43 [0044.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", lpFilePart=0x0) returned 0x43 [0044.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", lpFilePart=0x0) returned 0x43 [0044.643] SetErrorMode (uMode=0x1) returned 0x0 [0044.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.644] SetErrorMode (uMode=0x0) returned 0x1 [0044.644] GetFileType (hFile=0x18c) returned 0x1 [0044.644] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1e00 [0044.645] ReadFile (in: hFile=0x18c, lpBuffer=0x28671b8, nNumberOfBytesToRead=0x1e00, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28671b8*, lpNumberOfBytesRead=0x27e6e8*=0x1e00, lpOverlapped=0x0) returned 1 [0044.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", lpFilePart=0x0) returned 0x43 [0044.646] SetErrorMode (uMode=0x1) returned 0x0 [0044.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0044.646] SetErrorMode (uMode=0x0) returned 0x1 [0044.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", lpFilePart=0x0) returned 0x43 [0044.734] SetErrorMode (uMode=0x1) returned 0x0 [0044.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.735] SetErrorMode (uMode=0x0) returned 0x1 [0044.735] GetFileType (hFile=0x18c) returned 0x1 [0044.735] WriteFile (in: hFile=0x18c, lpBuffer=0x28d5b38*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x28d5b38*, lpNumberOfBytesWritten=0x27e768*=0x1f10, lpOverlapped=0x0) returned 1 [0044.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", lpFilePart=0x0) returned 0x43 [0044.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\1CZH0NZCSRyoa24R_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\1CZH0NZCSRyoa24R_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0044.737] SetErrorMode (uMode=0x1) returned 0x0 [0044.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeb5c12b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1f10)) returned 1 [0044.737] SetErrorMode (uMode=0x0) returned 0x1 [0044.737] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\1CZH0NZCSRyoa24R_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\1czh0nzcsryoa24r_encrypted_by.whiterose")) returned 1 [0044.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", lpFilePart=0x0) returned 0x43 [0044.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", lpFilePart=0x0) returned 0x43 [0044.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.844] CoTaskMemFree (pv=0xffa70) [0044.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", lpFilePart=0x0) returned 0x43 [0044.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", lpFilePart=0x0) returned 0x43 [0044.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.844] CoTaskMemFree (pv=0xffa70) [0044.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", lpFilePart=0x0) returned 0x43 [0044.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", lpFilePart=0x0) returned 0x43 [0044.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0044.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.844] CoTaskMemFree (pv=0xffa70) [0044.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0044.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0044.845] SetErrorMode (uMode=0x1) returned 0x0 [0044.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0044.845] SetErrorMode (uMode=0x0) returned 0x1 [0044.845] GetFileType (hFile=0x18c) returned 0x1 [0044.847] WriteFile (in: hFile=0x18c, lpBuffer=0x28ec0f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28ec0f0*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0044.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x3b [0044.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x3b [0044.848] SetErrorMode (uMode=0x1) returned 0x0 [0044.849] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0044.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0044.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0044.852] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.853] SetErrorMode (uMode=0x0) returned 0x1 [0044.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x3b [0044.853] SetErrorMode (uMode=0x1) returned 0x0 [0044.853] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0044.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0044.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0044.855] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.856] SetErrorMode (uMode=0x0) returned 0x1 [0044.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", lpFilePart=0x0) returned 0x3f [0044.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", lpFilePart=0x0) returned 0x3f [0044.856] SetErrorMode (uMode=0x1) returned 0x0 [0044.856] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0044.858] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.858] SetErrorMode (uMode=0x0) returned 0x1 [0044.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", lpFilePart=0x0) returned 0x3f [0044.858] SetErrorMode (uMode=0x1) returned 0x0 [0044.858] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0044.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0044.858] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0044.858] SetErrorMode (uMode=0x0) returned 0x1 [0044.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0044.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0044.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0044.859] SetErrorMode (uMode=0x1) returned 0x0 [0044.859] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.859] SetErrorMode (uMode=0x0) returned 0x1 [0044.859] GetFileType (hFile=0x18c) returned 0x1 [0044.859] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x11ff6 [0044.859] ReadFile (in: hFile=0x18c, lpBuffer=0x28f8588, nNumberOfBytesToRead=0x11ff6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f8588*, lpNumberOfBytesRead=0x27e648*=0x11ff6, lpOverlapped=0x0) returned 1 [0044.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0044.866] SetErrorMode (uMode=0x1) returned 0x0 [0044.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6)) returned 1 [0044.866] SetErrorMode (uMode=0x0) returned 0x1 [0044.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0044.943] SetErrorMode (uMode=0x1) returned 0x0 [0044.943] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0044.944] SetErrorMode (uMode=0x0) returned 0x1 [0044.944] GetFileType (hFile=0x18c) returned 0x1 [0044.944] WriteFile (in: hFile=0x18c, lpBuffer=0x27bb450*, nNumberOfBytesToWrite=0x12100, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27bb450*, lpNumberOfBytesWritten=0x27e6c8*=0x12100, lpOverlapped=0x0) returned 1 [0044.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0044.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\4bS2NbWsZI8TJD0D_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\4bS2NbWsZI8TJD0D_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0044.946] SetErrorMode (uMode=0x1) returned 0x0 [0044.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeb7b0490, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x12100)) returned 1 [0044.946] SetErrorMode (uMode=0x0) returned 0x1 [0044.946] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\4bS2NbWsZI8TJD0D_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\4bs2nbwszi8tjd0d_encrypted_by.whiterose")) returned 1 [0045.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.046] SetErrorMode (uMode=0x1) returned 0x0 [0045.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.047] SetErrorMode (uMode=0x0) returned 0x1 [0045.047] GetFileType (hFile=0x18c) returned 0x1 [0045.047] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x11581 [0045.047] ReadFile (in: hFile=0x18c, lpBuffer=0x27ceed8, nNumberOfBytesToRead=0x11581, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27ceed8*, lpNumberOfBytesRead=0x27e648*=0x11581, lpOverlapped=0x0) returned 1 [0045.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.049] SetErrorMode (uMode=0x1) returned 0x0 [0045.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581)) returned 1 [0045.049] SetErrorMode (uMode=0x0) returned 0x1 [0045.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.112] SetErrorMode (uMode=0x1) returned 0x0 [0045.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.113] SetErrorMode (uMode=0x0) returned 0x1 [0045.113] GetFileType (hFile=0x18c) returned 0x1 [0045.113] WriteFile (in: hFile=0x18c, lpBuffer=0x286ea48*, nNumberOfBytesToWrite=0x11690, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x286ea48*, lpNumberOfBytesWritten=0x27e6c8*=0x11690, lpOverlapped=0x0) returned 1 [0045.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\7LLlrATi7zGmgeep_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\7LLlrATi7zGmgeep_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0045.116] SetErrorMode (uMode=0x1) returned 0x0 [0045.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeb9533b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11690)) returned 1 [0045.116] SetErrorMode (uMode=0x0) returned 0x1 [0045.116] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\7LLlrATi7zGmgeep_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\7lllrati7zgmgeep_encrypted_by.whiterose")) returned 1 [0045.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0045.218] SetErrorMode (uMode=0x1) returned 0x0 [0045.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0045.221] SetErrorMode (uMode=0x0) returned 0x1 [0045.221] GetFileType (hFile=0x18c) returned 0x1 [0045.222] WriteFile (in: hFile=0x18c, lpBuffer=0x28928a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28928a0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0045.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", lpFilePart=0x0) returned 0x3f [0045.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", lpFilePart=0x0) returned 0x3f [0045.223] SetErrorMode (uMode=0x1) returned 0x0 [0045.224] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0045.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0045.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0045.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0045.225] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0045.225] SetErrorMode (uMode=0x0) returned 0x1 [0045.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", lpFilePart=0x0) returned 0x3f [0045.225] SetErrorMode (uMode=0x1) returned 0x0 [0045.225] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0045.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0045.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0045.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0045.225] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0045.225] SetErrorMode (uMode=0x0) returned 0x1 [0045.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.226] SetErrorMode (uMode=0x1) returned 0x0 [0045.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.226] SetErrorMode (uMode=0x0) returned 0x1 [0045.226] GetFileType (hFile=0x18c) returned 0x1 [0045.226] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x20cc1 [0045.227] ReadFile (in: hFile=0x18c, lpBuffer=0x1278b978, nNumberOfBytesToRead=0x20cc1, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x1278b978*, lpNumberOfBytesRead=0x27e648*=0x20cc1, lpOverlapped=0x0) returned 1 [0045.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.230] SetErrorMode (uMode=0x1) returned 0x0 [0045.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1)) returned 1 [0045.230] SetErrorMode (uMode=0x0) returned 0x1 [0045.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.297] SetErrorMode (uMode=0x1) returned 0x0 [0045.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.298] SetErrorMode (uMode=0x0) returned 0x1 [0045.298] GetFileType (hFile=0x18c) returned 0x1 [0045.298] WriteFile (in: hFile=0x18c, lpBuffer=0x128cc180*, nNumberOfBytesToWrite=0x20dd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x128cc180*, lpNumberOfBytesWritten=0x27e6c8*=0x20dd0, lpOverlapped=0x0) returned 1 [0045.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\qWhQE3v6fDESPcWc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\qWhQE3v6fDESPcWc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0045.301] SetErrorMode (uMode=0x1) returned 0x0 [0045.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xebb1c430, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x20dd0)) returned 1 [0045.301] SetErrorMode (uMode=0x0) returned 0x1 [0045.301] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\qWhQE3v6fDESPcWc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\qwhqe3v6fdespcwc_encrypted_by.whiterose")) returned 1 [0045.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.406] SetErrorMode (uMode=0x1) returned 0x0 [0045.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.406] SetErrorMode (uMode=0x0) returned 0x1 [0045.406] GetFileType (hFile=0x18c) returned 0x1 [0045.406] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x207b0 [0045.407] ReadFile (in: hFile=0x18c, lpBuffer=0x128ecf80, nNumberOfBytesToRead=0x207b0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x128ecf80*, lpNumberOfBytesRead=0x27e648*=0x207b0, lpOverlapped=0x0) returned 1 [0045.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.410] SetErrorMode (uMode=0x1) returned 0x0 [0045.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0)) returned 1 [0045.410] SetErrorMode (uMode=0x0) returned 0x1 [0045.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.480] SetErrorMode (uMode=0x1) returned 0x0 [0045.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.481] SetErrorMode (uMode=0x0) returned 0x1 [0045.481] GetFileType (hFile=0x18c) returned 0x1 [0045.481] WriteFile (in: hFile=0x18c, lpBuffer=0x129b0390*, nNumberOfBytesToWrite=0x208c0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x129b0390*, lpNumberOfBytesWritten=0x27e6c8*=0x208c0, lpOverlapped=0x0) returned 1 [0045.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\9N1L6riUnAqSnuPZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\9N1L6riUnAqSnuPZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0045.484] SetErrorMode (uMode=0x1) returned 0x0 [0045.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xebce54b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x208c0)) returned 1 [0045.484] SetErrorMode (uMode=0x0) returned 0x1 [0045.484] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\9N1L6riUnAqSnuPZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\9n1l6riunaqsnupz_encrypted_by.whiterose")) returned 1 [0045.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0045.592] SetErrorMode (uMode=0x1) returned 0x0 [0045.592] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0045.594] SetErrorMode (uMode=0x0) returned 0x1 [0045.594] GetFileType (hFile=0x18c) returned 0x1 [0045.596] WriteFile (in: hFile=0x18c, lpBuffer=0x2753770*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2753770*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0045.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", lpFilePart=0x0) returned 0x3f [0045.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", lpFilePart=0x0) returned 0x3f [0045.599] SetErrorMode (uMode=0x1) returned 0x0 [0045.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0045.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0045.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0045.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0045.605] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0045.605] SetErrorMode (uMode=0x0) returned 0x1 [0045.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", lpFilePart=0x0) returned 0x3f [0045.605] SetErrorMode (uMode=0x1) returned 0x0 [0045.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0045.605] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.605] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0045.605] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0045.605] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0045.605] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0045.605] SetErrorMode (uMode=0x0) returned 0x1 [0045.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.606] SetErrorMode (uMode=0x1) returned 0x0 [0045.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.606] SetErrorMode (uMode=0x0) returned 0x1 [0045.606] GetFileType (hFile=0x18c) returned 0x1 [0045.606] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x561b [0045.606] ReadFile (in: hFile=0x18c, lpBuffer=0x275b550, nNumberOfBytesToRead=0x561b, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x275b550*, lpNumberOfBytesRead=0x27e648*=0x561b, lpOverlapped=0x0) returned 1 [0045.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.608] SetErrorMode (uMode=0x1) returned 0x0 [0045.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b)) returned 1 [0045.608] SetErrorMode (uMode=0x0) returned 0x1 [0045.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.671] SetErrorMode (uMode=0x1) returned 0x0 [0045.672] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.673] SetErrorMode (uMode=0x0) returned 0x1 [0045.673] GetFileType (hFile=0x18c) returned 0x1 [0045.673] WriteFile (in: hFile=0x18c, lpBuffer=0x27dc178*, nNumberOfBytesToWrite=0x5720, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27dc178*, lpNumberOfBytesWritten=0x27e6c8*=0x5720, lpOverlapped=0x0) returned 1 [0045.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\lYpTXKxdEUWDCiqo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\lYpTXKxdEUWDCiqo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0045.674] SetErrorMode (uMode=0x1) returned 0x0 [0045.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xebeae530, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5720)) returned 1 [0045.674] SetErrorMode (uMode=0x0) returned 0x1 [0045.674] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\lYpTXKxdEUWDCiqo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\lyptxkxdeuwdciqo_encrypted_by.whiterose")) returned 1 [0045.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.780] SetErrorMode (uMode=0x1) returned 0x0 [0045.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.780] SetErrorMode (uMode=0x0) returned 0x1 [0045.780] GetFileType (hFile=0x18c) returned 0x1 [0045.780] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x510a [0045.780] ReadFile (in: hFile=0x18c, lpBuffer=0x27e3220, nNumberOfBytesToRead=0x510a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27e3220*, lpNumberOfBytesRead=0x27e648*=0x510a, lpOverlapped=0x0) returned 1 [0045.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.783] SetErrorMode (uMode=0x1) returned 0x0 [0045.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a)) returned 1 [0045.783] SetErrorMode (uMode=0x0) returned 0x1 [0045.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.845] SetErrorMode (uMode=0x1) returned 0x0 [0045.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.846] SetErrorMode (uMode=0x0) returned 0x1 [0045.846] GetFileType (hFile=0x18c) returned 0x1 [0045.846] WriteFile (in: hFile=0x18c, lpBuffer=0x285c398*, nNumberOfBytesToWrite=0x5210, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x285c398*, lpNumberOfBytesWritten=0x27e6c8*=0x5210, lpOverlapped=0x0) returned 1 [0045.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\3P9On*j3MSHDaAja_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\3P9On*j3MSHDaAja_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0045.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0045.857] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 1 [0045.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0045.860] SetErrorMode (uMode=0x1) returned 0x0 [0045.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0045.860] GetFileType (hFile=0x18c) returned 0x1 [0045.860] SetErrorMode (uMode=0x0) returned 0x1 [0045.860] GetFileType (hFile=0x18c) returned 0x1 [0045.862] WriteFile (in: hFile=0x18c, lpBuffer=0x28741b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28741b0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0045.863] WriteFile (in: hFile=0x18c, lpBuffer=0x28741b0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28741b0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0045.864] CloseHandle (hObject=0x18c) returned 1 [0045.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", lpFilePart=0x0) returned 0x3f [0045.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", lpFilePart=0x0) returned 0x3f [0045.864] SetErrorMode (uMode=0x1) returned 0x0 [0045.864] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0045.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0045.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0045.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0045.866] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0045.866] SetErrorMode (uMode=0x0) returned 0x1 [0045.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", lpFilePart=0x0) returned 0x3f [0045.866] SetErrorMode (uMode=0x1) returned 0x0 [0045.866] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0045.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0045.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0045.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0045.867] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0045.867] SetErrorMode (uMode=0x0) returned 0x1 [0045.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.868] SetErrorMode (uMode=0x1) returned 0x0 [0045.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0045.868] GetFileType (hFile=0x18c) returned 0x1 [0045.868] SetErrorMode (uMode=0x0) returned 0x1 [0045.868] GetFileType (hFile=0x18c) returned 0x1 [0045.868] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x16057 [0045.869] ReadFile (in: hFile=0x18c, lpBuffer=0x129d0c80, nNumberOfBytesToRead=0x16057, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x129d0c80*, lpNumberOfBytesRead=0x27e648*=0x16057, lpOverlapped=0x0) returned 1 [0045.872] CloseHandle (hObject=0x18c) returned 1 [0045.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0045.873] SetErrorMode (uMode=0x1) returned 0x0 [0045.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057)) returned 1 [0045.873] SetErrorMode (uMode=0x0) returned 0x1 [0046.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.089] SetErrorMode (uMode=0x1) returned 0x0 [0046.089] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.089] GetFileType (hFile=0x18c) returned 0x1 [0046.090] SetErrorMode (uMode=0x0) returned 0x1 [0046.090] GetFileType (hFile=0x18c) returned 0x1 [0046.090] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x16160, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e6c8*=0x16160, lpOverlapped=0x0) returned 1 [0046.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\NIErBjg*qD*wNaVT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\NIErBjg*qD*wNaVT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0046.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.095] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 1 [0046.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.098] SetErrorMode (uMode=0x1) returned 0x0 [0046.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.099] GetFileType (hFile=0x18c) returned 0x1 [0046.099] SetErrorMode (uMode=0x0) returned 0x1 [0046.099] GetFileType (hFile=0x18c) returned 0x1 [0046.099] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x155af [0046.099] ReadFile (in: hFile=0x18c, lpBuffer=0x126e85a8, nNumberOfBytesToRead=0x155af, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x126e85a8*, lpNumberOfBytesRead=0x27e648*=0x155af, lpOverlapped=0x0) returned 1 [0046.104] CloseHandle (hObject=0x18c) returned 1 [0046.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.105] SetErrorMode (uMode=0x1) returned 0x0 [0046.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af)) returned 1 [0046.105] SetErrorMode (uMode=0x0) returned 0x1 [0046.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.205] SetErrorMode (uMode=0x1) returned 0x0 [0046.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.206] GetFileType (hFile=0x18c) returned 0x1 [0046.206] SetErrorMode (uMode=0x0) returned 0x1 [0046.206] GetFileType (hFile=0x18c) returned 0x1 [0046.206] WriteFile (in: hFile=0x18c, lpBuffer=0x12768d78*, nNumberOfBytesToWrite=0x156b0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12768d78*, lpNumberOfBytesWritten=0x27e6c8*=0x156b0, lpOverlapped=0x0) returned 1 [0046.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\3ncofO8ynVydFUI3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\3ncofO8ynVydFUI3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0046.209] SetErrorMode (uMode=0x1) returned 0x0 [0046.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xec3bd3f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x156b0)) returned 1 [0046.209] SetErrorMode (uMode=0x0) returned 0x1 [0046.209] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\3ncofO8ynVydFUI3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\3ncofo8ynvydfui3_encrypted_by.whiterose")) returned 1 [0046.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0046.310] SetErrorMode (uMode=0x1) returned 0x0 [0046.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0046.311] GetFileType (hFile=0x18c) returned 0x1 [0046.311] SetErrorMode (uMode=0x0) returned 0x1 [0046.311] GetFileType (hFile=0x18c) returned 0x1 [0046.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", lpFilePart=0x0) returned 0x3f [0046.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", lpFilePart=0x0) returned 0x3f [0046.315] SetErrorMode (uMode=0x1) returned 0x0 [0046.315] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0046.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.316] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0046.316] SetErrorMode (uMode=0x0) returned 0x1 [0046.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", lpFilePart=0x0) returned 0x3f [0046.316] SetErrorMode (uMode=0x1) returned 0x0 [0046.316] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0046.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.317] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.317] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0046.317] SetErrorMode (uMode=0x0) returned 0x1 [0046.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.317] SetErrorMode (uMode=0x1) returned 0x0 [0046.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.317] GetFileType (hFile=0x18c) returned 0x1 [0046.318] SetErrorMode (uMode=0x0) returned 0x1 [0046.318] GetFileType (hFile=0x18c) returned 0x1 [0046.318] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x106ec [0046.318] ReadFile (in: hFile=0x18c, lpBuffer=0x276ac98, nNumberOfBytesToRead=0x106ec, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x276ac98*, lpNumberOfBytesRead=0x27e648*=0x106ec, lpOverlapped=0x0) returned 1 [0046.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.320] SetErrorMode (uMode=0x1) returned 0x0 [0046.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec)) returned 1 [0046.321] SetErrorMode (uMode=0x0) returned 0x1 [0046.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.385] SetErrorMode (uMode=0x1) returned 0x0 [0046.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.386] GetFileType (hFile=0x18c) returned 0x1 [0046.386] SetErrorMode (uMode=0x0) returned 0x1 [0046.386] GetFileType (hFile=0x18c) returned 0x1 [0046.387] WriteFile (in: hFile=0x18c, lpBuffer=0x2819680*, nNumberOfBytesToWrite=0x107f0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2819680*, lpNumberOfBytesWritten=0x27e6c8*=0x107f0, lpOverlapped=0x0) returned 1 [0046.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\VlAVFjNVli*pwjia_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\VlAVFjNVli*pwjia_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0046.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.398] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 1 [0046.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.402] SetErrorMode (uMode=0x1) returned 0x0 [0046.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.402] GetFileType (hFile=0x18c) returned 0x1 [0046.402] SetErrorMode (uMode=0x0) returned 0x1 [0046.402] GetFileType (hFile=0x18c) returned 0x1 [0046.402] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x101ce [0046.402] ReadFile (in: hFile=0x18c, lpBuffer=0x282bc30, nNumberOfBytesToRead=0x101ce, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x282bc30*, lpNumberOfBytesRead=0x27e648*=0x101ce, lpOverlapped=0x0) returned 1 [0046.405] CloseHandle (hObject=0x18c) returned 1 [0046.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.405] SetErrorMode (uMode=0x1) returned 0x0 [0046.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce)) returned 1 [0046.406] SetErrorMode (uMode=0x0) returned 0x1 [0046.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.521] SetErrorMode (uMode=0x1) returned 0x0 [0046.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.523] GetFileType (hFile=0x18c) returned 0x1 [0046.523] SetErrorMode (uMode=0x0) returned 0x1 [0046.523] GetFileType (hFile=0x18c) returned 0x1 [0046.523] WriteFile (in: hFile=0x18c, lpBuffer=0x28d7d70*, nNumberOfBytesToWrite=0x102d0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d7d70*, lpNumberOfBytesWritten=0x27e6c8*=0x102d0, lpOverlapped=0x0) returned 1 [0046.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\Fd8zTuJ515Dj0UUT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\Fd8zTuJ515Dj0UUT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0046.525] SetErrorMode (uMode=0x1) returned 0x0 [0046.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xec6b6f70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x102d0)) returned 1 [0046.525] SetErrorMode (uMode=0x0) returned 0x1 [0046.525] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\Fd8zTuJ515Dj0UUT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\fd8ztuj515dj0uut_encrypted_by.whiterose")) returned 1 [0046.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0046.622] SetErrorMode (uMode=0x1) returned 0x0 [0046.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0046.623] GetFileType (hFile=0x18c) returned 0x1 [0046.623] SetErrorMode (uMode=0x0) returned 0x1 [0046.623] GetFileType (hFile=0x18c) returned 0x1 [0046.625] WriteFile (in: hFile=0x18c, lpBuffer=0x28fa808*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28fa808*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0046.626] WriteFile (in: hFile=0x18c, lpBuffer=0x28fa808*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28fa808*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0046.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", lpFilePart=0x0) returned 0x3f [0046.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", lpFilePart=0x0) returned 0x3f [0046.627] SetErrorMode (uMode=0x1) returned 0x0 [0046.627] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0046.628] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.628] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.628] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.628] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.628] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0046.628] SetErrorMode (uMode=0x0) returned 0x1 [0046.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", lpFilePart=0x0) returned 0x3f [0046.628] SetErrorMode (uMode=0x1) returned 0x0 [0046.628] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0046.629] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.629] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.629] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.629] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.629] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0046.629] SetErrorMode (uMode=0x0) returned 0x1 [0046.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.629] SetErrorMode (uMode=0x1) returned 0x0 [0046.630] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.630] GetFileType (hFile=0x18c) returned 0x1 [0046.630] SetErrorMode (uMode=0x0) returned 0x1 [0046.630] GetFileType (hFile=0x18c) returned 0x1 [0046.630] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x106d4 [0046.630] ReadFile (in: hFile=0x18c, lpBuffer=0x29025e8, nNumberOfBytesToRead=0x106d4, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x29025e8*, lpNumberOfBytesRead=0x27e648*=0x106d4, lpOverlapped=0x0) returned 1 [0046.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.633] SetErrorMode (uMode=0x1) returned 0x0 [0046.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4)) returned 1 [0046.633] SetErrorMode (uMode=0x0) returned 0x1 [0046.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.694] SetErrorMode (uMode=0x1) returned 0x0 [0046.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.695] GetFileType (hFile=0x18c) returned 0x1 [0046.696] SetErrorMode (uMode=0x0) returned 0x1 [0046.696] GetFileType (hFile=0x18c) returned 0x1 [0046.696] WriteFile (in: hFile=0x18c, lpBuffer=0x27a35d0*, nNumberOfBytesToWrite=0x107e0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27a35d0*, lpNumberOfBytesWritten=0x27e6c8*=0x107e0, lpOverlapped=0x0) returned 1 [0046.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\VTFwxZArXl312EH3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\VTFwxZArXl312EH3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0046.698] SetErrorMode (uMode=0x1) returned 0x0 [0046.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xec859e90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x107e0)) returned 1 [0046.698] SetErrorMode (uMode=0x0) returned 0x1 [0046.698] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\VTFwxZArXl312EH3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\vtfwxzarxl312eh3_encrypted_by.whiterose")) returned 1 [0046.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.794] SetErrorMode (uMode=0x1) returned 0x0 [0046.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.794] GetFileType (hFile=0x18c) returned 0x1 [0046.795] SetErrorMode (uMode=0x0) returned 0x1 [0046.795] GetFileType (hFile=0x18c) returned 0x1 [0046.795] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x101bc [0046.795] ReadFile (in: hFile=0x18c, lpBuffer=0x27b5738, nNumberOfBytesToRead=0x101bc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b5738*, lpNumberOfBytesRead=0x27e648*=0x101bc, lpOverlapped=0x0) returned 1 [0046.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.797] SetErrorMode (uMode=0x1) returned 0x0 [0046.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc)) returned 1 [0046.797] SetErrorMode (uMode=0x0) returned 0x1 [0046.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.861] SetErrorMode (uMode=0x1) returned 0x0 [0046.861] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.862] GetFileType (hFile=0x18c) returned 0x1 [0046.862] SetErrorMode (uMode=0x0) returned 0x1 [0046.862] GetFileType (hFile=0x18c) returned 0x1 [0046.862] WriteFile (in: hFile=0x18c, lpBuffer=0x2850750*, nNumberOfBytesToWrite=0x102c0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2850750*, lpNumberOfBytesWritten=0x27e6c8*=0x102c0, lpOverlapped=0x0) returned 1 [0046.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\MmUebhEKdMKhf97r_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\MmUebhEKdMKhf97r_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0046.864] SetErrorMode (uMode=0x1) returned 0x0 [0046.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xec9fcdb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x102c0)) returned 1 [0046.865] SetErrorMode (uMode=0x0) returned 0x1 [0046.865] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\MmUebhEKdMKhf97r_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\mmuebhekdmkhf97r_encrypted_by.whiterose")) returned 1 [0046.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0046.965] SetErrorMode (uMode=0x1) returned 0x0 [0046.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0046.968] GetFileType (hFile=0x18c) returned 0x1 [0046.969] SetErrorMode (uMode=0x0) returned 0x1 [0046.969] GetFileType (hFile=0x18c) returned 0x1 [0046.970] WriteFile (in: hFile=0x18c, lpBuffer=0x28731d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28731d8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0046.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x3f [0046.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x3f [0046.972] SetErrorMode (uMode=0x1) returned 0x0 [0046.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0046.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.973] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0046.973] SetErrorMode (uMode=0x0) returned 0x1 [0046.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x3f [0046.973] SetErrorMode (uMode=0x1) returned 0x0 [0046.973] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0046.974] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.974] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.974] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.974] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.974] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0046.974] SetErrorMode (uMode=0x0) returned 0x1 [0046.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.975] SetErrorMode (uMode=0x1) returned 0x0 [0046.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0046.975] GetFileType (hFile=0x18c) returned 0x1 [0046.975] SetErrorMode (uMode=0x0) returned 0x1 [0046.975] GetFileType (hFile=0x18c) returned 0x1 [0046.975] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x14096 [0046.975] ReadFile (in: hFile=0x18c, lpBuffer=0x287afb8, nNumberOfBytesToRead=0x14096, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x287afb8*, lpNumberOfBytesRead=0x27e648*=0x14096, lpOverlapped=0x0) returned 1 [0046.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.977] SetErrorMode (uMode=0x1) returned 0x0 [0046.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096)) returned 1 [0046.978] SetErrorMode (uMode=0x0) returned 0x1 [0047.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.042] SetErrorMode (uMode=0x1) returned 0x0 [0047.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.044] GetFileType (hFile=0x18c) returned 0x1 [0047.044] SetErrorMode (uMode=0x0) returned 0x1 [0047.044] GetFileType (hFile=0x18c) returned 0x1 [0047.044] WriteFile (in: hFile=0x18c, lpBuffer=0x2929f30*, nNumberOfBytesToWrite=0x141a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2929f30*, lpNumberOfBytesWritten=0x27e6c8*=0x141a0, lpOverlapped=0x0) returned 1 [0047.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\8xqJoJgwnQJMO7Me_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\8xqJoJgwnQJMO7Me_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0047.049] SetErrorMode (uMode=0x1) returned 0x0 [0047.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xecbc5e30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x141a0)) returned 1 [0047.049] SetErrorMode (uMode=0x0) returned 0x1 [0047.049] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\8xqJoJgwnQJMO7Me_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\8xqjojgwnqjmo7me_encrypted_by.whiterose")) returned 1 [0047.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.153] SetErrorMode (uMode=0x1) returned 0x0 [0047.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.154] GetFileType (hFile=0x18c) returned 0x1 [0047.154] SetErrorMode (uMode=0x0) returned 0x1 [0047.154] GetFileType (hFile=0x18c) returned 0x1 [0047.154] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x13b0b [0047.154] ReadFile (in: hFile=0x18c, lpBuffer=0x272d190, nNumberOfBytesToRead=0x13b0b, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x272d190*, lpNumberOfBytesRead=0x27e648*=0x13b0b, lpOverlapped=0x0) returned 1 [0047.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.156] SetErrorMode (uMode=0x1) returned 0x0 [0047.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b)) returned 1 [0047.157] SetErrorMode (uMode=0x0) returned 0x1 [0047.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.218] SetErrorMode (uMode=0x1) returned 0x0 [0047.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.220] GetFileType (hFile=0x18c) returned 0x1 [0047.220] SetErrorMode (uMode=0x0) returned 0x1 [0047.220] GetFileType (hFile=0x18c) returned 0x1 [0047.220] WriteFile (in: hFile=0x18c, lpBuffer=0x27d6ac0*, nNumberOfBytesToWrite=0x13c10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d6ac0*, lpNumberOfBytesWritten=0x27e6c8*=0x13c10, lpOverlapped=0x0) returned 1 [0047.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\kHQRg2vQE*dy4UnE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\kHQRg2vQE*dy4UnE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0047.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.231] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 1 [0047.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0047.234] SetErrorMode (uMode=0x1) returned 0x0 [0047.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0047.235] GetFileType (hFile=0x18c) returned 0x1 [0047.235] SetErrorMode (uMode=0x0) returned 0x1 [0047.235] GetFileType (hFile=0x18c) returned 0x1 [0047.236] WriteFile (in: hFile=0x18c, lpBuffer=0x27fd2d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27fd2d8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0047.238] WriteFile (in: hFile=0x18c, lpBuffer=0x27fd2d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27fd2d8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0047.238] CloseHandle (hObject=0x18c) returned 1 [0047.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", lpFilePart=0x0) returned 0x3f [0047.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", lpFilePart=0x0) returned 0x3f [0047.238] SetErrorMode (uMode=0x1) returned 0x0 [0047.238] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.239] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.239] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.239] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.240] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.240] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.240] SetErrorMode (uMode=0x0) returned 0x1 [0047.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", lpFilePart=0x0) returned 0x3f [0047.240] SetErrorMode (uMode=0x1) returned 0x0 [0047.240] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.240] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.240] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.241] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.241] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.241] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.241] SetErrorMode (uMode=0x0) returned 0x1 [0047.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.241] SetErrorMode (uMode=0x1) returned 0x0 [0047.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.242] GetFileType (hFile=0x18c) returned 0x1 [0047.242] SetErrorMode (uMode=0x0) returned 0x1 [0047.242] GetFileType (hFile=0x18c) returned 0x1 [0047.242] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x109db [0047.242] ReadFile (in: hFile=0x18c, lpBuffer=0x28050b8, nNumberOfBytesToRead=0x109db, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28050b8*, lpNumberOfBytesRead=0x27e648*=0x109db, lpOverlapped=0x0) returned 1 [0047.244] CloseHandle (hObject=0x18c) returned 1 [0047.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.245] SetErrorMode (uMode=0x1) returned 0x0 [0047.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db)) returned 1 [0047.245] SetErrorMode (uMode=0x0) returned 0x1 [0047.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.351] SetErrorMode (uMode=0x1) returned 0x0 [0047.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.353] GetFileType (hFile=0x18c) returned 0x1 [0047.353] SetErrorMode (uMode=0x0) returned 0x1 [0047.353] GetFileType (hFile=0x18c) returned 0x1 [0047.353] WriteFile (in: hFile=0x18c, lpBuffer=0x289f668*, nNumberOfBytesToWrite=0x10ae0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x289f668*, lpNumberOfBytesWritten=0x27e6c8*=0x10ae0, lpOverlapped=0x0) returned 1 [0047.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\6AlvubrZhVHrFtZm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\6AlvubrZhVHrFtZm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0047.355] SetErrorMode (uMode=0x1) returned 0x0 [0047.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xece99850, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10ae0)) returned 1 [0047.355] SetErrorMode (uMode=0x0) returned 0x1 [0047.355] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\6AlvubrZhVHrFtZm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\6alvubrzhvhrftzm_encrypted_by.whiterose")) returned 1 [0047.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.465] SetErrorMode (uMode=0x1) returned 0x0 [0047.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.466] GetFileType (hFile=0x18c) returned 0x1 [0047.466] SetErrorMode (uMode=0x0) returned 0x1 [0047.467] GetFileType (hFile=0x18c) returned 0x1 [0047.467] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x104bf [0047.467] ReadFile (in: hFile=0x18c, lpBuffer=0x28b1ad0, nNumberOfBytesToRead=0x104bf, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28b1ad0*, lpNumberOfBytesRead=0x27e648*=0x104bf, lpOverlapped=0x0) returned 1 [0047.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.470] SetErrorMode (uMode=0x1) returned 0x0 [0047.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf)) returned 1 [0047.470] SetErrorMode (uMode=0x0) returned 0x1 [0047.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.537] SetErrorMode (uMode=0x1) returned 0x0 [0047.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.538] GetFileType (hFile=0x18c) returned 0x1 [0047.538] SetErrorMode (uMode=0x0) returned 0x1 [0047.538] GetFileType (hFile=0x18c) returned 0x1 [0047.538] WriteFile (in: hFile=0x18c, lpBuffer=0x274d708*, nNumberOfBytesToWrite=0x105c0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x274d708*, lpNumberOfBytesWritten=0x27e6c8*=0x105c0, lpOverlapped=0x0) returned 1 [0047.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\jeVs0Gimec70xdMu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\jeVs0Gimec70xdMu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0047.540] SetErrorMode (uMode=0x1) returned 0x0 [0047.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0628d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x105c0)) returned 1 [0047.540] SetErrorMode (uMode=0x0) returned 0x1 [0047.540] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\jeVs0Gimec70xdMu_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\jevs0gimec70xdmu_encrypted_by.whiterose")) returned 1 [0047.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0047.637] SetErrorMode (uMode=0x1) returned 0x0 [0047.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0047.639] GetFileType (hFile=0x18c) returned 0x1 [0047.639] SetErrorMode (uMode=0x0) returned 0x1 [0047.639] GetFileType (hFile=0x18c) returned 0x1 [0047.641] WriteFile (in: hFile=0x18c, lpBuffer=0x2770490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2770490*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0047.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", lpFilePart=0x0) returned 0x3f [0047.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", lpFilePart=0x0) returned 0x3f [0047.643] SetErrorMode (uMode=0x1) returned 0x0 [0047.643] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.643] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.643] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0047.643] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.643] SetErrorMode (uMode=0x0) returned 0x1 [0047.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", lpFilePart=0x0) returned 0x3f [0047.644] SetErrorMode (uMode=0x1) returned 0x0 [0047.644] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.644] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.644] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0047.644] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.644] SetErrorMode (uMode=0x0) returned 0x1 [0047.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0047.644] SetErrorMode (uMode=0x1) returned 0x0 [0047.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0047.645] GetFileType (hFile=0x18c) returned 0x1 [0047.645] SetErrorMode (uMode=0x0) returned 0x1 [0047.645] GetFileType (hFile=0x18c) returned 0x1 [0047.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", lpFilePart=0x0) returned 0x3f [0047.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", lpFilePart=0x0) returned 0x3f [0047.646] SetErrorMode (uMode=0x1) returned 0x0 [0047.646] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.647] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.647] SetErrorMode (uMode=0x0) returned 0x1 [0047.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", lpFilePart=0x0) returned 0x3f [0047.647] SetErrorMode (uMode=0x1) returned 0x0 [0047.647] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.648] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.648] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.648] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.648] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.648] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.648] SetErrorMode (uMode=0x0) returned 0x1 [0047.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.648] SetErrorMode (uMode=0x1) returned 0x0 [0047.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.649] GetFileType (hFile=0x18c) returned 0x1 [0047.649] SetErrorMode (uMode=0x0) returned 0x1 [0047.649] GetFileType (hFile=0x18c) returned 0x1 [0047.649] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10ab0 [0047.649] ReadFile (in: hFile=0x18c, lpBuffer=0x27907c0, nNumberOfBytesToRead=0x10ab0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27907c0*, lpNumberOfBytesRead=0x27e648*=0x10ab0, lpOverlapped=0x0) returned 1 [0047.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.651] SetErrorMode (uMode=0x1) returned 0x0 [0047.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0)) returned 1 [0047.652] SetErrorMode (uMode=0x0) returned 0x1 [0047.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.717] SetErrorMode (uMode=0x1) returned 0x0 [0047.717] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.719] GetFileType (hFile=0x18c) returned 0x1 [0047.719] SetErrorMode (uMode=0x0) returned 0x1 [0047.719] GetFileType (hFile=0x18c) returned 0x1 [0047.719] WriteFile (in: hFile=0x18c, lpBuffer=0x282e670*, nNumberOfBytesToWrite=0x10bc0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x282e670*, lpNumberOfBytesWritten=0x27e6c8*=0x10bc0, lpOverlapped=0x0) returned 1 [0047.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\EprXk8U*og5D7bsh_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\EprXk8U*og5D7bsh_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0047.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.726] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 1 [0047.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.729] SetErrorMode (uMode=0x1) returned 0x0 [0047.729] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.730] GetFileType (hFile=0x18c) returned 0x1 [0047.730] SetErrorMode (uMode=0x0) returned 0x1 [0047.730] GetFileType (hFile=0x18c) returned 0x1 [0047.730] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10596 [0047.730] ReadFile (in: hFile=0x18c, lpBuffer=0x2840ff0, nNumberOfBytesToRead=0x10596, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2840ff0*, lpNumberOfBytesRead=0x27e648*=0x10596, lpOverlapped=0x0) returned 1 [0047.732] CloseHandle (hObject=0x18c) returned 1 [0047.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.732] SetErrorMode (uMode=0x1) returned 0x0 [0047.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596)) returned 1 [0047.732] SetErrorMode (uMode=0x0) returned 0x1 [0047.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.820] SetErrorMode (uMode=0x1) returned 0x0 [0047.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.821] GetFileType (hFile=0x18c) returned 0x1 [0047.821] SetErrorMode (uMode=0x0) returned 0x1 [0047.821] GetFileType (hFile=0x18c) returned 0x1 [0047.821] WriteFile (in: hFile=0x18c, lpBuffer=0x28dcf88*, nNumberOfBytesToWrite=0x106a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28dcf88*, lpNumberOfBytesWritten=0x27e6c8*=0x106a0, lpOverlapped=0x0) returned 1 [0047.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\piYBygRh43xxIL51_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\piYBygRh43xxIL51_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0047.824] SetErrorMode (uMode=0x1) returned 0x0 [0047.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed3362f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x106a0)) returned 1 [0047.824] SetErrorMode (uMode=0x0) returned 0x1 [0047.824] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\piYBygRh43xxIL51_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\piybygrh43xxil51_encrypted_by.whiterose")) returned 1 [0047.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0047.934] SetErrorMode (uMode=0x1) returned 0x0 [0047.934] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0047.935] GetFileType (hFile=0x18c) returned 0x1 [0047.935] SetErrorMode (uMode=0x0) returned 0x1 [0047.935] GetFileType (hFile=0x18c) returned 0x1 [0047.936] WriteFile (in: hFile=0x18c, lpBuffer=0x28ffdf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28ffdf0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0047.938] WriteFile (in: hFile=0x18c, lpBuffer=0x28ffdf0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28ffdf0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0047.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", lpFilePart=0x0) returned 0x3f [0047.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", lpFilePart=0x0) returned 0x3f [0047.939] SetErrorMode (uMode=0x1) returned 0x0 [0047.939] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.940] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.940] SetErrorMode (uMode=0x0) returned 0x1 [0047.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", lpFilePart=0x0) returned 0x3f [0047.940] SetErrorMode (uMode=0x1) returned 0x0 [0047.940] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0047.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.941] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0047.941] SetErrorMode (uMode=0x0) returned 0x1 [0047.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.941] SetErrorMode (uMode=0x1) returned 0x0 [0047.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0047.942] GetFileType (hFile=0x18c) returned 0x1 [0047.942] SetErrorMode (uMode=0x0) returned 0x1 [0047.942] GetFileType (hFile=0x18c) returned 0x1 [0047.942] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x43b5 [0047.942] ReadFile (in: hFile=0x18c, lpBuffer=0x2907bd0, nNumberOfBytesToRead=0x43b5, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2907bd0*, lpNumberOfBytesRead=0x27e648*=0x43b5, lpOverlapped=0x0) returned 1 [0047.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.945] SetErrorMode (uMode=0x1) returned 0x0 [0047.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5)) returned 1 [0047.945] SetErrorMode (uMode=0x0) returned 0x1 [0048.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.077] SetErrorMode (uMode=0x1) returned 0x0 [0048.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.077] GetFileType (hFile=0x18c) returned 0x1 [0048.077] SetErrorMode (uMode=0x0) returned 0x1 [0048.077] GetFileType (hFile=0x18c) returned 0x1 [0048.078] WriteFile (in: hFile=0x18c, lpBuffer=0x2770090*, nNumberOfBytesToWrite=0x44c0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2770090*, lpNumberOfBytesWritten=0x27e6c8*=0x44c0, lpOverlapped=0x0) returned 1 [0048.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\Py4lqFZ*0NSvfHmM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\Py4lqFZ*0NSvfHmM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0048.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.085] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 1 [0048.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.088] SetErrorMode (uMode=0x1) returned 0x0 [0048.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.089] GetFileType (hFile=0x18c) returned 0x1 [0048.089] SetErrorMode (uMode=0x0) returned 0x1 [0048.089] GetFileType (hFile=0x18c) returned 0x1 [0048.089] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3e95 [0048.089] ReadFile (in: hFile=0x18c, lpBuffer=0x2776310, nNumberOfBytesToRead=0x3e95, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2776310*, lpNumberOfBytesRead=0x27e648*=0x3e95, lpOverlapped=0x0) returned 1 [0048.091] CloseHandle (hObject=0x18c) returned 1 [0048.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.091] SetErrorMode (uMode=0x1) returned 0x0 [0048.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95)) returned 1 [0048.092] SetErrorMode (uMode=0x0) returned 0x1 [0048.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.183] SetErrorMode (uMode=0x1) returned 0x0 [0048.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.184] GetFileType (hFile=0x18c) returned 0x1 [0048.184] SetErrorMode (uMode=0x0) returned 0x1 [0048.184] GetFileType (hFile=0x18c) returned 0x1 [0048.184] WriteFile (in: hFile=0x18c, lpBuffer=0x27e8610*, nNumberOfBytesToWrite=0x3fa0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27e8610*, lpNumberOfBytesWritten=0x27e6c8*=0x3fa0, lpOverlapped=0x0) returned 1 [0048.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\XDUdD1Iosp2Ovxlc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\XDUdD1Iosp2Ovxlc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0048.185] SetErrorMode (uMode=0x1) returned 0x0 [0048.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed6a2290, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x3fa0)) returned 1 [0048.185] SetErrorMode (uMode=0x0) returned 0x1 [0048.186] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\XDUdD1Iosp2Ovxlc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\xdudd1iosp2ovxlc_encrypted_by.whiterose")) returned 1 [0048.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0048.291] SetErrorMode (uMode=0x1) returned 0x0 [0048.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0048.292] GetFileType (hFile=0x18c) returned 0x1 [0048.292] SetErrorMode (uMode=0x0) returned 0x1 [0048.292] GetFileType (hFile=0x18c) returned 0x1 [0048.293] WriteFile (in: hFile=0x18c, lpBuffer=0x27fed78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27fed78*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0048.295] WriteFile (in: hFile=0x18c, lpBuffer=0x27fed78*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27fed78*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0048.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", lpFilePart=0x0) returned 0x3f [0048.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", lpFilePart=0x0) returned 0x3f [0048.295] SetErrorMode (uMode=0x1) returned 0x0 [0048.295] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0048.305] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.305] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.305] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.305] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.305] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0048.305] SetErrorMode (uMode=0x0) returned 0x1 [0048.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", lpFilePart=0x0) returned 0x3f [0048.306] SetErrorMode (uMode=0x1) returned 0x0 [0048.306] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0048.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.306] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0048.306] SetErrorMode (uMode=0x0) returned 0x1 [0048.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.307] SetErrorMode (uMode=0x1) returned 0x0 [0048.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.308] GetFileType (hFile=0x18c) returned 0x1 [0048.308] SetErrorMode (uMode=0x0) returned 0x1 [0048.308] GetFileType (hFile=0x18c) returned 0x1 [0048.308] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x16097 [0048.309] ReadFile (in: hFile=0x18c, lpBuffer=0x128d5118, nNumberOfBytesToRead=0x16097, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x128d5118*, lpNumberOfBytesRead=0x27e648*=0x16097, lpOverlapped=0x0) returned 1 [0048.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.329] SetErrorMode (uMode=0x1) returned 0x0 [0048.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097)) returned 1 [0048.329] SetErrorMode (uMode=0x0) returned 0x1 [0048.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.397] SetErrorMode (uMode=0x1) returned 0x0 [0048.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.398] GetFileType (hFile=0x18c) returned 0x1 [0048.398] SetErrorMode (uMode=0x0) returned 0x1 [0048.398] GetFileType (hFile=0x18c) returned 0x1 [0048.398] WriteFile (in: hFile=0x18c, lpBuffer=0x12959a78*, nNumberOfBytesToWrite=0x161a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12959a78*, lpNumberOfBytesWritten=0x27e6c8*=0x161a0, lpOverlapped=0x0) returned 1 [0048.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\cisahuyNpHpvmg0l_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\cisahuyNpHpvmg0l_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0048.401] SetErrorMode (uMode=0x1) returned 0x0 [0048.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed8b75d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x161a0)) returned 1 [0048.401] SetErrorMode (uMode=0x0) returned 0x1 [0048.401] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\cisahuyNpHpvmg0l_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\cisahuynphpvmg0l_encrypted_by.whiterose")) returned 1 [0048.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.510] SetErrorMode (uMode=0x1) returned 0x0 [0048.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.510] GetFileType (hFile=0x18c) returned 0x1 [0048.510] SetErrorMode (uMode=0x0) returned 0x1 [0048.511] GetFileType (hFile=0x18c) returned 0x1 [0048.511] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x15db2 [0048.512] ReadFile (in: hFile=0x18c, lpBuffer=0x1296fc48, nNumberOfBytesToRead=0x15db2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x1296fc48*, lpNumberOfBytesRead=0x27e648*=0x15db2, lpOverlapped=0x0) returned 1 [0048.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.515] SetErrorMode (uMode=0x1) returned 0x0 [0048.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2)) returned 1 [0048.515] SetErrorMode (uMode=0x0) returned 0x1 [0048.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.605] SetErrorMode (uMode=0x1) returned 0x0 [0048.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.607] GetFileType (hFile=0x18c) returned 0x1 [0048.607] SetErrorMode (uMode=0x0) returned 0x1 [0048.607] GetFileType (hFile=0x18c) returned 0x1 [0048.607] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x15ec0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e6c8*=0x15ec0, lpOverlapped=0x0) returned 1 [0048.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\fRmvWUvDwyYZVTe9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\fRmvWUvDwyYZVTe9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0048.609] SetErrorMode (uMode=0x1) returned 0x0 [0048.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xedaa67b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0)) returned 1 [0048.610] SetErrorMode (uMode=0x0) returned 0x1 [0048.610] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\fRmvWUvDwyYZVTe9_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\frmvwuvdwyyzvte9_encrypted_by.whiterose")) returned 1 [0048.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0048.717] SetErrorMode (uMode=0x1) returned 0x0 [0048.717] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0048.721] GetFileType (hFile=0x18c) returned 0x1 [0048.721] SetErrorMode (uMode=0x0) returned 0x1 [0048.721] GetFileType (hFile=0x18c) returned 0x1 [0048.723] WriteFile (in: hFile=0x18c, lpBuffer=0x2705d88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2705d88*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0048.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", lpFilePart=0x0) returned 0x3f [0048.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", lpFilePart=0x0) returned 0x3f [0048.724] SetErrorMode (uMode=0x1) returned 0x0 [0048.724] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0048.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.725] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0048.725] SetErrorMode (uMode=0x0) returned 0x1 [0048.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", lpFilePart=0x0) returned 0x3f [0048.725] SetErrorMode (uMode=0x1) returned 0x0 [0048.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0048.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.726] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0048.726] SetErrorMode (uMode=0x0) returned 0x1 [0048.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.726] SetErrorMode (uMode=0x1) returned 0x0 [0048.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.727] GetFileType (hFile=0x18c) returned 0x1 [0048.728] SetErrorMode (uMode=0x0) returned 0x1 [0048.728] GetFileType (hFile=0x18c) returned 0x1 [0048.728] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10913 [0048.728] ReadFile (in: hFile=0x18c, lpBuffer=0x270db68, nNumberOfBytesToRead=0x10913, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x270db68*, lpNumberOfBytesRead=0x27e648*=0x10913, lpOverlapped=0x0) returned 1 [0048.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.731] SetErrorMode (uMode=0x1) returned 0x0 [0048.731] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913)) returned 1 [0048.731] SetErrorMode (uMode=0x0) returned 0x1 [0048.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.796] SetErrorMode (uMode=0x1) returned 0x0 [0048.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.797] GetFileType (hFile=0x18c) returned 0x1 [0048.797] SetErrorMode (uMode=0x0) returned 0x1 [0048.797] GetFileType (hFile=0x18c) returned 0x1 [0048.797] WriteFile (in: hFile=0x18c, lpBuffer=0x27bcf80*, nNumberOfBytesToWrite=0x10a20, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27bcf80*, lpNumberOfBytesWritten=0x27e6c8*=0x10a20, lpOverlapped=0x0) returned 1 [0048.799] CloseHandle (hObject=0x18c) returned 1 [0048.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\jqfPAittDpwttukU_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\jqfPAittDpwttukU_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0048.801] SetErrorMode (uMode=0x1) returned 0x0 [0048.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xedc6f830, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a20)) returned 1 [0048.801] SetErrorMode (uMode=0x0) returned 0x1 [0048.801] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\jqfPAittDpwttukU_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\jqfpaittdpwttuku_encrypted_by.whiterose")) returned 1 [0048.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.900] SetErrorMode (uMode=0x1) returned 0x0 [0048.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.901] GetFileType (hFile=0x18c) returned 0x1 [0048.901] SetErrorMode (uMode=0x0) returned 0x1 [0048.901] GetFileType (hFile=0x18c) returned 0x1 [0048.901] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x103f8 [0048.901] ReadFile (in: hFile=0x18c, lpBuffer=0x27cf328, nNumberOfBytesToRead=0x103f8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27cf328*, lpNumberOfBytesRead=0x27e648*=0x103f8, lpOverlapped=0x0) returned 1 [0048.903] CloseHandle (hObject=0x18c) returned 1 [0048.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.903] SetErrorMode (uMode=0x1) returned 0x0 [0048.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8)) returned 1 [0048.903] SetErrorMode (uMode=0x0) returned 0x1 [0048.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.966] SetErrorMode (uMode=0x1) returned 0x0 [0048.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0048.968] GetFileType (hFile=0x18c) returned 0x1 [0048.968] SetErrorMode (uMode=0x0) returned 0x1 [0048.968] GetFileType (hFile=0x18c) returned 0x1 [0048.968] WriteFile (in: hFile=0x18c, lpBuffer=0x287bdf0*, nNumberOfBytesToWrite=0x10500, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x287bdf0*, lpNumberOfBytesWritten=0x27e6c8*=0x10500, lpOverlapped=0x0) returned 1 [0048.969] CloseHandle (hObject=0x18c) returned 1 [0048.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\1iYK2IfhMmis3MeG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\1iYK2IfhMmis3MeG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0048.971] SetErrorMode (uMode=0x1) returned 0x0 [0048.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xede12750, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10500)) returned 1 [0048.971] SetErrorMode (uMode=0x0) returned 0x1 [0048.971] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\1iYK2IfhMmis3MeG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\1iyk2ifhmmis3meg_encrypted_by.whiterose")) returned 1 [0049.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0049.071] SetErrorMode (uMode=0x1) returned 0x0 [0049.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0049.074] GetFileType (hFile=0x18c) returned 0x1 [0049.074] SetErrorMode (uMode=0x0) returned 0x1 [0049.074] GetFileType (hFile=0x18c) returned 0x1 [0049.074] WriteFile (in: hFile=0x18c, lpBuffer=0x289eab8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x289eab8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0049.075] WriteFile (in: hFile=0x18c, lpBuffer=0x289eab8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x289eab8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0049.075] CloseHandle (hObject=0x18c) returned 1 [0049.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", lpFilePart=0x0) returned 0x3f [0049.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", lpFilePart=0x0) returned 0x3f [0049.076] SetErrorMode (uMode=0x1) returned 0x0 [0049.076] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0049.076] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.076] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0049.076] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0049.076] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0049.077] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0049.077] SetErrorMode (uMode=0x0) returned 0x1 [0049.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", lpFilePart=0x0) returned 0x3f [0049.077] SetErrorMode (uMode=0x1) returned 0x0 [0049.077] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0049.077] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.077] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0049.077] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0049.077] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0049.078] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0049.078] SetErrorMode (uMode=0x0) returned 0x1 [0049.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.078] SetErrorMode (uMode=0x1) returned 0x0 [0049.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.079] GetFileType (hFile=0x18c) returned 0x1 [0049.079] SetErrorMode (uMode=0x0) returned 0x1 [0049.079] GetFileType (hFile=0x18c) returned 0x1 [0049.079] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5944 [0049.079] ReadFile (in: hFile=0x18c, lpBuffer=0x28a6898, nNumberOfBytesToRead=0x5944, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a6898*, lpNumberOfBytesRead=0x27e648*=0x5944, lpOverlapped=0x0) returned 1 [0049.084] CloseHandle (hObject=0x18c) returned 1 [0049.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.084] SetErrorMode (uMode=0x1) returned 0x0 [0049.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944)) returned 1 [0049.084] SetErrorMode (uMode=0x0) returned 0x1 [0049.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.185] SetErrorMode (uMode=0x1) returned 0x0 [0049.185] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.186] GetFileType (hFile=0x18c) returned 0x1 [0049.187] SetErrorMode (uMode=0x0) returned 0x1 [0049.187] GetFileType (hFile=0x18c) returned 0x1 [0049.187] WriteFile (in: hFile=0x18c, lpBuffer=0x272e410*, nNumberOfBytesToWrite=0x5a50, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x272e410*, lpNumberOfBytesWritten=0x27e6c8*=0x5a50, lpOverlapped=0x0) returned 1 [0049.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\ktued*S6WqhYAKVt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\ktued*S6WqhYAKVt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0049.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.190] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 1 [0049.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.193] SetErrorMode (uMode=0x1) returned 0x0 [0049.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.194] GetFileType (hFile=0x18c) returned 0x1 [0049.194] SetErrorMode (uMode=0x0) returned 0x1 [0049.194] GetFileType (hFile=0x18c) returned 0x1 [0049.194] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5404 [0049.194] ReadFile (in: hFile=0x18c, lpBuffer=0x2735c20, nNumberOfBytesToRead=0x5404, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2735c20*, lpNumberOfBytesRead=0x27e648*=0x5404, lpOverlapped=0x0) returned 1 [0049.196] CloseHandle (hObject=0x18c) returned 1 [0049.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.197] SetErrorMode (uMode=0x1) returned 0x0 [0049.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404)) returned 1 [0049.197] SetErrorMode (uMode=0x0) returned 0x1 [0049.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.280] SetErrorMode (uMode=0x1) returned 0x0 [0049.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.281] GetFileType (hFile=0x18c) returned 0x1 [0049.281] SetErrorMode (uMode=0x0) returned 0x1 [0049.281] GetFileType (hFile=0x18c) returned 0x1 [0049.281] WriteFile (in: hFile=0x18c, lpBuffer=0x27aa528*, nNumberOfBytesToWrite=0x5510, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27aa528*, lpNumberOfBytesWritten=0x27e6c8*=0x5510, lpOverlapped=0x0) returned 1 [0049.282] CloseHandle (hObject=0x18c) returned 1 [0049.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\OKnJTh*fxZjQcZVa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\OKnJTh*fxZjQcZVa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0049.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.290] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 1 [0049.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0049.291] SetErrorMode (uMode=0x1) returned 0x0 [0049.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0049.292] GetFileType (hFile=0x18c) returned 0x1 [0049.292] SetErrorMode (uMode=0x0) returned 0x1 [0049.292] GetFileType (hFile=0x18c) returned 0x1 [0049.293] WriteFile (in: hFile=0x18c, lpBuffer=0x27c2640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27c2640*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0049.296] WriteFile (in: hFile=0x18c, lpBuffer=0x27c2640*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27c2640*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0049.296] CloseHandle (hObject=0x18c) returned 1 [0049.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", lpFilePart=0x0) returned 0x3f [0049.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", lpFilePart=0x0) returned 0x3f [0049.297] SetErrorMode (uMode=0x1) returned 0x0 [0049.297] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0049.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0049.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0049.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0049.297] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0049.301] SetErrorMode (uMode=0x0) returned 0x1 [0049.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", lpFilePart=0x0) returned 0x3f [0049.301] SetErrorMode (uMode=0x1) returned 0x0 [0049.301] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0049.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0049.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0049.302] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0049.302] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0049.302] SetErrorMode (uMode=0x0) returned 0x1 [0049.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.303] SetErrorMode (uMode=0x1) returned 0x0 [0049.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.303] GetFileType (hFile=0x18c) returned 0x1 [0049.303] SetErrorMode (uMode=0x0) returned 0x1 [0049.303] GetFileType (hFile=0x18c) returned 0x1 [0049.303] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x592a [0049.303] ReadFile (in: hFile=0x18c, lpBuffer=0x27ca420, nNumberOfBytesToRead=0x592a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27ca420*, lpNumberOfBytesRead=0x27e648*=0x592a, lpOverlapped=0x0) returned 1 [0049.304] CloseHandle (hObject=0x18c) returned 1 [0049.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.305] SetErrorMode (uMode=0x1) returned 0x0 [0049.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a)) returned 1 [0049.306] SetErrorMode (uMode=0x0) returned 0x1 [0049.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.392] SetErrorMode (uMode=0x1) returned 0x0 [0049.392] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.393] GetFileType (hFile=0x18c) returned 0x1 [0049.393] SetErrorMode (uMode=0x0) returned 0x1 [0049.393] GetFileType (hFile=0x18c) returned 0x1 [0049.393] WriteFile (in: hFile=0x18c, lpBuffer=0x2847098*, nNumberOfBytesToWrite=0x5a30, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2847098*, lpNumberOfBytesWritten=0x27e6c8*=0x5a30, lpOverlapped=0x0) returned 1 [0049.394] CloseHandle (hObject=0x18c) returned 1 [0049.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\KJzZ7x1W3bCW9Gdf_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\KJzZ7x1W3bCW9Gdf_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0049.395] SetErrorMode (uMode=0x1) returned 0x0 [0049.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee216c70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5a30)) returned 1 [0049.395] SetErrorMode (uMode=0x0) returned 0x1 [0049.395] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\KJzZ7x1W3bCW9Gdf_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\kjzz7x1w3bcw9gdf_encrypted_by.whiterose")) returned 1 [0049.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.493] SetErrorMode (uMode=0x1) returned 0x0 [0049.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.493] GetFileType (hFile=0x18c) returned 0x1 [0049.493] SetErrorMode (uMode=0x0) returned 0x1 [0049.493] GetFileType (hFile=0x18c) returned 0x1 [0049.493] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5416 [0049.493] ReadFile (in: hFile=0x18c, lpBuffer=0x284e450, nNumberOfBytesToRead=0x5416, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x284e450*, lpNumberOfBytesRead=0x27e648*=0x5416, lpOverlapped=0x0) returned 1 [0049.495] CloseHandle (hObject=0x18c) returned 1 [0049.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.496] SetErrorMode (uMode=0x1) returned 0x0 [0049.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416)) returned 1 [0049.496] SetErrorMode (uMode=0x0) returned 0x1 [0049.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.584] SetErrorMode (uMode=0x1) returned 0x0 [0049.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.588] GetFileType (hFile=0x18c) returned 0x1 [0049.588] SetErrorMode (uMode=0x0) returned 0x1 [0049.588] GetFileType (hFile=0x18c) returned 0x1 [0049.588] WriteFile (in: hFile=0x18c, lpBuffer=0x28c8808*, nNumberOfBytesToWrite=0x5520, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28c8808*, lpNumberOfBytesWritten=0x27e6c8*=0x5520, lpOverlapped=0x0) returned 1 [0049.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\OisjKWXN03aqGij3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\OisjKWXN03aqGij3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0049.591] SetErrorMode (uMode=0x1) returned 0x0 [0049.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee405e50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5520)) returned 1 [0049.591] SetErrorMode (uMode=0x0) returned 0x1 [0049.591] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\OisjKWXN03aqGij3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\oisjkwxn03aqgij3_encrypted_by.whiterose")) returned 1 [0049.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0049.696] SetErrorMode (uMode=0x1) returned 0x0 [0049.696] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0049.699] GetFileType (hFile=0x18c) returned 0x1 [0049.699] SetErrorMode (uMode=0x0) returned 0x1 [0049.699] GetFileType (hFile=0x18c) returned 0x1 [0049.700] WriteFile (in: hFile=0x18c, lpBuffer=0x28e04f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28e04f0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0049.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", lpFilePart=0x0) returned 0x3f [0049.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", lpFilePart=0x0) returned 0x3f [0049.702] SetErrorMode (uMode=0x1) returned 0x0 [0049.702] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0049.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0049.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0049.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0049.704] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0049.704] SetErrorMode (uMode=0x0) returned 0x1 [0049.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", lpFilePart=0x0) returned 0x3f [0049.704] SetErrorMode (uMode=0x1) returned 0x0 [0049.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0049.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0049.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0049.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0049.705] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0049.705] SetErrorMode (uMode=0x0) returned 0x1 [0049.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.705] SetErrorMode (uMode=0x1) returned 0x0 [0049.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.706] GetFileType (hFile=0x18c) returned 0x1 [0049.706] SetErrorMode (uMode=0x0) returned 0x1 [0049.706] GetFileType (hFile=0x18c) returned 0x1 [0049.706] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10929 [0049.706] ReadFile (in: hFile=0x18c, lpBuffer=0x28e82d0, nNumberOfBytesToRead=0x10929, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28e82d0*, lpNumberOfBytesRead=0x27e648*=0x10929, lpOverlapped=0x0) returned 1 [0049.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.709] SetErrorMode (uMode=0x1) returned 0x0 [0049.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929)) returned 1 [0049.709] SetErrorMode (uMode=0x0) returned 0x1 [0049.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.781] SetErrorMode (uMode=0x1) returned 0x0 [0049.781] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.782] GetFileType (hFile=0x18c) returned 0x1 [0049.782] SetErrorMode (uMode=0x0) returned 0x1 [0049.782] GetFileType (hFile=0x18c) returned 0x1 [0049.782] WriteFile (in: hFile=0x18c, lpBuffer=0x2790aa0*, nNumberOfBytesToWrite=0x10a30, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2790aa0*, lpNumberOfBytesWritten=0x27e6c8*=0x10a30, lpOverlapped=0x0) returned 1 [0049.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0049.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\kzFqXts99w19ynIa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\kzFqXts99w19ynIa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0049.784] SetErrorMode (uMode=0x1) returned 0x0 [0049.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee5ceed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a30)) returned 1 [0049.785] SetErrorMode (uMode=0x0) returned 0x1 [0049.785] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\kzFqXts99w19ynIa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\kzfqxts99w19ynia_encrypted_by.whiterose")) returned 1 [0049.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.883] SetErrorMode (uMode=0x1) returned 0x0 [0049.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.883] GetFileType (hFile=0x18c) returned 0x1 [0049.883] SetErrorMode (uMode=0x0) returned 0x1 [0049.883] GetFileType (hFile=0x18c) returned 0x1 [0049.883] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10405 [0049.883] ReadFile (in: hFile=0x18c, lpBuffer=0x27a2e58, nNumberOfBytesToRead=0x10405, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27a2e58*, lpNumberOfBytesRead=0x27e648*=0x10405, lpOverlapped=0x0) returned 1 [0049.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.885] SetErrorMode (uMode=0x1) returned 0x0 [0049.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405)) returned 1 [0049.886] SetErrorMode (uMode=0x0) returned 0x1 [0049.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.951] SetErrorMode (uMode=0x1) returned 0x0 [0049.951] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0049.952] GetFileType (hFile=0x18c) returned 0x1 [0049.952] SetErrorMode (uMode=0x0) returned 0x1 [0049.952] GetFileType (hFile=0x18c) returned 0x1 [0049.952] WriteFile (in: hFile=0x18c, lpBuffer=0x283e7e0*, nNumberOfBytesToWrite=0x10510, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x283e7e0*, lpNumberOfBytesWritten=0x27e6c8*=0x10510, lpOverlapped=0x0) returned 1 [0049.954] CloseHandle (hObject=0x18c) returned 1 [0049.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0049.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\yJ5yPLHroRvUNbiA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\yJ5yPLHroRvUNbiA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0049.956] SetErrorMode (uMode=0x1) returned 0x0 [0049.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee771df0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10510)) returned 1 [0049.956] SetErrorMode (uMode=0x0) returned 0x1 [0049.956] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\yJ5yPLHroRvUNbiA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\yj5yplhrorvunbia_encrypted_by.whiterose")) returned 1 [0050.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0050.054] SetErrorMode (uMode=0x1) returned 0x0 [0050.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0050.063] GetFileType (hFile=0x18c) returned 0x1 [0050.063] SetErrorMode (uMode=0x0) returned 0x1 [0050.063] GetFileType (hFile=0x18c) returned 0x1 [0050.063] WriteFile (in: hFile=0x18c, lpBuffer=0x28614b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28614b8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0050.064] WriteFile (in: hFile=0x18c, lpBuffer=0x28614b8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28614b8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0050.064] CloseHandle (hObject=0x18c) returned 1 [0050.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", lpFilePart=0x0) returned 0x3f [0050.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", lpFilePart=0x0) returned 0x3f [0050.065] SetErrorMode (uMode=0x1) returned 0x0 [0050.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.065] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.065] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.065] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.065] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.065] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.065] SetErrorMode (uMode=0x0) returned 0x1 [0050.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", lpFilePart=0x0) returned 0x3f [0050.066] SetErrorMode (uMode=0x1) returned 0x0 [0050.066] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.066] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.066] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.066] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.066] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.066] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.066] SetErrorMode (uMode=0x0) returned 0x1 [0050.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.067] SetErrorMode (uMode=0x1) returned 0x0 [0050.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.068] GetFileType (hFile=0x18c) returned 0x1 [0050.068] SetErrorMode (uMode=0x0) returned 0x1 [0050.068] GetFileType (hFile=0x18c) returned 0x1 [0050.068] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10956 [0050.068] ReadFile (in: hFile=0x18c, lpBuffer=0x2869298, nNumberOfBytesToRead=0x10956, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2869298*, lpNumberOfBytesRead=0x27e648*=0x10956, lpOverlapped=0x0) returned 1 [0050.070] CloseHandle (hObject=0x18c) returned 1 [0050.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.070] SetErrorMode (uMode=0x1) returned 0x0 [0050.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956)) returned 1 [0050.070] SetErrorMode (uMode=0x0) returned 0x1 [0050.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.165] SetErrorMode (uMode=0x1) returned 0x0 [0050.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.167] GetFileType (hFile=0x18c) returned 0x1 [0050.167] SetErrorMode (uMode=0x0) returned 0x1 [0050.167] GetFileType (hFile=0x18c) returned 0x1 [0050.167] WriteFile (in: hFile=0x18c, lpBuffer=0x2906b60*, nNumberOfBytesToWrite=0x10a60, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2906b60*, lpNumberOfBytesWritten=0x27e6c8*=0x10a60, lpOverlapped=0x0) returned 1 [0050.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\TUB53bjexUupl*1n_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\TUB53bjexUupl*1n_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0050.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.172] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 1 [0050.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.176] SetErrorMode (uMode=0x1) returned 0x0 [0050.176] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.176] GetFileType (hFile=0x18c) returned 0x1 [0050.176] SetErrorMode (uMode=0x0) returned 0x1 [0050.176] GetFileType (hFile=0x18c) returned 0x1 [0050.176] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1043a [0050.176] ReadFile (in: hFile=0x18c, lpBuffer=0x2919380, nNumberOfBytesToRead=0x1043a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2919380*, lpNumberOfBytesRead=0x27e648*=0x1043a, lpOverlapped=0x0) returned 1 [0050.178] CloseHandle (hObject=0x18c) returned 1 [0050.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.183] SetErrorMode (uMode=0x1) returned 0x0 [0050.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a)) returned 1 [0050.183] SetErrorMode (uMode=0x0) returned 0x1 [0050.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.273] SetErrorMode (uMode=0x1) returned 0x0 [0050.273] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.274] GetFileType (hFile=0x18c) returned 0x1 [0050.274] SetErrorMode (uMode=0x0) returned 0x1 [0050.275] GetFileType (hFile=0x18c) returned 0x1 [0050.275] WriteFile (in: hFile=0x18c, lpBuffer=0x27b3250*, nNumberOfBytesToWrite=0x10540, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27b3250*, lpNumberOfBytesWritten=0x27e6c8*=0x10540, lpOverlapped=0x0) returned 1 [0050.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\PTNjes*V37NvgSis_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\PTNjes*V37NvgSis_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0050.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.282] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 1 [0050.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0050.285] SetErrorMode (uMode=0x1) returned 0x0 [0050.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0050.286] GetFileType (hFile=0x18c) returned 0x1 [0050.286] SetErrorMode (uMode=0x0) returned 0x1 [0050.286] GetFileType (hFile=0x18c) returned 0x1 [0050.287] WriteFile (in: hFile=0x18c, lpBuffer=0x27d6398*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27d6398*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0050.289] WriteFile (in: hFile=0x18c, lpBuffer=0x27d6398*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27d6398*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0050.289] CloseHandle (hObject=0x18c) returned 1 [0050.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", lpFilePart=0x0) returned 0x3f [0050.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", lpFilePart=0x0) returned 0x3f [0050.290] SetErrorMode (uMode=0x1) returned 0x0 [0050.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.291] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.291] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.291] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.291] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.291] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.291] SetErrorMode (uMode=0x0) returned 0x1 [0050.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", lpFilePart=0x0) returned 0x3f [0050.292] SetErrorMode (uMode=0x1) returned 0x0 [0050.292] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.292] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.292] SetErrorMode (uMode=0x0) returned 0x1 [0050.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.293] SetErrorMode (uMode=0x1) returned 0x0 [0050.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.293] GetFileType (hFile=0x18c) returned 0x1 [0050.293] SetErrorMode (uMode=0x0) returned 0x1 [0050.293] GetFileType (hFile=0x18c) returned 0x1 [0050.293] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x26ca2 [0050.295] ReadFile (in: hFile=0x18c, lpBuffer=0x127adf68, nNumberOfBytesToRead=0x26ca2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x127adf68*, lpNumberOfBytesRead=0x27e648*=0x26ca2, lpOverlapped=0x0) returned 1 [0050.298] CloseHandle (hObject=0x18c) returned 1 [0050.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.300] SetErrorMode (uMode=0x1) returned 0x0 [0050.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2)) returned 1 [0050.300] SetErrorMode (uMode=0x0) returned 0x1 [0050.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.402] SetErrorMode (uMode=0x1) returned 0x0 [0050.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.404] GetFileType (hFile=0x18c) returned 0x1 [0050.404] SetErrorMode (uMode=0x0) returned 0x1 [0050.404] GetFileType (hFile=0x18c) returned 0x1 [0050.404] WriteFile (in: hFile=0x18c, lpBuffer=0x12897128*, nNumberOfBytesToWrite=0x26db0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12897128*, lpNumberOfBytesWritten=0x27e6c8*=0x26db0, lpOverlapped=0x0) returned 1 [0050.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\9y*1GG*CubS7cUNw_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\9y*1GG*CubS7cUNw_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0050.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.413] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 1 [0050.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.417] SetErrorMode (uMode=0x1) returned 0x0 [0050.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.418] GetFileType (hFile=0x18c) returned 0x1 [0050.418] SetErrorMode (uMode=0x0) returned 0x1 [0050.418] GetFileType (hFile=0x18c) returned 0x1 [0050.418] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x25d4a [0050.419] ReadFile (in: hFile=0x18c, lpBuffer=0x128bdf08, nNumberOfBytesToRead=0x25d4a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x128bdf08*, lpNumberOfBytesRead=0x27e648*=0x25d4a, lpOverlapped=0x0) returned 1 [0050.422] CloseHandle (hObject=0x18c) returned 1 [0050.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.424] SetErrorMode (uMode=0x1) returned 0x0 [0050.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a)) returned 1 [0050.424] SetErrorMode (uMode=0x0) returned 0x1 [0050.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.522] SetErrorMode (uMode=0x1) returned 0x0 [0050.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.524] GetFileType (hFile=0x18c) returned 0x1 [0050.524] SetErrorMode (uMode=0x0) returned 0x1 [0050.524] GetFileType (hFile=0x18c) returned 0x1 [0050.524] WriteFile (in: hFile=0x18c, lpBuffer=0x12a28bf0*, nNumberOfBytesToWrite=0x25e50, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12a28bf0*, lpNumberOfBytesWritten=0x27e6c8*=0x25e50, lpOverlapped=0x0) returned 1 [0050.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\qexG8V*kXhYG0WhA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\qexG8V*kXhYG0WhA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0050.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.529] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 1 [0050.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0050.533] SetErrorMode (uMode=0x1) returned 0x0 [0050.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0050.534] GetFileType (hFile=0x18c) returned 0x1 [0050.534] SetErrorMode (uMode=0x0) returned 0x1 [0050.534] GetFileType (hFile=0x18c) returned 0x1 [0050.535] WriteFile (in: hFile=0x18c, lpBuffer=0x2897b88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2897b88*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0050.536] WriteFile (in: hFile=0x18c, lpBuffer=0x2897b88*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2897b88*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0050.536] CloseHandle (hObject=0x18c) returned 1 [0050.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", lpFilePart=0x0) returned 0x3f [0050.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", lpFilePart=0x0) returned 0x3f [0050.537] SetErrorMode (uMode=0x1) returned 0x0 [0050.537] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.548] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.548] SetErrorMode (uMode=0x0) returned 0x1 [0050.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", lpFilePart=0x0) returned 0x3f [0050.548] SetErrorMode (uMode=0x1) returned 0x0 [0050.548] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.549] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.549] SetErrorMode (uMode=0x0) returned 0x1 [0050.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.549] SetErrorMode (uMode=0x1) returned 0x0 [0050.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.549] GetFileType (hFile=0x18c) returned 0x1 [0050.549] SetErrorMode (uMode=0x0) returned 0x1 [0050.549] GetFileType (hFile=0x18c) returned 0x1 [0050.549] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x11426 [0050.550] ReadFile (in: hFile=0x18c, lpBuffer=0x289f968, nNumberOfBytesToRead=0x11426, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x289f968*, lpNumberOfBytesRead=0x27e648*=0x11426, lpOverlapped=0x0) returned 1 [0050.621] CloseHandle (hObject=0x18c) returned 1 [0050.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.622] SetErrorMode (uMode=0x1) returned 0x0 [0050.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426)) returned 1 [0050.622] SetErrorMode (uMode=0x0) returned 0x1 [0050.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.710] SetErrorMode (uMode=0x1) returned 0x0 [0050.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.711] GetFileType (hFile=0x18c) returned 0x1 [0050.711] SetErrorMode (uMode=0x0) returned 0x1 [0050.711] GetFileType (hFile=0x18c) returned 0x1 [0050.711] WriteFile (in: hFile=0x18c, lpBuffer=0x2750d80*, nNumberOfBytesToWrite=0x11530, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2750d80*, lpNumberOfBytesWritten=0x27e6c8*=0x11530, lpOverlapped=0x0) returned 1 [0050.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\JVUmy*a4qn5g6YME_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\JVUmy*a4qn5g6YME_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0050.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.723] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 1 [0050.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.726] SetErrorMode (uMode=0x1) returned 0x0 [0050.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.727] GetFileType (hFile=0x18c) returned 0x1 [0050.727] SetErrorMode (uMode=0x0) returned 0x1 [0050.727] GetFileType (hFile=0x18c) returned 0x1 [0050.727] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10f09 [0050.727] ReadFile (in: hFile=0x18c, lpBuffer=0x2764070, nNumberOfBytesToRead=0x10f09, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2764070*, lpNumberOfBytesRead=0x27e648*=0x10f09, lpOverlapped=0x0) returned 1 [0050.729] CloseHandle (hObject=0x18c) returned 1 [0050.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.730] SetErrorMode (uMode=0x1) returned 0x0 [0050.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09)) returned 1 [0050.730] SetErrorMode (uMode=0x0) returned 0x1 [0050.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.845] SetErrorMode (uMode=0x1) returned 0x0 [0050.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.847] GetFileType (hFile=0x18c) returned 0x1 [0050.847] SetErrorMode (uMode=0x0) returned 0x1 [0050.847] GetFileType (hFile=0x18c) returned 0x1 [0050.847] WriteFile (in: hFile=0x18c, lpBuffer=0x27de4d0*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27de4d0*, lpNumberOfBytesWritten=0x27e6c8*=0x11010, lpOverlapped=0x0) returned 1 [0050.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0050.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\qNChZAXRykPgCfGq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\qNChZAXRykPgCfGq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0050.849] SetErrorMode (uMode=0x1) returned 0x0 [0050.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeefecc50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11010)) returned 1 [0050.849] SetErrorMode (uMode=0x0) returned 0x1 [0050.849] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\qNChZAXRykPgCfGq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\qnchzaxrykpgcfgq_encrypted_by.whiterose")) returned 1 [0050.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0050.959] SetErrorMode (uMode=0x1) returned 0x0 [0050.959] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0050.960] GetFileType (hFile=0x18c) returned 0x1 [0050.960] SetErrorMode (uMode=0x0) returned 0x1 [0050.960] GetFileType (hFile=0x18c) returned 0x1 [0050.962] WriteFile (in: hFile=0x18c, lpBuffer=0x2801ca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2801ca8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0050.963] WriteFile (in: hFile=0x18c, lpBuffer=0x2801ca8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2801ca8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0050.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", lpFilePart=0x0) returned 0x3f [0050.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", lpFilePart=0x0) returned 0x3f [0050.964] SetErrorMode (uMode=0x1) returned 0x0 [0050.964] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.965] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.965] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.965] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.965] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.965] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.965] SetErrorMode (uMode=0x0) returned 0x1 [0050.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", lpFilePart=0x0) returned 0x3f [0050.965] SetErrorMode (uMode=0x1) returned 0x0 [0050.965] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0050.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0050.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0050.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0050.966] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0050.966] SetErrorMode (uMode=0x0) returned 0x1 [0050.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.967] SetErrorMode (uMode=0x1) returned 0x0 [0050.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0050.967] GetFileType (hFile=0x18c) returned 0x1 [0050.967] SetErrorMode (uMode=0x0) returned 0x1 [0050.967] GetFileType (hFile=0x18c) returned 0x1 [0050.967] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5891 [0050.967] ReadFile (in: hFile=0x18c, lpBuffer=0x2809a88, nNumberOfBytesToRead=0x5891, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2809a88*, lpNumberOfBytesRead=0x27e648*=0x5891, lpOverlapped=0x0) returned 1 [0050.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0050.969] SetErrorMode (uMode=0x1) returned 0x0 [0050.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891)) returned 1 [0050.969] SetErrorMode (uMode=0x0) returned 0x1 [0051.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.031] SetErrorMode (uMode=0x1) returned 0x0 [0051.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.032] GetFileType (hFile=0x18c) returned 0x1 [0051.032] SetErrorMode (uMode=0x0) returned 0x1 [0051.032] GetFileType (hFile=0x18c) returned 0x1 [0051.032] WriteFile (in: hFile=0x18c, lpBuffer=0x288cfd8*, nNumberOfBytesToWrite=0x59a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x288cfd8*, lpNumberOfBytesWritten=0x27e6c8*=0x59a0, lpOverlapped=0x0) returned 1 [0051.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\GradD6OfvDdXuZtz_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\GradD6OfvDdXuZtz_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0051.034] SetErrorMode (uMode=0x1) returned 0x0 [0051.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xef1b5cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1 [0051.034] SetErrorMode (uMode=0x0) returned 0x1 [0051.034] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\GradD6OfvDdXuZtz_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\gradd6ofvddxuztz_encrypted_by.whiterose")) returned 1 [0051.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.178] SetErrorMode (uMode=0x1) returned 0x0 [0051.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.178] GetFileType (hFile=0x18c) returned 0x1 [0051.178] SetErrorMode (uMode=0x0) returned 0x1 [0051.178] GetFileType (hFile=0x18c) returned 0x1 [0051.179] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5be8 [0051.179] ReadFile (in: hFile=0x18c, lpBuffer=0x2894300, nNumberOfBytesToRead=0x5be8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2894300*, lpNumberOfBytesRead=0x27e648*=0x5be8, lpOverlapped=0x0) returned 1 [0051.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.181] SetErrorMode (uMode=0x1) returned 0x0 [0051.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8)) returned 1 [0051.181] SetErrorMode (uMode=0x0) returned 0x1 [0051.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.275] SetErrorMode (uMode=0x1) returned 0x0 [0051.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.276] GetFileType (hFile=0x18c) returned 0x1 [0051.276] SetErrorMode (uMode=0x0) returned 0x1 [0051.276] GetFileType (hFile=0x18c) returned 0x1 [0051.277] WriteFile (in: hFile=0x18c, lpBuffer=0x2728cd0*, nNumberOfBytesToWrite=0x5cf0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2728cd0*, lpNumberOfBytesWritten=0x27e6c8*=0x5cf0, lpOverlapped=0x0) returned 1 [0051.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\J26yhtL7CuMr4Bzl_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\J26yhtL7CuMr4Bzl_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0051.278] SetErrorMode (uMode=0x1) returned 0x0 [0051.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xef3f1170, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5cf0)) returned 1 [0051.278] SetErrorMode (uMode=0x0) returned 0x1 [0051.278] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\J26yhtL7CuMr4Bzl_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\j26yhtl7cumr4bzl_encrypted_by.whiterose")) returned 1 [0051.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0051.380] SetErrorMode (uMode=0x1) returned 0x0 [0051.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0051.383] GetFileType (hFile=0x18c) returned 0x1 [0051.383] SetErrorMode (uMode=0x0) returned 0x1 [0051.383] GetFileType (hFile=0x18c) returned 0x1 [0051.385] WriteFile (in: hFile=0x18c, lpBuffer=0x2741188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2741188*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0051.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", lpFilePart=0x0) returned 0x3f [0051.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", lpFilePart=0x0) returned 0x3f [0051.387] SetErrorMode (uMode=0x1) returned 0x0 [0051.387] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0051.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0051.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0051.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0051.388] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0051.388] SetErrorMode (uMode=0x0) returned 0x1 [0051.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", lpFilePart=0x0) returned 0x3f [0051.388] SetErrorMode (uMode=0x1) returned 0x0 [0051.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0051.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0051.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0051.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0051.389] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0051.389] SetErrorMode (uMode=0x0) returned 0x1 [0051.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.389] SetErrorMode (uMode=0x1) returned 0x0 [0051.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.389] GetFileType (hFile=0x18c) returned 0x1 [0051.389] SetErrorMode (uMode=0x0) returned 0x1 [0051.390] GetFileType (hFile=0x18c) returned 0x1 [0051.390] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1e071 [0051.390] ReadFile (in: hFile=0x18c, lpBuffer=0x126f4448, nNumberOfBytesToRead=0x1e071, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x126f4448*, lpNumberOfBytesRead=0x27e648*=0x1e071, lpOverlapped=0x0) returned 1 [0051.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.394] SetErrorMode (uMode=0x1) returned 0x0 [0051.394] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071)) returned 1 [0051.394] SetErrorMode (uMode=0x0) returned 0x1 [0051.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.462] SetErrorMode (uMode=0x1) returned 0x0 [0051.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.464] GetFileType (hFile=0x18c) returned 0x1 [0051.464] SetErrorMode (uMode=0x0) returned 0x1 [0051.464] GetFileType (hFile=0x18c) returned 0x1 [0051.464] WriteFile (in: hFile=0x18c, lpBuffer=0x127a8ce8*, nNumberOfBytesToWrite=0x1e180, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x127a8ce8*, lpNumberOfBytesWritten=0x27e6c8*=0x1e180, lpOverlapped=0x0) returned 1 [0051.467] CloseHandle (hObject=0x18c) returned 1 [0051.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\MzYTWSIWKlkVAdF9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\MzYTWSIWKlkVAdF9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0051.469] SetErrorMode (uMode=0x1) returned 0x0 [0051.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xef5ba1f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1e180)) returned 1 [0051.469] SetErrorMode (uMode=0x0) returned 0x1 [0051.469] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\MzYTWSIWKlkVAdF9_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\mzytwsiwklkvadf9_encrypted_by.whiterose")) returned 1 [0051.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.568] SetErrorMode (uMode=0x1) returned 0x0 [0051.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.568] GetFileType (hFile=0x18c) returned 0x1 [0051.568] SetErrorMode (uMode=0x0) returned 0x1 [0051.568] GetFileType (hFile=0x18c) returned 0x1 [0051.568] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1d17f [0051.568] ReadFile (in: hFile=0x18c, lpBuffer=0x127c6e98, nNumberOfBytesToRead=0x1d17f, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x127c6e98*, lpNumberOfBytesRead=0x27e648*=0x1d17f, lpOverlapped=0x0) returned 1 [0051.571] CloseHandle (hObject=0x18c) returned 1 [0051.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.573] SetErrorMode (uMode=0x1) returned 0x0 [0051.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f)) returned 1 [0051.573] SetErrorMode (uMode=0x0) returned 0x1 [0051.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.643] SetErrorMode (uMode=0x1) returned 0x0 [0051.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.644] GetFileType (hFile=0x18c) returned 0x1 [0051.644] SetErrorMode (uMode=0x0) returned 0x1 [0051.645] GetFileType (hFile=0x18c) returned 0x1 [0051.645] WriteFile (in: hFile=0x18c, lpBuffer=0x12875d48*, nNumberOfBytesToWrite=0x1d280, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12875d48*, lpNumberOfBytesWritten=0x27e6c8*=0x1d280, lpOverlapped=0x0) returned 1 [0051.647] CloseHandle (hObject=0x18c) returned 1 [0051.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\trGNmivLSi8V0vyV_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\trGNmivLSi8V0vyV_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0051.649] SetErrorMode (uMode=0x1) returned 0x0 [0051.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xef783270, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1d280)) returned 1 [0051.649] SetErrorMode (uMode=0x0) returned 0x1 [0051.649] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\trGNmivLSi8V0vyV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\trgnmivlsi8v0vyv_encrypted_by.whiterose")) returned 1 [0051.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0051.756] SetErrorMode (uMode=0x1) returned 0x0 [0051.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0051.758] GetFileType (hFile=0x18c) returned 0x1 [0051.758] SetErrorMode (uMode=0x0) returned 0x1 [0051.758] GetFileType (hFile=0x18c) returned 0x1 [0051.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", lpFilePart=0x0) returned 0x3f [0051.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", lpFilePart=0x0) returned 0x3f [0051.759] SetErrorMode (uMode=0x1) returned 0x0 [0051.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0051.760] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0051.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0051.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0051.761] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0051.761] SetErrorMode (uMode=0x0) returned 0x1 [0051.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", lpFilePart=0x0) returned 0x3f [0051.761] SetErrorMode (uMode=0x1) returned 0x0 [0051.761] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0051.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0051.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0051.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0051.762] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0051.762] SetErrorMode (uMode=0x0) returned 0x1 [0051.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.763] SetErrorMode (uMode=0x1) returned 0x0 [0051.763] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.763] GetFileType (hFile=0x18c) returned 0x1 [0051.763] SetErrorMode (uMode=0x0) returned 0x1 [0051.763] GetFileType (hFile=0x18c) returned 0x1 [0051.763] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x161fc [0051.763] ReadFile (in: hFile=0x18c, lpBuffer=0x12892ff8, nNumberOfBytesToRead=0x161fc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x12892ff8*, lpNumberOfBytesRead=0x27e648*=0x161fc, lpOverlapped=0x0) returned 1 [0051.766] CloseHandle (hObject=0x18c) returned 1 [0051.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.767] SetErrorMode (uMode=0x1) returned 0x0 [0051.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc)) returned 1 [0051.767] SetErrorMode (uMode=0x0) returned 0x1 [0051.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.887] SetErrorMode (uMode=0x1) returned 0x0 [0051.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.889] GetFileType (hFile=0x18c) returned 0x1 [0051.889] SetErrorMode (uMode=0x0) returned 0x1 [0051.889] GetFileType (hFile=0x18c) returned 0x1 [0051.889] WriteFile (in: hFile=0x18c, lpBuffer=0x129181a8*, nNumberOfBytesToWrite=0x16300, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x129181a8*, lpNumberOfBytesWritten=0x27e6c8*=0x16300, lpOverlapped=0x0) returned 1 [0051.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0051.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\ajoINIhz2fSUHNrH_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\ajoINIhz2fSUHNrH_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0051.891] SetErrorMode (uMode=0x1) returned 0x0 [0051.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xef9be710, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x16300)) returned 1 [0051.891] SetErrorMode (uMode=0x0) returned 0x1 [0051.891] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\ajoINIhz2fSUHNrH_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\ajoinihz2fsuhnrh_encrypted_by.whiterose")) returned 1 [0051.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.989] SetErrorMode (uMode=0x1) returned 0x0 [0051.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0051.990] GetFileType (hFile=0x18c) returned 0x1 [0051.990] SetErrorMode (uMode=0x0) returned 0x1 [0051.990] GetFileType (hFile=0x18c) returned 0x1 [0051.990] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x13d46 [0051.990] ReadFile (in: hFile=0x18c, lpBuffer=0x2877eb8, nNumberOfBytesToRead=0x13d46, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2877eb8*, lpNumberOfBytesRead=0x27e648*=0x13d46, lpOverlapped=0x0) returned 1 [0051.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0051.993] SetErrorMode (uMode=0x1) returned 0x0 [0051.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46)) returned 1 [0051.993] SetErrorMode (uMode=0x0) returned 0x1 [0052.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.060] SetErrorMode (uMode=0x1) returned 0x0 [0052.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.062] GetFileType (hFile=0x18c) returned 0x1 [0052.062] SetErrorMode (uMode=0x0) returned 0x1 [0052.062] GetFileType (hFile=0x18c) returned 0x1 [0052.062] WriteFile (in: hFile=0x18c, lpBuffer=0x28b8720*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28b8720*, lpNumberOfBytesWritten=0x27e6c8*=0x13e50, lpOverlapped=0x0) returned 1 [0052.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\pYXEqc9YXxgBzweQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\pYXEqc9YXxgBzweQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0052.064] SetErrorMode (uMode=0x1) returned 0x0 [0052.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xefb61630, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x13e50)) returned 1 [0052.064] SetErrorMode (uMode=0x0) returned 0x1 [0052.064] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\pYXEqc9YXxgBzweQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\pyxeqc9yxxgbzweq_encrypted_by.whiterose")) returned 1 [0052.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0052.161] SetErrorMode (uMode=0x1) returned 0x0 [0052.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0052.163] GetFileType (hFile=0x18c) returned 0x1 [0052.163] SetErrorMode (uMode=0x0) returned 0x1 [0052.163] GetFileType (hFile=0x18c) returned 0x1 [0052.165] WriteFile (in: hFile=0x18c, lpBuffer=0x28ded38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28ded38*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0052.166] WriteFile (in: hFile=0x18c, lpBuffer=0x28ded38*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28ded38*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0052.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", lpFilePart=0x0) returned 0x3f [0052.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", lpFilePart=0x0) returned 0x3f [0052.167] SetErrorMode (uMode=0x1) returned 0x0 [0052.167] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0052.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0052.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0052.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0052.168] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0052.168] SetErrorMode (uMode=0x0) returned 0x1 [0052.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", lpFilePart=0x0) returned 0x3f [0052.169] SetErrorMode (uMode=0x1) returned 0x0 [0052.169] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0052.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0052.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0052.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0052.169] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0052.169] SetErrorMode (uMode=0x0) returned 0x1 [0052.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.170] SetErrorMode (uMode=0x1) returned 0x0 [0052.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.170] GetFileType (hFile=0x18c) returned 0x1 [0052.170] SetErrorMode (uMode=0x0) returned 0x1 [0052.170] GetFileType (hFile=0x18c) returned 0x1 [0052.170] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6133 [0052.170] ReadFile (in: hFile=0x18c, lpBuffer=0x28e6b18, nNumberOfBytesToRead=0x6133, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28e6b18*, lpNumberOfBytesRead=0x27e648*=0x6133, lpOverlapped=0x0) returned 1 [0052.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.172] SetErrorMode (uMode=0x1) returned 0x0 [0052.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133)) returned 1 [0052.172] SetErrorMode (uMode=0x0) returned 0x1 [0052.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.240] SetErrorMode (uMode=0x1) returned 0x0 [0052.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.241] GetFileType (hFile=0x18c) returned 0x1 [0052.241] SetErrorMode (uMode=0x0) returned 0x1 [0052.241] GetFileType (hFile=0x18c) returned 0x1 [0052.241] WriteFile (in: hFile=0x18c, lpBuffer=0x276da58*, nNumberOfBytesToWrite=0x6240, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x276da58*, lpNumberOfBytesWritten=0x27e6c8*=0x6240, lpOverlapped=0x0) returned 1 [0052.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\gram7wcfeYZTO2Df_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\gram7wcfeYZTO2Df_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0052.243] SetErrorMode (uMode=0x1) returned 0x0 [0052.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xefd2a6b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x6240)) returned 1 [0052.243] SetErrorMode (uMode=0x0) returned 0x1 [0052.243] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\gram7wcfeYZTO2Df_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\gram7wcfeyzto2df_encrypted_by.whiterose")) returned 1 [0052.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.348] SetErrorMode (uMode=0x1) returned 0x0 [0052.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.348] GetFileType (hFile=0x18c) returned 0x1 [0052.348] SetErrorMode (uMode=0x0) returned 0x1 [0052.348] GetFileType (hFile=0x18c) returned 0x1 [0052.348] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5aac [0052.348] ReadFile (in: hFile=0x18c, lpBuffer=0x2775620, nNumberOfBytesToRead=0x5aac, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2775620*, lpNumberOfBytesRead=0x27e648*=0x5aac, lpOverlapped=0x0) returned 1 [0052.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.350] SetErrorMode (uMode=0x1) returned 0x0 [0052.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac)) returned 1 [0052.351] SetErrorMode (uMode=0x0) returned 0x1 [0052.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.415] SetErrorMode (uMode=0x1) returned 0x0 [0052.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.416] GetFileType (hFile=0x18c) returned 0x1 [0052.416] SetErrorMode (uMode=0x0) returned 0x1 [0052.416] GetFileType (hFile=0x18c) returned 0x1 [0052.416] WriteFile (in: hFile=0x18c, lpBuffer=0x27f1fd8*, nNumberOfBytesToWrite=0x5bb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27f1fd8*, lpNumberOfBytesWritten=0x27e6c8*=0x5bb0, lpOverlapped=0x0) returned 1 [0052.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\YiThwWZ5mVLSmix4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\YiThwWZ5mVLSmix4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0052.417] SetErrorMode (uMode=0x1) returned 0x0 [0052.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xefecd5d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5bb0)) returned 1 [0052.417] SetErrorMode (uMode=0x0) returned 0x1 [0052.417] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\YiThwWZ5mVLSmix4_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\yithwwz5mvlsmix4_encrypted_by.whiterose")) returned 1 [0052.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0052.525] SetErrorMode (uMode=0x1) returned 0x0 [0052.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0052.527] GetFileType (hFile=0x18c) returned 0x1 [0052.527] SetErrorMode (uMode=0x0) returned 0x1 [0052.527] GetFileType (hFile=0x18c) returned 0x1 [0052.529] WriteFile (in: hFile=0x18c, lpBuffer=0x280a350*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x280a350*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0052.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", lpFilePart=0x0) returned 0x3f [0052.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", lpFilePart=0x0) returned 0x3f [0052.531] SetErrorMode (uMode=0x1) returned 0x0 [0052.531] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0052.531] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0052.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0052.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0052.532] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0052.532] SetErrorMode (uMode=0x0) returned 0x1 [0052.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", lpFilePart=0x0) returned 0x3f [0052.532] SetErrorMode (uMode=0x1) returned 0x0 [0052.532] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0052.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0052.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0052.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0052.533] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0052.533] SetErrorMode (uMode=0x0) returned 0x1 [0052.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.534] SetErrorMode (uMode=0x1) returned 0x0 [0052.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.534] GetFileType (hFile=0x18c) returned 0x1 [0052.534] SetErrorMode (uMode=0x0) returned 0x1 [0052.534] GetFileType (hFile=0x18c) returned 0x1 [0052.534] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x107e2 [0052.534] ReadFile (in: hFile=0x18c, lpBuffer=0x2812130, nNumberOfBytesToRead=0x107e2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2812130*, lpNumberOfBytesRead=0x27e648*=0x107e2, lpOverlapped=0x0) returned 1 [0052.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.540] SetErrorMode (uMode=0x1) returned 0x0 [0052.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2)) returned 1 [0052.540] SetErrorMode (uMode=0x0) returned 0x1 [0052.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.612] SetErrorMode (uMode=0x1) returned 0x0 [0052.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.614] GetFileType (hFile=0x18c) returned 0x1 [0052.614] SetErrorMode (uMode=0x0) returned 0x1 [0052.614] GetFileType (hFile=0x18c) returned 0x1 [0052.614] WriteFile (in: hFile=0x18c, lpBuffer=0x28b9c80*, nNumberOfBytesToWrite=0x108f0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28b9c80*, lpNumberOfBytesWritten=0x27e6c8*=0x108f0, lpOverlapped=0x0) returned 1 [0052.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\itpMInBRwZJnVgdQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\itpMInBRwZJnVgdQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0052.616] SetErrorMode (uMode=0x1) returned 0x0 [0052.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf00bc7b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x108f0)) returned 1 [0052.616] SetErrorMode (uMode=0x0) returned 0x1 [0052.616] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\itpMInBRwZJnVgdQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\itpminbrwzjnvgdq_encrypted_by.whiterose")) returned 1 [0052.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.722] SetErrorMode (uMode=0x1) returned 0x0 [0052.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.722] GetFileType (hFile=0x18c) returned 0x1 [0052.722] SetErrorMode (uMode=0x0) returned 0x1 [0052.723] GetFileType (hFile=0x18c) returned 0x1 [0052.723] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x102c8 [0052.723] ReadFile (in: hFile=0x18c, lpBuffer=0x28cbef8, nNumberOfBytesToRead=0x102c8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28cbef8*, lpNumberOfBytesRead=0x27e648*=0x102c8, lpOverlapped=0x0) returned 1 [0052.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.724] SetErrorMode (uMode=0x1) returned 0x0 [0052.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8)) returned 1 [0052.725] SetErrorMode (uMode=0x0) returned 0x1 [0052.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.790] SetErrorMode (uMode=0x1) returned 0x0 [0052.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.791] GetFileType (hFile=0x18c) returned 0x1 [0052.791] SetErrorMode (uMode=0x0) returned 0x1 [0052.791] GetFileType (hFile=0x18c) returned 0x1 [0052.791] WriteFile (in: hFile=0x18c, lpBuffer=0x2770500*, nNumberOfBytesToWrite=0x103d0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2770500*, lpNumberOfBytesWritten=0x27e6c8*=0x103d0, lpOverlapped=0x0) returned 1 [0052.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0052.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\l4j8nMyHDQiRsSjC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\l4j8nMyHDQiRsSjC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0052.793] SetErrorMode (uMode=0x1) returned 0x0 [0052.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf025f6d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x103d0)) returned 1 [0052.794] SetErrorMode (uMode=0x0) returned 0x1 [0052.794] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\l4j8nMyHDQiRsSjC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\l4j8nmyhdqirssjc_encrypted_by.whiterose")) returned 1 [0052.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0052.893] SetErrorMode (uMode=0x1) returned 0x0 [0052.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0052.896] GetFileType (hFile=0x18c) returned 0x1 [0052.896] SetErrorMode (uMode=0x0) returned 0x1 [0052.896] GetFileType (hFile=0x18c) returned 0x1 [0052.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", lpFilePart=0x0) returned 0x3f [0052.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", lpFilePart=0x0) returned 0x3f [0052.897] SetErrorMode (uMode=0x1) returned 0x0 [0052.898] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0052.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0052.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0052.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0052.898] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0052.898] SetErrorMode (uMode=0x0) returned 0x1 [0052.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", lpFilePart=0x0) returned 0x3f [0052.898] SetErrorMode (uMode=0x1) returned 0x0 [0052.899] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0052.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0052.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0052.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0052.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0052.899] SetErrorMode (uMode=0x0) returned 0x1 [0052.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.900] SetErrorMode (uMode=0x1) returned 0x0 [0052.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0052.900] GetFileType (hFile=0x18c) returned 0x1 [0052.900] SetErrorMode (uMode=0x0) returned 0x1 [0052.900] GetFileType (hFile=0x18c) returned 0x1 [0052.900] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x12696 [0052.900] ReadFile (in: hFile=0x18c, lpBuffer=0x279ae78, nNumberOfBytesToRead=0x12696, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x279ae78*, lpNumberOfBytesRead=0x27e648*=0x12696, lpOverlapped=0x0) returned 1 [0052.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0052.902] SetErrorMode (uMode=0x1) returned 0x0 [0052.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696)) returned 1 [0052.902] SetErrorMode (uMode=0x0) returned 0x1 [0053.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.008] SetErrorMode (uMode=0x1) returned 0x0 [0053.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.009] GetFileType (hFile=0x18c) returned 0x1 [0053.009] SetErrorMode (uMode=0x0) returned 0x1 [0053.009] GetFileType (hFile=0x18c) returned 0x1 [0053.009] WriteFile (in: hFile=0x18c, lpBuffer=0x274dbe0*, nNumberOfBytesToWrite=0x127a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x274dbe0*, lpNumberOfBytesWritten=0x27e6c8*=0x127a0, lpOverlapped=0x0) returned 1 [0053.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\cwxP36CZVf20ImI3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\cwxP36CZVf20ImI3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0053.012] SetErrorMode (uMode=0x1) returned 0x0 [0053.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf0474a10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x127a0)) returned 1 [0053.012] SetErrorMode (uMode=0x0) returned 0x1 [0053.012] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\cwxP36CZVf20ImI3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\cwxp36czvf20imi3_encrypted_by.whiterose")) returned 1 [0053.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.112] SetErrorMode (uMode=0x1) returned 0x0 [0053.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.114] GetFileType (hFile=0x18c) returned 0x1 [0053.114] SetErrorMode (uMode=0x0) returned 0x1 [0053.114] GetFileType (hFile=0x18c) returned 0x1 [0053.114] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x11c35 [0053.114] ReadFile (in: hFile=0x18c, lpBuffer=0x2761d08, nNumberOfBytesToRead=0x11c35, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2761d08*, lpNumberOfBytesRead=0x27e648*=0x11c35, lpOverlapped=0x0) returned 1 [0053.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.116] SetErrorMode (uMode=0x1) returned 0x0 [0053.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35)) returned 1 [0053.117] SetErrorMode (uMode=0x0) returned 0x1 [0053.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.214] SetErrorMode (uMode=0x1) returned 0x0 [0053.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.216] GetFileType (hFile=0x18c) returned 0x1 [0053.216] SetErrorMode (uMode=0x0) returned 0x1 [0053.216] GetFileType (hFile=0x18c) returned 0x1 [0053.216] WriteFile (in: hFile=0x18c, lpBuffer=0x2816118*, nNumberOfBytesToWrite=0x11d40, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2816118*, lpNumberOfBytesWritten=0x27e6c8*=0x11d40, lpOverlapped=0x0) returned 1 [0053.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\7tVlsAilTEClzMja_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\7tVlsAilTEClzMja_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0053.218] SetErrorMode (uMode=0x1) returned 0x0 [0053.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf0663bf0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11d40)) returned 1 [0053.218] SetErrorMode (uMode=0x0) returned 0x1 [0053.218] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\7tVlsAilTEClzMja_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\7tvlsailteclzmja_encrypted_by.whiterose")) returned 1 [0053.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0053.315] SetErrorMode (uMode=0x1) returned 0x0 [0053.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0053.320] GetFileType (hFile=0x18c) returned 0x1 [0053.320] SetErrorMode (uMode=0x0) returned 0x1 [0053.320] GetFileType (hFile=0x18c) returned 0x1 [0053.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", lpFilePart=0x0) returned 0x3f [0053.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", lpFilePart=0x0) returned 0x3f [0053.322] SetErrorMode (uMode=0x1) returned 0x0 [0053.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0053.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0053.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0053.323] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0053.323] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0053.323] SetErrorMode (uMode=0x0) returned 0x1 [0053.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", lpFilePart=0x0) returned 0x3f [0053.324] SetErrorMode (uMode=0x1) returned 0x0 [0053.324] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0053.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0053.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0053.324] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0053.324] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0053.324] SetErrorMode (uMode=0x0) returned 0x1 [0053.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.325] SetErrorMode (uMode=0x1) returned 0x0 [0053.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.325] GetFileType (hFile=0x18c) returned 0x1 [0053.325] SetErrorMode (uMode=0x0) returned 0x1 [0053.325] GetFileType (hFile=0x18c) returned 0x1 [0053.325] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x49db0 [0053.341] ReadFile (in: hFile=0x18c, lpBuffer=0x126d2418, nNumberOfBytesToRead=0x49db0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesRead=0x27e648*=0x49db0, lpOverlapped=0x0) returned 1 [0053.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.348] SetErrorMode (uMode=0x1) returned 0x0 [0053.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0)) returned 1 [0053.349] SetErrorMode (uMode=0x0) returned 0x1 [0053.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.426] SetErrorMode (uMode=0x1) returned 0x0 [0053.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.435] GetFileType (hFile=0x18c) returned 0x1 [0053.435] SetErrorMode (uMode=0x0) returned 0x1 [0053.435] GetFileType (hFile=0x18c) returned 0x1 [0053.435] WriteFile (in: hFile=0x18c, lpBuffer=0x1288dc28*, nNumberOfBytesToWrite=0x49ec0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x1288dc28*, lpNumberOfBytesWritten=0x27e6c8*=0x49ec0, lpOverlapped=0x0) returned 1 [0053.441] CloseHandle (hObject=0x18c) returned 1 [0053.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*4OG81fb1vaP9npX_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*4OG81fb1vaP9npX_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0053.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.456] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 1 [0053.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.460] SetErrorMode (uMode=0x1) returned 0x0 [0053.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.460] GetFileType (hFile=0x18c) returned 0x1 [0053.460] SetErrorMode (uMode=0x0) returned 0x1 [0053.460] GetFileType (hFile=0x18c) returned 0x1 [0053.460] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x48d8f [0053.461] ReadFile (in: hFile=0x18c, lpBuffer=0x128d7b18, nNumberOfBytesToRead=0x48d8f, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x128d7b18*, lpNumberOfBytesRead=0x27e648*=0x48d8f, lpOverlapped=0x0) returned 1 [0053.468] CloseHandle (hObject=0x18c) returned 1 [0053.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.472] SetErrorMode (uMode=0x1) returned 0x0 [0053.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f)) returned 1 [0053.472] SetErrorMode (uMode=0x0) returned 0x1 [0053.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.599] SetErrorMode (uMode=0x1) returned 0x0 [0053.599] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.602] GetFileType (hFile=0x18c) returned 0x1 [0053.602] SetErrorMode (uMode=0x0) returned 0x1 [0053.602] GetFileType (hFile=0x18c) returned 0x1 [0053.602] WriteFile (in: hFile=0x18c, lpBuffer=0x12764148*, nNumberOfBytesToWrite=0x48e90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12764148*, lpNumberOfBytesWritten=0x27e6c8*=0x48e90, lpOverlapped=0x0) returned 1 [0053.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\h9FyjlZqk9j9mdon_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\h9FyjlZqk9j9mdon_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0053.607] SetErrorMode (uMode=0x1) returned 0x0 [0053.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf0a1be50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x48e90)) returned 1 [0053.608] SetErrorMode (uMode=0x0) returned 0x1 [0053.608] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\h9FyjlZqk9j9mdon_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\h9fyjlzqk9j9mdon_encrypted_by.whiterose")) returned 1 [0053.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0053.720] SetErrorMode (uMode=0x1) returned 0x0 [0053.720] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0053.721] GetFileType (hFile=0x18c) returned 0x1 [0053.721] SetErrorMode (uMode=0x0) returned 0x1 [0053.721] GetFileType (hFile=0x18c) returned 0x1 [0053.722] WriteFile (in: hFile=0x18c, lpBuffer=0x2706158*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2706158*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0053.724] WriteFile (in: hFile=0x18c, lpBuffer=0x2706158*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2706158*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0053.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", lpFilePart=0x0) returned 0x3f [0053.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", lpFilePart=0x0) returned 0x3f [0053.724] SetErrorMode (uMode=0x1) returned 0x0 [0053.724] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0053.725] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0053.725] SetErrorMode (uMode=0x0) returned 0x1 [0053.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", lpFilePart=0x0) returned 0x3f [0053.725] SetErrorMode (uMode=0x1) returned 0x0 [0053.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0053.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0053.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0053.726] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0053.726] SetErrorMode (uMode=0x0) returned 0x1 [0053.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.726] SetErrorMode (uMode=0x1) returned 0x0 [0053.726] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.727] GetFileType (hFile=0x18c) returned 0x1 [0053.727] SetErrorMode (uMode=0x0) returned 0x1 [0053.727] GetFileType (hFile=0x18c) returned 0x1 [0053.727] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x197f2 [0053.728] ReadFile (in: hFile=0x18c, lpBuffer=0x127ad008, nNumberOfBytesToRead=0x197f2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x127ad008*, lpNumberOfBytesRead=0x27e648*=0x197f2, lpOverlapped=0x0) returned 1 [0053.730] CloseHandle (hObject=0x18c) returned 1 [0053.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.732] SetErrorMode (uMode=0x1) returned 0x0 [0053.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2)) returned 1 [0053.732] SetErrorMode (uMode=0x0) returned 0x1 [0053.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.818] SetErrorMode (uMode=0x1) returned 0x0 [0053.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.820] GetFileType (hFile=0x18c) returned 0x1 [0053.820] SetErrorMode (uMode=0x0) returned 0x1 [0053.820] GetFileType (hFile=0x18c) returned 0x1 [0053.820] WriteFile (in: hFile=0x18c, lpBuffer=0x128465a8*, nNumberOfBytesToWrite=0x19900, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x128465a8*, lpNumberOfBytesWritten=0x27e6c8*=0x19900, lpOverlapped=0x0) returned 1 [0053.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0053.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\faBkpNaTedhNdCAv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\faBkpNaTedhNdCAv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0053.822] SetErrorMode (uMode=0x1) returned 0x0 [0053.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf0c31190, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x19900)) returned 1 [0053.823] SetErrorMode (uMode=0x0) returned 0x1 [0053.823] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\faBkpNaTedhNdCAv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\fabkpnatedhndcav_encrypted_by.whiterose")) returned 1 [0053.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.923] SetErrorMode (uMode=0x1) returned 0x0 [0053.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0053.924] GetFileType (hFile=0x18c) returned 0x1 [0053.924] SetErrorMode (uMode=0x0) returned 0x1 [0053.924] GetFileType (hFile=0x18c) returned 0x1 [0053.924] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x48d20 [0053.927] ReadFile (in: hFile=0x18c, lpBuffer=0x1285fed8, nNumberOfBytesToRead=0x48d20, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x1285fed8*, lpNumberOfBytesRead=0x27e648*=0x48d20, lpOverlapped=0x0) returned 1 [0053.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0053.932] SetErrorMode (uMode=0x1) returned 0x0 [0053.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20)) returned 1 [0053.932] SetErrorMode (uMode=0x0) returned 0x1 [0054.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0054.063] SetErrorMode (uMode=0x1) returned 0x0 [0054.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.064] GetFileType (hFile=0x18c) returned 0x1 [0054.064] SetErrorMode (uMode=0x0) returned 0x1 [0054.064] GetFileType (hFile=0x18c) returned 0x1 [0054.064] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x48e30, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e6c8*=0x48e30, lpOverlapped=0x0) returned 1 [0054.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0054.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\NrNsBkGddI8v7HZF_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\NrNsBkGddI8v7HZF_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x67 [0054.069] SetErrorMode (uMode=0x1) returned 0x0 [0054.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf0e92790, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x48e30)) returned 1 [0054.070] SetErrorMode (uMode=0x0) returned 0x1 [0054.070] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\NrNsBkGddI8v7HZF_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\nrnsbkgddi8v7hzf_encrypted_by.whiterose")) returned 1 [0054.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0054.173] SetErrorMode (uMode=0x1) returned 0x0 [0054.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.176] GetFileType (hFile=0x18c) returned 0x1 [0054.176] SetErrorMode (uMode=0x0) returned 0x1 [0054.176] GetFileType (hFile=0x18c) returned 0x1 [0054.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x55 [0054.178] SetErrorMode (uMode=0x1) returned 0x0 [0054.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.179] GetFileType (hFile=0x18c) returned 0x1 [0054.179] SetErrorMode (uMode=0x0) returned 0x1 [0054.179] GetFileType (hFile=0x18c) returned 0x1 [0054.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", lpFilePart=0x0) returned 0x3b [0054.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", lpFilePart=0x0) returned 0x3b [0054.180] SetErrorMode (uMode=0x1) returned 0x0 [0054.180] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0054.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0054.181] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.181] SetErrorMode (uMode=0x0) returned 0x1 [0054.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", lpFilePart=0x0) returned 0x3b [0054.181] SetErrorMode (uMode=0x1) returned 0x0 [0054.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.182] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.182] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0054.182] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0054.182] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.182] SetErrorMode (uMode=0x0) returned 0x1 [0054.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x4d [0054.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x4d [0054.182] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0054.182] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0054.183] CoTaskMemFree (pv=0xffa70) [0054.183] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0054.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x55 [0054.183] SetErrorMode (uMode=0x1) returned 0x0 [0054.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.184] GetFileType (hFile=0x18c) returned 0x1 [0054.184] SetErrorMode (uMode=0x0) returned 0x1 [0054.184] GetFileType (hFile=0x18c) returned 0x1 [0054.184] WriteFile (in: hFile=0x18c, lpBuffer=0x2735390*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2735390*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0054.185] WriteFile (in: hFile=0x18c, lpBuffer=0x2735390*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2735390*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0054.185] CloseHandle (hObject=0x18c) returned 1 [0054.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", lpFilePart=0x0) returned 0x35 [0054.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", lpFilePart=0x0) returned 0x35 [0054.186] SetErrorMode (uMode=0x1) returned 0x0 [0054.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0054.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0054.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0054.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0054.190] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.191] SetErrorMode (uMode=0x0) returned 0x1 [0054.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", lpFilePart=0x0) returned 0x35 [0054.191] SetErrorMode (uMode=0x1) returned 0x0 [0054.191] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0054.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0054.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0054.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0054.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0054.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0054.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0054.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0054.195] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.195] SetErrorMode (uMode=0x0) returned 0x1 [0054.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", lpFilePart=0x0) returned 0x39 [0054.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", lpFilePart=0x0) returned 0x39 [0054.196] SetErrorMode (uMode=0x1) returned 0x0 [0054.196] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.198] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.198] SetErrorMode (uMode=0x0) returned 0x1 [0054.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", lpFilePart=0x0) returned 0x39 [0054.198] SetErrorMode (uMode=0x1) returned 0x0 [0054.198] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.199] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.199] SetErrorMode (uMode=0x0) returned 0x1 [0054.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.199] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0054.199] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0054.199] CoTaskMemFree (pv=0xffa70) [0054.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0054.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0054.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0054.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0054.200] SetErrorMode (uMode=0x1) returned 0x0 [0054.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.201] GetFileType (hFile=0x18c) returned 0x1 [0054.201] SetErrorMode (uMode=0x0) returned 0x1 [0054.201] GetFileType (hFile=0x18c) returned 0x1 [0054.201] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xd11a [0054.201] ReadFile (in: hFile=0x18c, lpBuffer=0x2742000, nNumberOfBytesToRead=0xd11a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2742000*, lpNumberOfBytesRead=0x27e648*=0xd11a, lpOverlapped=0x0) returned 1 [0054.204] CloseHandle (hObject=0x18c) returned 1 [0054.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0054.204] SetErrorMode (uMode=0x1) returned 0x0 [0054.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a)) returned 1 [0054.204] SetErrorMode (uMode=0x0) returned 0x1 [0054.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0054.297] SetErrorMode (uMode=0x1) returned 0x0 [0054.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.298] GetFileType (hFile=0x18c) returned 0x1 [0054.298] SetErrorMode (uMode=0x0) returned 0x1 [0054.298] GetFileType (hFile=0x18c) returned 0x1 [0054.298] WriteFile (in: hFile=0x18c, lpBuffer=0x27e1a38*, nNumberOfBytesToWrite=0xd220, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27e1a38*, lpNumberOfBytesWritten=0x27e6c8*=0xd220, lpOverlapped=0x0) returned 1 [0054.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0054.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\KuJdHMRF9N6aX7aM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\KuJdHMRF9N6aX7aM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0054.300] SetErrorMode (uMode=0x1) returned 0x0 [0054.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf10cdc30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xd220)) returned 1 [0054.300] SetErrorMode (uMode=0x0) returned 0x1 [0054.300] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\KuJdHMRF9N6aX7aM_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\kujdhmrf9n6ax7am_encrypted_by.whiterose")) returned 1 [0054.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0054.407] SetErrorMode (uMode=0x1) returned 0x0 [0054.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.407] GetFileType (hFile=0x18c) returned 0x1 [0054.407] SetErrorMode (uMode=0x0) returned 0x1 [0054.408] GetFileType (hFile=0x18c) returned 0x1 [0054.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", lpFilePart=0x0) returned 0x39 [0054.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", lpFilePart=0x0) returned 0x39 [0054.409] SetErrorMode (uMode=0x1) returned 0x0 [0054.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.410] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.410] SetErrorMode (uMode=0x0) returned 0x1 [0054.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", lpFilePart=0x0) returned 0x39 [0054.410] SetErrorMode (uMode=0x1) returned 0x0 [0054.411] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.411] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.411] SetErrorMode (uMode=0x0) returned 0x1 [0054.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.411] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0054.411] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0054.412] CoTaskMemFree (pv=0xffa70) [0054.412] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0054.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0054.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0054.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0054.412] SetErrorMode (uMode=0x1) returned 0x0 [0054.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.413] GetFileType (hFile=0x18c) returned 0x1 [0054.413] SetErrorMode (uMode=0x0) returned 0x1 [0054.413] GetFileType (hFile=0x18c) returned 0x1 [0054.413] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x12dac [0054.413] ReadFile (in: hFile=0x18c, lpBuffer=0x2809b30, nNumberOfBytesToRead=0x12dac, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2809b30*, lpNumberOfBytesRead=0x27e648*=0x12dac, lpOverlapped=0x0) returned 1 [0054.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0054.416] SetErrorMode (uMode=0x1) returned 0x0 [0054.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac)) returned 1 [0054.416] SetErrorMode (uMode=0x0) returned 0x1 [0054.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0054.477] SetErrorMode (uMode=0x1) returned 0x0 [0054.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.478] GetFileType (hFile=0x18c) returned 0x1 [0054.478] SetErrorMode (uMode=0x0) returned 0x1 [0054.478] GetFileType (hFile=0x18c) returned 0x1 [0054.478] WriteFile (in: hFile=0x18c, lpBuffer=0x28c4660*, nNumberOfBytesToWrite=0x12eb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28c4660*, lpNumberOfBytesWritten=0x27e6c8*=0x12eb0, lpOverlapped=0x0) returned 1 [0054.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0054.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\Ds8L9hx38aGmPvMW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\Ds8L9hx38aGmPvMW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0054.480] SetErrorMode (uMode=0x1) returned 0x0 [0054.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf1270b50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0)) returned 1 [0054.480] SetErrorMode (uMode=0x0) returned 0x1 [0054.481] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\Ds8L9hx38aGmPvMW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\ds8l9hx38agmpvmw_encrypted_by.whiterose")) returned 1 [0054.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0054.578] SetErrorMode (uMode=0x1) returned 0x0 [0054.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.579] GetFileType (hFile=0x18c) returned 0x1 [0054.579] SetErrorMode (uMode=0x0) returned 0x1 [0054.579] GetFileType (hFile=0x18c) returned 0x1 [0054.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", lpFilePart=0x0) returned 0x39 [0054.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", lpFilePart=0x0) returned 0x39 [0054.581] SetErrorMode (uMode=0x1) returned 0x0 [0054.581] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.582] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.582] SetErrorMode (uMode=0x0) returned 0x1 [0054.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", lpFilePart=0x0) returned 0x39 [0054.582] SetErrorMode (uMode=0x1) returned 0x0 [0054.582] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.583] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.583] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.583] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.583] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.583] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.583] SetErrorMode (uMode=0x0) returned 0x1 [0054.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.583] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0054.583] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0054.583] CoTaskMemFree (pv=0xffa70) [0054.583] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0054.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0054.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0054.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0054.584] SetErrorMode (uMode=0x1) returned 0x0 [0054.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.584] GetFileType (hFile=0x18c) returned 0x1 [0054.584] SetErrorMode (uMode=0x0) returned 0x1 [0054.584] GetFileType (hFile=0x18c) returned 0x1 [0054.584] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x13a5b [0054.584] ReadFile (in: hFile=0x18c, lpBuffer=0x28f23e8, nNumberOfBytesToRead=0x13a5b, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f23e8*, lpNumberOfBytesRead=0x27e648*=0x13a5b, lpOverlapped=0x0) returned 1 [0054.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0054.587] SetErrorMode (uMode=0x1) returned 0x0 [0054.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b)) returned 1 [0054.587] SetErrorMode (uMode=0x0) returned 0x1 [0054.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0054.649] SetErrorMode (uMode=0x1) returned 0x0 [0054.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.650] GetFileType (hFile=0x18c) returned 0x1 [0054.650] SetErrorMode (uMode=0x0) returned 0x1 [0054.650] GetFileType (hFile=0x18c) returned 0x1 [0054.650] WriteFile (in: hFile=0x18c, lpBuffer=0x27aea30*, nNumberOfBytesToWrite=0x13b60, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27aea30*, lpNumberOfBytesWritten=0x27e6c8*=0x13b60, lpOverlapped=0x0) returned 1 [0054.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0054.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\uVktMBBknBoE5Zal_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\uVktMBBknBoE5Zal_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0054.652] SetErrorMode (uMode=0x1) returned 0x0 [0054.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf1413a70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0054.652] SetErrorMode (uMode=0x0) returned 0x1 [0054.652] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\uVktMBBknBoE5Zal_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\uvktmbbknboe5zal_encrypted_by.whiterose")) returned 1 [0054.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0054.750] SetErrorMode (uMode=0x1) returned 0x0 [0054.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.751] GetFileType (hFile=0x18c) returned 0x1 [0054.751] SetErrorMode (uMode=0x0) returned 0x1 [0054.751] GetFileType (hFile=0x18c) returned 0x1 [0054.752] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", lpFilePart=0x0) returned 0x39 [0054.752] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", lpFilePart=0x0) returned 0x39 [0054.752] SetErrorMode (uMode=0x1) returned 0x0 [0054.752] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.753] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.753] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.753] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.753] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.753] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.753] SetErrorMode (uMode=0x0) returned 0x1 [0054.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", lpFilePart=0x0) returned 0x39 [0054.753] SetErrorMode (uMode=0x1) returned 0x0 [0054.754] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.754] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.754] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.754] SetErrorMode (uMode=0x0) returned 0x1 [0054.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.754] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0054.754] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0054.754] CoTaskMemFree (pv=0xffa70) [0054.754] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0054.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.755] SetErrorMode (uMode=0x1) returned 0x0 [0054.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.756] GetFileType (hFile=0x18c) returned 0x1 [0054.756] SetErrorMode (uMode=0x0) returned 0x1 [0054.756] GetFileType (hFile=0x18c) returned 0x1 [0054.756] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x112b7 [0054.756] ReadFile (in: hFile=0x18c, lpBuffer=0x27dd468, nNumberOfBytesToRead=0x112b7, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27dd468*, lpNumberOfBytesRead=0x27e648*=0x112b7, lpOverlapped=0x0) returned 1 [0054.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.758] SetErrorMode (uMode=0x1) returned 0x0 [0054.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7)) returned 1 [0054.758] SetErrorMode (uMode=0x0) returned 0x1 [0054.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.819] SetErrorMode (uMode=0x1) returned 0x0 [0054.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.820] GetFileType (hFile=0x18c) returned 0x1 [0054.821] SetErrorMode (uMode=0x0) returned 0x1 [0054.821] GetFileType (hFile=0x18c) returned 0x1 [0054.821] WriteFile (in: hFile=0x18c, lpBuffer=0x287a5c0*, nNumberOfBytesToWrite=0x113c0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x287a5c0*, lpNumberOfBytesWritten=0x27e6c8*=0x113c0, lpOverlapped=0x0) returned 1 [0054.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\P7RYZ3d8xFn*CXS0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\P7RYZ3d8xFn*CXS0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0054.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0054.832] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 1 [0054.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0054.836] SetErrorMode (uMode=0x1) returned 0x0 [0054.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0054.836] GetFileType (hFile=0x18c) returned 0x1 [0054.836] SetErrorMode (uMode=0x0) returned 0x1 [0054.836] GetFileType (hFile=0x18c) returned 0x1 [0054.838] WriteFile (in: hFile=0x18c, lpBuffer=0x289e510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x289e510*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0054.839] WriteFile (in: hFile=0x18c, lpBuffer=0x289e510*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x289e510*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0054.839] CloseHandle (hObject=0x18c) returned 1 [0054.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", lpFilePart=0x0) returned 0x39 [0054.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", lpFilePart=0x0) returned 0x39 [0054.840] SetErrorMode (uMode=0x1) returned 0x0 [0054.840] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.842] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.842] SetErrorMode (uMode=0x0) returned 0x1 [0054.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", lpFilePart=0x0) returned 0x39 [0054.842] SetErrorMode (uMode=0x1) returned 0x0 [0054.842] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0054.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0054.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0054.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0054.843] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0054.843] SetErrorMode (uMode=0x0) returned 0x1 [0054.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", lpFilePart=0x0) returned 0x42 [0054.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0054.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0054.843] CoTaskMemFree (pv=0xffa70) [0054.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0054.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0054.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0054.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0054.844] SetErrorMode (uMode=0x1) returned 0x0 [0054.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.845] GetFileType (hFile=0x18c) returned 0x1 [0054.845] SetErrorMode (uMode=0x0) returned 0x1 [0054.845] GetFileType (hFile=0x18c) returned 0x1 [0054.845] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xbd79 [0054.845] ReadFile (in: hFile=0x18c, lpBuffer=0x28a6c88, nNumberOfBytesToRead=0xbd79, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a6c88*, lpNumberOfBytesRead=0x27e648*=0xbd79, lpOverlapped=0x0) returned 1 [0054.847] CloseHandle (hObject=0x18c) returned 1 [0054.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0054.848] SetErrorMode (uMode=0x1) returned 0x0 [0054.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79)) returned 1 [0054.848] SetErrorMode (uMode=0x0) returned 0x1 [0054.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0054.945] SetErrorMode (uMode=0x1) returned 0x0 [0054.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0054.947] GetFileType (hFile=0x18c) returned 0x1 [0054.947] SetErrorMode (uMode=0x0) returned 0x1 [0054.947] GetFileType (hFile=0x18c) returned 0x1 [0054.947] WriteFile (in: hFile=0x18c, lpBuffer=0x27255d8*, nNumberOfBytesToWrite=0xbe80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27255d8*, lpNumberOfBytesWritten=0x27e6c8*=0xbe80, lpOverlapped=0x0) returned 1 [0054.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0054.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\WGz3qbkgakDxeRFQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\WGz3qbkgakDxeRFQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0054.949] SetErrorMode (uMode=0x1) returned 0x0 [0054.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf16e7490, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xbe80)) returned 1 [0054.949] SetErrorMode (uMode=0x0) returned 0x1 [0054.949] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\WGz3qbkgakDxeRFQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\wgz3qbkgakdxerfq_encrypted_by.whiterose")) returned 1 [0055.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0055.046] SetErrorMode (uMode=0x1) returned 0x0 [0055.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0055.047] GetFileType (hFile=0x18c) returned 0x1 [0055.047] SetErrorMode (uMode=0x0) returned 0x1 [0055.047] GetFileType (hFile=0x18c) returned 0x1 [0055.049] WriteFile (in: hFile=0x18c, lpBuffer=0x2743bb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2743bb8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0055.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", lpFilePart=0x0) returned 0x39 [0055.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", lpFilePart=0x0) returned 0x39 [0055.050] SetErrorMode (uMode=0x1) returned 0x0 [0055.050] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.051] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.051] SetErrorMode (uMode=0x0) returned 0x1 [0055.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", lpFilePart=0x0) returned 0x39 [0055.051] SetErrorMode (uMode=0x1) returned 0x0 [0055.052] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.052] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.052] SetErrorMode (uMode=0x0) returned 0x1 [0055.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.052] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0055.053] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0055.053] CoTaskMemFree (pv=0xffa70) [0055.053] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0055.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0055.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0055.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0055.053] SetErrorMode (uMode=0x1) returned 0x0 [0055.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.053] GetFileType (hFile=0x18c) returned 0x1 [0055.053] SetErrorMode (uMode=0x0) returned 0x1 [0055.054] GetFileType (hFile=0x18c) returned 0x1 [0055.054] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xc750 [0055.054] ReadFile (in: hFile=0x18c, lpBuffer=0x274c330, nNumberOfBytesToRead=0xc750, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x274c330*, lpNumberOfBytesRead=0x27e648*=0xc750, lpOverlapped=0x0) returned 1 [0055.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0055.056] SetErrorMode (uMode=0x1) returned 0x0 [0055.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750)) returned 1 [0055.056] SetErrorMode (uMode=0x0) returned 0x1 [0055.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0055.120] SetErrorMode (uMode=0x1) returned 0x0 [0055.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.121] GetFileType (hFile=0x18c) returned 0x1 [0055.121] SetErrorMode (uMode=0x0) returned 0x1 [0055.121] GetFileType (hFile=0x18c) returned 0x1 [0055.121] WriteFile (in: hFile=0x18c, lpBuffer=0x27d9b50*, nNumberOfBytesToWrite=0xc860, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d9b50*, lpNumberOfBytesWritten=0x27e6c8*=0xc860, lpOverlapped=0x0) returned 1 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\1fsm6Ah8hbb3NtLC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\1fsm6Ah8hbb3NtLC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0055.123] SetErrorMode (uMode=0x1) returned 0x0 [0055.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf188a3b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc860)) returned 1 [0055.123] SetErrorMode (uMode=0x0) returned 0x1 [0055.123] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\1fsm6Ah8hbb3NtLC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\1fsm6ah8hbb3ntlc_encrypted_by.whiterose")) returned 1 [0055.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0055.218] SetErrorMode (uMode=0x1) returned 0x0 [0055.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0055.224] GetFileType (hFile=0x18c) returned 0x1 [0055.224] SetErrorMode (uMode=0x0) returned 0x1 [0055.225] GetFileType (hFile=0x18c) returned 0x1 [0055.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x39 [0055.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x39 [0055.226] SetErrorMode (uMode=0x1) returned 0x0 [0055.226] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.227] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.227] SetErrorMode (uMode=0x0) returned 0x1 [0055.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x39 [0055.228] SetErrorMode (uMode=0x1) returned 0x0 [0055.228] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.228] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.228] SetErrorMode (uMode=0x0) returned 0x1 [0055.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0055.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0055.229] CoTaskMemFree (pv=0xffa70) [0055.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0055.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0055.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0055.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0055.229] SetErrorMode (uMode=0x1) returned 0x0 [0055.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.230] GetFileType (hFile=0x18c) returned 0x1 [0055.230] SetErrorMode (uMode=0x0) returned 0x1 [0055.230] GetFileType (hFile=0x18c) returned 0x1 [0055.230] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xa835 [0055.230] ReadFile (in: hFile=0x18c, lpBuffer=0x2801288, nNumberOfBytesToRead=0xa835, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2801288*, lpNumberOfBytesRead=0x27e648*=0xa835, lpOverlapped=0x0) returned 1 [0055.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0055.232] SetErrorMode (uMode=0x1) returned 0x0 [0055.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835)) returned 1 [0055.232] SetErrorMode (uMode=0x0) returned 0x1 [0055.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0055.295] SetErrorMode (uMode=0x1) returned 0x0 [0055.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.296] GetFileType (hFile=0x18c) returned 0x1 [0055.296] SetErrorMode (uMode=0x0) returned 0x1 [0055.296] GetFileType (hFile=0x18c) returned 0x1 [0055.296] WriteFile (in: hFile=0x18c, lpBuffer=0x28842a8*, nNumberOfBytesToWrite=0xa940, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28842a8*, lpNumberOfBytesWritten=0x27e6c8*=0xa940, lpOverlapped=0x0) returned 1 [0055.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0055.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\kqZRh2UUreawlqsp_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\kqZRh2UUreawlqsp_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0055.298] SetErrorMode (uMode=0x1) returned 0x0 [0055.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf1a53430, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa940)) returned 1 [0055.298] SetErrorMode (uMode=0x0) returned 0x1 [0055.298] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\kqZRh2UUreawlqsp_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\kqzrh2uureawlqsp_encrypted_by.whiterose")) returned 1 [0055.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0055.405] SetErrorMode (uMode=0x1) returned 0x0 [0055.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0055.406] GetFileType (hFile=0x18c) returned 0x1 [0055.406] SetErrorMode (uMode=0x0) returned 0x1 [0055.406] GetFileType (hFile=0x18c) returned 0x1 [0055.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", lpFilePart=0x0) returned 0x39 [0055.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", lpFilePart=0x0) returned 0x39 [0055.407] SetErrorMode (uMode=0x1) returned 0x0 [0055.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.409] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.409] SetErrorMode (uMode=0x0) returned 0x1 [0055.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", lpFilePart=0x0) returned 0x39 [0055.409] SetErrorMode (uMode=0x1) returned 0x0 [0055.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.409] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.410] SetErrorMode (uMode=0x0) returned 0x1 [0055.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.410] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0055.410] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0055.410] CoTaskMemFree (pv=0xffa70) [0055.410] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0055.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0055.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0055.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0055.411] SetErrorMode (uMode=0x1) returned 0x0 [0055.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.411] GetFileType (hFile=0x18c) returned 0x1 [0055.411] SetErrorMode (uMode=0x0) returned 0x1 [0055.411] GetFileType (hFile=0x18c) returned 0x1 [0055.411] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xcd60 [0055.411] ReadFile (in: hFile=0x18c, lpBuffer=0x28a9ac0, nNumberOfBytesToRead=0xcd60, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a9ac0*, lpNumberOfBytesRead=0x27e648*=0xcd60, lpOverlapped=0x0) returned 1 [0055.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0055.414] SetErrorMode (uMode=0x1) returned 0x0 [0055.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60)) returned 1 [0055.414] SetErrorMode (uMode=0x0) returned 0x1 [0055.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0055.479] SetErrorMode (uMode=0x1) returned 0x0 [0055.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.480] GetFileType (hFile=0x18c) returned 0x1 [0055.480] SetErrorMode (uMode=0x0) returned 0x1 [0055.481] GetFileType (hFile=0x18c) returned 0x1 [0055.481] WriteFile (in: hFile=0x18c, lpBuffer=0x2740738*, nNumberOfBytesToWrite=0xce70, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2740738*, lpNumberOfBytesWritten=0x27e6c8*=0xce70, lpOverlapped=0x0) returned 1 [0055.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0055.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\2hHMIrHIzbWwTIlc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\2hHMIrHIzbWwTIlc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0055.483] SetErrorMode (uMode=0x1) returned 0x0 [0055.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf1bf6350, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xce70)) returned 1 [0055.483] SetErrorMode (uMode=0x0) returned 0x1 [0055.483] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\2hHMIrHIzbWwTIlc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\2hhmirhizbwwtilc_encrypted_by.whiterose")) returned 1 [0055.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0055.592] SetErrorMode (uMode=0x1) returned 0x0 [0055.592] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0055.593] GetFileType (hFile=0x18c) returned 0x1 [0055.594] SetErrorMode (uMode=0x0) returned 0x1 [0055.594] GetFileType (hFile=0x18c) returned 0x1 [0055.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", lpFilePart=0x0) returned 0x39 [0055.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", lpFilePart=0x0) returned 0x39 [0055.595] SetErrorMode (uMode=0x1) returned 0x0 [0055.595] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.595] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.596] SetErrorMode (uMode=0x0) returned 0x1 [0055.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", lpFilePart=0x0) returned 0x39 [0055.596] SetErrorMode (uMode=0x1) returned 0x0 [0055.596] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.596] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.596] SetErrorMode (uMode=0x0) returned 0x1 [0055.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.597] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0055.598] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0055.598] CoTaskMemFree (pv=0xffa70) [0055.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0055.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0055.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0055.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0055.599] SetErrorMode (uMode=0x1) returned 0x0 [0055.599] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.599] GetFileType (hFile=0x18c) returned 0x1 [0055.599] SetErrorMode (uMode=0x0) returned 0x1 [0055.599] GetFileType (hFile=0x18c) returned 0x1 [0055.599] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xaedb [0055.599] ReadFile (in: hFile=0x18c, lpBuffer=0x2768480, nNumberOfBytesToRead=0xaedb, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2768480*, lpNumberOfBytesRead=0x27e648*=0xaedb, lpOverlapped=0x0) returned 1 [0055.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0055.602] SetErrorMode (uMode=0x1) returned 0x0 [0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb)) returned 1 [0055.602] SetErrorMode (uMode=0x0) returned 0x1 [0055.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0055.663] SetErrorMode (uMode=0x1) returned 0x0 [0055.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.664] GetFileType (hFile=0x18c) returned 0x1 [0055.664] SetErrorMode (uMode=0x0) returned 0x1 [0055.664] GetFileType (hFile=0x18c) returned 0x1 [0055.664] WriteFile (in: hFile=0x18c, lpBuffer=0x27dffe8*, nNumberOfBytesToWrite=0xafe0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27dffe8*, lpNumberOfBytesWritten=0x27e6c8*=0xafe0, lpOverlapped=0x0) returned 1 [0055.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0055.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\es8UAJW3Pwri0wWC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\es8UAJW3Pwri0wWC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0055.666] SetErrorMode (uMode=0x1) returned 0x0 [0055.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf1dbf3d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xafe0)) returned 1 [0055.666] SetErrorMode (uMode=0x0) returned 0x1 [0055.666] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\es8UAJW3Pwri0wWC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\es8uajw3pwri0wwc_encrypted_by.whiterose")) returned 1 [0055.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0055.764] SetErrorMode (uMode=0x1) returned 0x0 [0055.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0055.764] GetFileType (hFile=0x18c) returned 0x1 [0055.764] SetErrorMode (uMode=0x0) returned 0x1 [0055.764] GetFileType (hFile=0x18c) returned 0x1 [0055.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", lpFilePart=0x0) returned 0x39 [0055.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", lpFilePart=0x0) returned 0x39 [0055.766] SetErrorMode (uMode=0x1) returned 0x0 [0055.766] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.767] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.767] SetErrorMode (uMode=0x0) returned 0x1 [0055.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", lpFilePart=0x0) returned 0x39 [0055.767] SetErrorMode (uMode=0x1) returned 0x0 [0055.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.768] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.768] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.768] SetErrorMode (uMode=0x0) returned 0x1 [0055.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.768] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0055.768] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0055.768] CoTaskMemFree (pv=0xffa70) [0055.768] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0055.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0055.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0055.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0055.768] SetErrorMode (uMode=0x1) returned 0x0 [0055.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.769] GetFileType (hFile=0x18c) returned 0x1 [0055.769] SetErrorMode (uMode=0x0) returned 0x1 [0055.769] GetFileType (hFile=0x18c) returned 0x1 [0055.769] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xe94c [0055.769] ReadFile (in: hFile=0x18c, lpBuffer=0x2805ea0, nNumberOfBytesToRead=0xe94c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2805ea0*, lpNumberOfBytesRead=0x27e648*=0xe94c, lpOverlapped=0x0) returned 1 [0055.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0055.771] SetErrorMode (uMode=0x1) returned 0x0 [0055.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c)) returned 1 [0055.771] SetErrorMode (uMode=0x0) returned 0x1 [0055.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0055.832] SetErrorMode (uMode=0x1) returned 0x0 [0055.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.833] GetFileType (hFile=0x18c) returned 0x1 [0055.833] SetErrorMode (uMode=0x0) returned 0x1 [0055.833] GetFileType (hFile=0x18c) returned 0x1 [0055.833] WriteFile (in: hFile=0x18c, lpBuffer=0x289ec38*, nNumberOfBytesToWrite=0xea50, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x289ec38*, lpNumberOfBytesWritten=0x27e6c8*=0xea50, lpOverlapped=0x0) returned 1 [0055.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0055.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\zDDoNayPZzqNHuDp_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\zDDoNayPZzqNHuDp_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0055.835] SetErrorMode (uMode=0x1) returned 0x0 [0055.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf1f622f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xea50)) returned 1 [0055.835] SetErrorMode (uMode=0x0) returned 0x1 [0055.835] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\zDDoNayPZzqNHuDp_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\zddonaypzzqnhudp_encrypted_by.whiterose")) returned 1 [0055.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0055.935] SetErrorMode (uMode=0x1) returned 0x0 [0055.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0055.936] GetFileType (hFile=0x18c) returned 0x1 [0055.936] SetErrorMode (uMode=0x0) returned 0x1 [0055.936] GetFileType (hFile=0x18c) returned 0x1 [0055.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", lpFilePart=0x0) returned 0x39 [0055.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", lpFilePart=0x0) returned 0x39 [0055.937] SetErrorMode (uMode=0x1) returned 0x0 [0055.937] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.938] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.938] SetErrorMode (uMode=0x0) returned 0x1 [0055.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", lpFilePart=0x0) returned 0x39 [0055.938] SetErrorMode (uMode=0x1) returned 0x0 [0055.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0055.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0055.939] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0055.939] SetErrorMode (uMode=0x0) returned 0x1 [0055.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", lpFilePart=0x0) returned 0x42 [0055.939] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0055.939] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0055.939] CoTaskMemFree (pv=0xffa70) [0055.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0055.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0055.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0055.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0055.939] SetErrorMode (uMode=0x1) returned 0x0 [0055.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0055.940] GetFileType (hFile=0x18c) returned 0x1 [0055.940] SetErrorMode (uMode=0x0) returned 0x1 [0055.940] GetFileType (hFile=0x18c) returned 0x1 [0055.940] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xc490 [0055.940] ReadFile (in: hFile=0x18c, lpBuffer=0x28c8560, nNumberOfBytesToRead=0xc490, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28c8560*, lpNumberOfBytesRead=0x27e648*=0xc490, lpOverlapped=0x0) returned 1 [0056.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0056.138] SetErrorMode (uMode=0x1) returned 0x0 [0056.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490)) returned 1 [0056.138] SetErrorMode (uMode=0x0) returned 0x1 [0056.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0056.209] SetErrorMode (uMode=0x1) returned 0x0 [0056.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0056.211] GetFileType (hFile=0x18c) returned 0x1 [0056.211] SetErrorMode (uMode=0x0) returned 0x1 [0056.211] GetFileType (hFile=0x18c) returned 0x1 [0056.211] WriteFile (in: hFile=0x18c, lpBuffer=0x2752100*, nNumberOfBytesToWrite=0xc5a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2752100*, lpNumberOfBytesWritten=0x27e6c8*=0xc5a0, lpOverlapped=0x0) returned 1 [0056.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0056.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\q7R8rtC8g106WZ3P_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\q7R8rtC8g106WZ3P_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0056.213] SetErrorMode (uMode=0x1) returned 0x0 [0056.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf22f43f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc5a0)) returned 1 [0056.213] SetErrorMode (uMode=0x0) returned 0x1 [0056.213] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\q7R8rtC8g106WZ3P_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\q7r8rtc8g106wz3p_encrypted_by.whiterose")) returned 1 [0056.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0056.310] SetErrorMode (uMode=0x1) returned 0x0 [0056.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0056.311] GetFileType (hFile=0x18c) returned 0x1 [0056.311] SetErrorMode (uMode=0x0) returned 0x1 [0056.311] GetFileType (hFile=0x18c) returned 0x1 [0056.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", lpFilePart=0x0) returned 0x39 [0056.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", lpFilePart=0x0) returned 0x39 [0056.312] SetErrorMode (uMode=0x1) returned 0x0 [0056.312] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0056.312] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.312] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0056.312] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0056.312] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0056.312] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0056.313] SetErrorMode (uMode=0x0) returned 0x1 [0056.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", lpFilePart=0x0) returned 0x39 [0056.313] SetErrorMode (uMode=0x1) returned 0x0 [0056.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0056.313] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.313] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0056.313] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0056.313] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0056.313] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0056.313] SetErrorMode (uMode=0x0) returned 0x1 [0056.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", lpFilePart=0x0) returned 0x42 [0056.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", lpFilePart=0x0) returned 0x42 [0056.314] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0056.314] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0056.314] CoTaskMemFree (pv=0xffa70) [0056.314] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0056.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0056.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0056.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0056.314] SetErrorMode (uMode=0x1) returned 0x0 [0056.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0056.314] GetFileType (hFile=0x18c) returned 0x1 [0056.314] SetErrorMode (uMode=0x0) returned 0x1 [0056.314] GetFileType (hFile=0x18c) returned 0x1 [0056.314] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x11ef3 [0056.314] ReadFile (in: hFile=0x18c, lpBuffer=0x2779578, nNumberOfBytesToRead=0x11ef3, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2779578*, lpNumberOfBytesRead=0x27e648*=0x11ef3, lpOverlapped=0x0) returned 1 [0057.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0057.302] SetErrorMode (uMode=0x1) returned 0x0 [0057.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3)) returned 1 [0057.303] SetErrorMode (uMode=0x0) returned 0x1 [0057.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0057.366] SetErrorMode (uMode=0x1) returned 0x0 [0057.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0057.367] GetFileType (hFile=0x18c) returned 0x1 [0057.367] SetErrorMode (uMode=0x0) returned 0x1 [0057.367] GetFileType (hFile=0x18c) returned 0x1 [0057.367] WriteFile (in: hFile=0x18c, lpBuffer=0x2821a18*, nNumberOfBytesToWrite=0x12000, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2821a18*, lpNumberOfBytesWritten=0x27e6c8*=0x12000, lpOverlapped=0x0) returned 1 [0057.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0057.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\OQhWijbKxVG54yPo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\OQhWijbKxVG54yPo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0057.370] SetErrorMode (uMode=0x1) returned 0x0 [0057.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf2df69b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x12000)) returned 1 [0057.370] SetErrorMode (uMode=0x0) returned 0x1 [0057.370] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\OQhWijbKxVG54yPo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\oqhwijbkxvg54ypo_encrypted_by.whiterose")) returned 1 [0057.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0057.480] SetErrorMode (uMode=0x1) returned 0x0 [0057.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0057.481] GetFileType (hFile=0x18c) returned 0x1 [0057.481] SetErrorMode (uMode=0x0) returned 0x1 [0057.481] GetFileType (hFile=0x18c) returned 0x1 [0057.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", lpFilePart=0x0) returned 0x39 [0057.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", lpFilePart=0x0) returned 0x39 [0057.482] SetErrorMode (uMode=0x1) returned 0x0 [0057.482] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0057.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0057.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0057.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0057.483] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0057.484] SetErrorMode (uMode=0x0) returned 0x1 [0057.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", lpFilePart=0x0) returned 0x39 [0057.484] SetErrorMode (uMode=0x1) returned 0x0 [0057.484] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0057.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0057.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0057.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0057.484] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0057.484] SetErrorMode (uMode=0x0) returned 0x1 [0057.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", lpFilePart=0x0) returned 0x42 [0057.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", lpFilePart=0x0) returned 0x42 [0057.485] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0057.485] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0057.485] CoTaskMemFree (pv=0xffa70) [0057.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0057.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0057.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0057.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0057.485] SetErrorMode (uMode=0x1) returned 0x0 [0057.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0057.485] GetFileType (hFile=0x18c) returned 0x1 [0057.485] SetErrorMode (uMode=0x0) returned 0x1 [0057.485] GetFileType (hFile=0x18c) returned 0x1 [0057.485] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xc60d [0057.485] ReadFile (in: hFile=0x18c, lpBuffer=0x284e8f0, nNumberOfBytesToRead=0xc60d, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x284e8f0*, lpNumberOfBytesRead=0x27e648*=0xc60d, lpOverlapped=0x0) returned 1 [0057.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0057.488] SetErrorMode (uMode=0x1) returned 0x0 [0057.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d)) returned 1 [0057.488] SetErrorMode (uMode=0x0) returned 0x1 [0057.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0057.549] SetErrorMode (uMode=0x1) returned 0x0 [0057.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0057.550] GetFileType (hFile=0x18c) returned 0x1 [0057.550] SetErrorMode (uMode=0x0) returned 0x1 [0057.550] GetFileType (hFile=0x18c) returned 0x1 [0057.550] WriteFile (in: hFile=0x18c, lpBuffer=0x28d5628*, nNumberOfBytesToWrite=0xc710, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d5628*, lpNumberOfBytesWritten=0x27e6c8*=0xc710, lpOverlapped=0x0) returned 1 [0057.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0057.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\497FxMpIhlEvmfN6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\497FxMpIhlEvmfN6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0057.552] SetErrorMode (uMode=0x1) returned 0x0 [0057.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf2fbfa30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc710)) returned 1 [0057.552] SetErrorMode (uMode=0x0) returned 0x1 [0057.552] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\497FxMpIhlEvmfN6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\497fxmpihlevmfn6_encrypted_by.whiterose")) returned 1 [0057.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0057.652] SetErrorMode (uMode=0x1) returned 0x0 [0057.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0057.655] GetFileType (hFile=0x18c) returned 0x1 [0057.655] SetErrorMode (uMode=0x0) returned 0x1 [0057.655] GetFileType (hFile=0x18c) returned 0x1 [0057.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", lpFilePart=0x0) returned 0x39 [0057.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", lpFilePart=0x0) returned 0x39 [0057.658] SetErrorMode (uMode=0x1) returned 0x0 [0057.659] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0057.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0057.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0057.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0057.661] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0057.661] SetErrorMode (uMode=0x0) returned 0x1 [0057.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", lpFilePart=0x0) returned 0x39 [0057.661] SetErrorMode (uMode=0x1) returned 0x0 [0057.661] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0057.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0057.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0057.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0057.662] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0057.662] SetErrorMode (uMode=0x0) returned 0x1 [0057.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", lpFilePart=0x0) returned 0x42 [0057.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", lpFilePart=0x0) returned 0x42 [0057.662] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0057.662] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0057.662] CoTaskMemFree (pv=0xffa70) [0057.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0057.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0057.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0057.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0057.663] SetErrorMode (uMode=0x1) returned 0x0 [0057.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0057.663] GetFileType (hFile=0x18c) returned 0x1 [0057.663] SetErrorMode (uMode=0x0) returned 0x1 [0057.663] GetFileType (hFile=0x18c) returned 0x1 [0057.663] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1dc34 [0057.664] ReadFile (in: hFile=0x18c, lpBuffer=0x128f1a60, nNumberOfBytesToRead=0x1dc34, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x128f1a60*, lpNumberOfBytesRead=0x27e648*=0x1dc34, lpOverlapped=0x0) returned 1 [0057.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0057.669] SetErrorMode (uMode=0x1) returned 0x0 [0057.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34)) returned 1 [0057.669] SetErrorMode (uMode=0x0) returned 0x1 [0057.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0057.739] SetErrorMode (uMode=0x1) returned 0x0 [0057.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0057.740] GetFileType (hFile=0x18c) returned 0x1 [0057.740] SetErrorMode (uMode=0x0) returned 0x1 [0057.740] GetFileType (hFile=0x18c) returned 0x1 [0057.740] WriteFile (in: hFile=0x18c, lpBuffer=0x129a4980*, nNumberOfBytesToWrite=0x1dd40, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x129a4980*, lpNumberOfBytesWritten=0x27e6c8*=0x1dd40, lpOverlapped=0x0) returned 1 [0057.743] CloseHandle (hObject=0x18c) returned 1 [0057.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0057.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\UBjnb7t1zMnMBJbv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\UBjnb7t1zMnMBJbv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0057.746] SetErrorMode (uMode=0x1) returned 0x0 [0057.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf31aec10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1dd40)) returned 1 [0057.746] SetErrorMode (uMode=0x0) returned 0x1 [0057.746] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\UBjnb7t1zMnMBJbv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\ubjnb7t1zmnmbjbv_encrypted_by.whiterose")) returned 1 [0057.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0057.854] SetErrorMode (uMode=0x1) returned 0x0 [0057.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0057.855] GetFileType (hFile=0x18c) returned 0x1 [0057.855] SetErrorMode (uMode=0x0) returned 0x1 [0057.855] GetFileType (hFile=0x18c) returned 0x1 [0057.855] WriteFile (in: hFile=0x18c, lpBuffer=0x275d760*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x275d760*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0057.856] WriteFile (in: hFile=0x18c, lpBuffer=0x275d760*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x275d760*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0057.856] CloseHandle (hObject=0x18c) returned 1 [0057.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", lpFilePart=0x0) returned 0x39 [0057.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", lpFilePart=0x0) returned 0x39 [0057.857] SetErrorMode (uMode=0x1) returned 0x0 [0057.857] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0057.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0057.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0057.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0057.859] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0057.859] SetErrorMode (uMode=0x0) returned 0x1 [0057.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", lpFilePart=0x0) returned 0x39 [0057.859] SetErrorMode (uMode=0x1) returned 0x0 [0057.859] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0057.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0057.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0057.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0057.860] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0057.860] SetErrorMode (uMode=0x0) returned 0x1 [0057.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", lpFilePart=0x0) returned 0x42 [0057.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", lpFilePart=0x0) returned 0x42 [0057.860] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0057.860] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0057.860] CoTaskMemFree (pv=0xffa70) [0057.860] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0057.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0057.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0057.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0057.860] SetErrorMode (uMode=0x1) returned 0x0 [0057.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0057.860] GetFileType (hFile=0x18c) returned 0x1 [0057.860] SetErrorMode (uMode=0x0) returned 0x1 [0057.861] GetFileType (hFile=0x18c) returned 0x1 [0057.861] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x18e95 [0057.861] ReadFile (in: hFile=0x18c, lpBuffer=0x129c26f0, nNumberOfBytesToRead=0x18e95, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x129c26f0*, lpNumberOfBytesRead=0x27e648*=0x18e95, lpOverlapped=0x0) returned 1 [0057.864] CloseHandle (hObject=0x18c) returned 1 [0057.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0057.865] SetErrorMode (uMode=0x1) returned 0x0 [0057.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95)) returned 1 [0057.865] SetErrorMode (uMode=0x0) returned 0x1 [0058.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.004] SetErrorMode (uMode=0x1) returned 0x0 [0058.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.005] GetFileType (hFile=0x18c) returned 0x1 [0058.005] SetErrorMode (uMode=0x0) returned 0x1 [0058.005] GetFileType (hFile=0x18c) returned 0x1 [0058.005] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x18fa0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e6c8*=0x18fa0, lpOverlapped=0x0) returned 1 [0058.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\Y*dIRuqQGDWg*lhh_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\Y*dIRuqQGDWg*lhh_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0058.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.017] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 1 [0058.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0058.021] SetErrorMode (uMode=0x1) returned 0x0 [0058.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0058.021] GetFileType (hFile=0x18c) returned 0x1 [0058.021] SetErrorMode (uMode=0x0) returned 0x1 [0058.021] GetFileType (hFile=0x18c) returned 0x1 [0058.023] WriteFile (in: hFile=0x18c, lpBuffer=0x2706008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2706008*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0058.024] WriteFile (in: hFile=0x18c, lpBuffer=0x2706008*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2706008*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0058.025] CloseHandle (hObject=0x18c) returned 1 [0058.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", lpFilePart=0x0) returned 0x39 [0058.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", lpFilePart=0x0) returned 0x39 [0058.025] SetErrorMode (uMode=0x1) returned 0x0 [0058.025] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.026] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.026] SetErrorMode (uMode=0x0) returned 0x1 [0058.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", lpFilePart=0x0) returned 0x39 [0058.026] SetErrorMode (uMode=0x1) returned 0x0 [0058.027] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.027] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.027] SetErrorMode (uMode=0x0) returned 0x1 [0058.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.028] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0058.028] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0058.028] CoTaskMemFree (pv=0xffa70) [0058.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0058.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0058.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0058.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0058.028] SetErrorMode (uMode=0x1) returned 0x0 [0058.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.029] GetFileType (hFile=0x18c) returned 0x1 [0058.029] SetErrorMode (uMode=0x0) returned 0x1 [0058.029] GetFileType (hFile=0x18c) returned 0x1 [0058.029] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xc288 [0058.029] ReadFile (in: hFile=0x18c, lpBuffer=0x270e780, nNumberOfBytesToRead=0xc288, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x270e780*, lpNumberOfBytesRead=0x27e648*=0xc288, lpOverlapped=0x0) returned 1 [0058.031] CloseHandle (hObject=0x18c) returned 1 [0058.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0058.032] SetErrorMode (uMode=0x1) returned 0x0 [0058.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288)) returned 1 [0058.032] SetErrorMode (uMode=0x0) returned 0x1 [0058.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0058.119] SetErrorMode (uMode=0x1) returned 0x0 [0058.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.121] GetFileType (hFile=0x18c) returned 0x1 [0058.121] SetErrorMode (uMode=0x0) returned 0x1 [0058.121] GetFileType (hFile=0x18c) returned 0x1 [0058.121] WriteFile (in: hFile=0x18c, lpBuffer=0x27a7bd0*, nNumberOfBytesToWrite=0xc390, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27a7bd0*, lpNumberOfBytesWritten=0x27e6c8*=0xc390, lpOverlapped=0x0) returned 1 [0058.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0058.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\ikKc4W4DQHVMHjY5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\ikKc4W4DQHVMHjY5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0058.123] SetErrorMode (uMode=0x1) returned 0x0 [0058.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf3540d10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc390)) returned 1 [0058.124] SetErrorMode (uMode=0x0) returned 0x1 [0058.124] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\ikKc4W4DQHVMHjY5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\ikkc4w4dqhvmhjy5_encrypted_by.whiterose")) returned 1 [0058.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0058.229] SetErrorMode (uMode=0x1) returned 0x0 [0058.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0058.229] GetFileType (hFile=0x18c) returned 0x1 [0058.229] SetErrorMode (uMode=0x0) returned 0x1 [0058.229] GetFileType (hFile=0x18c) returned 0x1 [0058.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", lpFilePart=0x0) returned 0x39 [0058.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", lpFilePart=0x0) returned 0x39 [0058.233] SetErrorMode (uMode=0x1) returned 0x0 [0058.233] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.234] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.234] SetErrorMode (uMode=0x0) returned 0x1 [0058.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", lpFilePart=0x0) returned 0x39 [0058.234] SetErrorMode (uMode=0x1) returned 0x0 [0058.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.234] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.235] SetErrorMode (uMode=0x0) returned 0x1 [0058.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.235] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0058.235] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0058.235] CoTaskMemFree (pv=0xffa70) [0058.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0058.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.236] SetErrorMode (uMode=0x1) returned 0x0 [0058.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.236] GetFileType (hFile=0x18c) returned 0x1 [0058.236] SetErrorMode (uMode=0x0) returned 0x1 [0058.236] GetFileType (hFile=0x18c) returned 0x1 [0058.236] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xba2a [0058.236] ReadFile (in: hFile=0x18c, lpBuffer=0x27cee38, nNumberOfBytesToRead=0xba2a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27cee38*, lpNumberOfBytesRead=0x27e648*=0xba2a, lpOverlapped=0x0) returned 1 [0058.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.238] SetErrorMode (uMode=0x1) returned 0x0 [0058.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a)) returned 1 [0058.239] SetErrorMode (uMode=0x0) returned 0x1 [0058.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.326] SetErrorMode (uMode=0x1) returned 0x0 [0058.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.328] GetFileType (hFile=0x18c) returned 0x1 [0058.328] SetErrorMode (uMode=0x0) returned 0x1 [0058.328] GetFileType (hFile=0x18c) returned 0x1 [0058.328] WriteFile (in: hFile=0x18c, lpBuffer=0x2865808*, nNumberOfBytesToWrite=0xbb30, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2865808*, lpNumberOfBytesWritten=0x27e6c8*=0xbb30, lpOverlapped=0x0) returned 1 [0058.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0058.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\lUDxHk2tXytffV5Q_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\lUDxHk2tXytffV5Q_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0058.330] SetErrorMode (uMode=0x1) returned 0x0 [0058.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf372fef0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xbb30)) returned 1 [0058.330] SetErrorMode (uMode=0x0) returned 0x1 [0058.330] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\lUDxHk2tXytffV5Q_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\ludxhk2txytffv5q_encrypted_by.whiterose")) returned 1 [0058.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0058.432] SetErrorMode (uMode=0x1) returned 0x0 [0058.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0058.433] GetFileType (hFile=0x18c) returned 0x1 [0058.433] SetErrorMode (uMode=0x0) returned 0x1 [0058.433] GetFileType (hFile=0x18c) returned 0x1 [0058.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", lpFilePart=0x0) returned 0x39 [0058.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", lpFilePart=0x0) returned 0x39 [0058.435] SetErrorMode (uMode=0x1) returned 0x0 [0058.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.436] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.436] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.436] SetErrorMode (uMode=0x0) returned 0x1 [0058.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", lpFilePart=0x0) returned 0x39 [0058.437] SetErrorMode (uMode=0x1) returned 0x0 [0058.437] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.437] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.437] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.437] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.437] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.437] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.437] SetErrorMode (uMode=0x0) returned 0x1 [0058.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0058.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0058.438] CoTaskMemFree (pv=0xffa70) [0058.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0058.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.438] SetErrorMode (uMode=0x1) returned 0x0 [0058.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.438] GetFileType (hFile=0x18c) returned 0x1 [0058.439] SetErrorMode (uMode=0x0) returned 0x1 [0058.439] GetFileType (hFile=0x18c) returned 0x1 [0058.439] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xf0a0 [0058.439] ReadFile (in: hFile=0x18c, lpBuffer=0x288c210, nNumberOfBytesToRead=0xf0a0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x288c210*, lpNumberOfBytesRead=0x27e648*=0xf0a0, lpOverlapped=0x0) returned 1 [0058.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.443] SetErrorMode (uMode=0x1) returned 0x0 [0058.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0)) returned 1 [0058.444] SetErrorMode (uMode=0x0) returned 0x1 [0058.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.513] SetErrorMode (uMode=0x1) returned 0x0 [0058.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.515] GetFileType (hFile=0x18c) returned 0x1 [0058.515] SetErrorMode (uMode=0x0) returned 0x1 [0058.515] GetFileType (hFile=0x18c) returned 0x1 [0058.515] WriteFile (in: hFile=0x18c, lpBuffer=0x273d478*, nNumberOfBytesToWrite=0xf1b0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x273d478*, lpNumberOfBytesWritten=0x27e6c8*=0xf1b0, lpOverlapped=0x0) returned 1 [0058.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\otxSlJYj5p3KOx*C_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\otxSlJYj5p3KOx*C_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0058.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0058.526] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 1 [0058.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0058.529] SetErrorMode (uMode=0x1) returned 0x0 [0058.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0058.530] GetFileType (hFile=0x18c) returned 0x1 [0058.530] SetErrorMode (uMode=0x0) returned 0x1 [0058.530] GetFileType (hFile=0x18c) returned 0x1 [0058.532] WriteFile (in: hFile=0x18c, lpBuffer=0x275f1b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x275f1b8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0058.533] WriteFile (in: hFile=0x18c, lpBuffer=0x275f1b8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x275f1b8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0058.533] CloseHandle (hObject=0x18c) returned 1 [0058.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", lpFilePart=0x0) returned 0x39 [0058.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", lpFilePart=0x0) returned 0x39 [0058.534] SetErrorMode (uMode=0x1) returned 0x0 [0058.534] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.535] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.535] SetErrorMode (uMode=0x0) returned 0x1 [0058.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", lpFilePart=0x0) returned 0x39 [0058.536] SetErrorMode (uMode=0x1) returned 0x0 [0058.536] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.536] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.536] SetErrorMode (uMode=0x0) returned 0x1 [0058.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0058.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0058.537] CoTaskMemFree (pv=0xffa70) [0058.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0058.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0058.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0058.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0058.537] SetErrorMode (uMode=0x1) returned 0x0 [0058.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.538] GetFileType (hFile=0x18c) returned 0x1 [0058.538] SetErrorMode (uMode=0x0) returned 0x1 [0058.538] GetFileType (hFile=0x18c) returned 0x1 [0058.538] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xd746 [0058.538] ReadFile (in: hFile=0x18c, lpBuffer=0x2767930, nNumberOfBytesToRead=0xd746, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2767930*, lpNumberOfBytesRead=0x27e648*=0xd746, lpOverlapped=0x0) returned 1 [0058.540] CloseHandle (hObject=0x18c) returned 1 [0058.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0058.541] SetErrorMode (uMode=0x1) returned 0x0 [0058.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746)) returned 1 [0058.541] SetErrorMode (uMode=0x0) returned 0x1 [0058.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0058.652] SetErrorMode (uMode=0x1) returned 0x0 [0058.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.654] GetFileType (hFile=0x18c) returned 0x1 [0058.654] SetErrorMode (uMode=0x0) returned 0x1 [0058.654] GetFileType (hFile=0x18c) returned 0x1 [0058.654] WriteFile (in: hFile=0x18c, lpBuffer=0x27f7dd8*, nNumberOfBytesToWrite=0xd850, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27f7dd8*, lpNumberOfBytesWritten=0x27e6c8*=0xd850, lpOverlapped=0x0) returned 1 [0058.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0058.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\v4eWNS6tH5h9qrXk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\v4eWNS6tH5h9qrXk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0058.656] SetErrorMode (uMode=0x1) returned 0x0 [0058.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf3a4fbd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xd850)) returned 1 [0058.657] SetErrorMode (uMode=0x0) returned 0x1 [0058.657] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\v4eWNS6tH5h9qrXk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\v4ewns6th5h9qrxk_encrypted_by.whiterose")) returned 1 [0058.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0058.759] SetErrorMode (uMode=0x1) returned 0x0 [0058.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0058.760] GetFileType (hFile=0x18c) returned 0x1 [0058.760] SetErrorMode (uMode=0x0) returned 0x1 [0058.760] GetFileType (hFile=0x18c) returned 0x1 [0058.761] WriteFile (in: hFile=0x18c, lpBuffer=0x2817d88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2817d88*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0058.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", lpFilePart=0x0) returned 0x39 [0058.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", lpFilePart=0x0) returned 0x39 [0058.763] SetErrorMode (uMode=0x1) returned 0x0 [0058.763] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.765] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.765] SetErrorMode (uMode=0x0) returned 0x1 [0058.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", lpFilePart=0x0) returned 0x39 [0058.765] SetErrorMode (uMode=0x1) returned 0x0 [0058.765] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.766] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.766] SetErrorMode (uMode=0x0) returned 0x1 [0058.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.766] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0058.766] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0058.766] CoTaskMemFree (pv=0xffa70) [0058.766] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0058.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0058.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0058.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0058.767] SetErrorMode (uMode=0x1) returned 0x0 [0058.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.767] GetFileType (hFile=0x18c) returned 0x1 [0058.767] SetErrorMode (uMode=0x0) returned 0x1 [0058.767] GetFileType (hFile=0x18c) returned 0x1 [0058.767] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xe796 [0058.767] ReadFile (in: hFile=0x18c, lpBuffer=0x2820500, nNumberOfBytesToRead=0xe796, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2820500*, lpNumberOfBytesRead=0x27e648*=0xe796, lpOverlapped=0x0) returned 1 [0058.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0058.770] SetErrorMode (uMode=0x1) returned 0x0 [0058.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796)) returned 1 [0058.770] SetErrorMode (uMode=0x0) returned 0x1 [0058.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0058.835] SetErrorMode (uMode=0x1) returned 0x0 [0058.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.837] GetFileType (hFile=0x18c) returned 0x1 [0058.837] SetErrorMode (uMode=0x0) returned 0x1 [0058.837] GetFileType (hFile=0x18c) returned 0x1 [0058.837] WriteFile (in: hFile=0x18c, lpBuffer=0x28b61f8*, nNumberOfBytesToWrite=0xe8a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28b61f8*, lpNumberOfBytesWritten=0x27e6c8*=0xe8a0, lpOverlapped=0x0) returned 1 [0058.838] CloseHandle (hObject=0x18c) returned 1 [0058.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0058.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\LIOSrmVSElFOiaKt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\LIOSrmVSElFOiaKt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0058.840] SetErrorMode (uMode=0x1) returned 0x0 [0058.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf3c18c50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xe8a0)) returned 1 [0058.840] SetErrorMode (uMode=0x0) returned 0x1 [0058.840] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\LIOSrmVSElFOiaKt_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\liosrmvselfoiakt_encrypted_by.whiterose")) returned 1 [0058.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0058.946] SetErrorMode (uMode=0x1) returned 0x0 [0058.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0058.947] GetFileType (hFile=0x18c) returned 0x1 [0058.947] SetErrorMode (uMode=0x0) returned 0x1 [0058.947] GetFileType (hFile=0x18c) returned 0x1 [0058.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", lpFilePart=0x0) returned 0x39 [0058.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", lpFilePart=0x0) returned 0x39 [0058.948] SetErrorMode (uMode=0x1) returned 0x0 [0058.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.950] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.950] SetErrorMode (uMode=0x0) returned 0x1 [0058.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", lpFilePart=0x0) returned 0x39 [0058.950] SetErrorMode (uMode=0x1) returned 0x0 [0058.950] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0058.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0058.951] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0058.951] SetErrorMode (uMode=0x0) returned 0x1 [0058.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", lpFilePart=0x0) returned 0x42 [0058.951] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0058.951] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0058.951] CoTaskMemFree (pv=0xffa70) [0058.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0058.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0058.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0058.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0058.952] SetErrorMode (uMode=0x1) returned 0x0 [0058.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0058.952] GetFileType (hFile=0x18c) returned 0x1 [0058.952] SetErrorMode (uMode=0x0) returned 0x1 [0058.952] GetFileType (hFile=0x18c) returned 0x1 [0058.952] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3ece3 [0058.954] ReadFile (in: hFile=0x18c, lpBuffer=0x127716f8, nNumberOfBytesToRead=0x3ece3, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x127716f8*, lpNumberOfBytesRead=0x27e648*=0x3ece3, lpOverlapped=0x0) returned 1 [0058.978] CloseHandle (hObject=0x18c) returned 1 [0058.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0058.979] SetErrorMode (uMode=0x1) returned 0x0 [0058.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3)) returned 1 [0058.980] SetErrorMode (uMode=0x0) returned 0x1 [0059.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0059.056] SetErrorMode (uMode=0x1) returned 0x0 [0059.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.058] GetFileType (hFile=0x18c) returned 0x1 [0059.058] SetErrorMode (uMode=0x0) returned 0x1 [0059.059] GetFileType (hFile=0x18c) returned 0x1 [0059.059] WriteFile (in: hFile=0x18c, lpBuffer=0x128eaa38*, nNumberOfBytesToWrite=0x3edf0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x128eaa38*, lpNumberOfBytesWritten=0x27e6c8*=0x3edf0, lpOverlapped=0x0) returned 1 [0059.062] CloseHandle (hObject=0x18c) returned 1 [0059.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0059.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\rzvNSNIGMjrOQsEf_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\rzvNSNIGMjrOQsEf_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0059.065] SetErrorMode (uMode=0x1) returned 0x0 [0059.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf3e2df90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x3edf0)) returned 1 [0059.065] SetErrorMode (uMode=0x0) returned 0x1 [0059.066] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\rzvNSNIGMjrOQsEf_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\rzvnsnigmjroqsef_encrypted_by.whiterose")) returned 1 [0059.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0059.165] SetErrorMode (uMode=0x1) returned 0x0 [0059.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0059.165] GetFileType (hFile=0x18c) returned 0x1 [0059.165] SetErrorMode (uMode=0x0) returned 0x1 [0059.165] GetFileType (hFile=0x18c) returned 0x1 [0059.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", lpFilePart=0x0) returned 0x39 [0059.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", lpFilePart=0x0) returned 0x39 [0059.167] SetErrorMode (uMode=0x1) returned 0x0 [0059.167] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.167] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.167] SetErrorMode (uMode=0x0) returned 0x1 [0059.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", lpFilePart=0x0) returned 0x39 [0059.168] SetErrorMode (uMode=0x1) returned 0x0 [0059.168] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.168] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.168] SetErrorMode (uMode=0x0) returned 0x1 [0059.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0059.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.168] CoTaskMemFree (pv=0xffa70) [0059.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0059.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0059.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0059.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0059.169] SetErrorMode (uMode=0x1) returned 0x0 [0059.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.169] GetFileType (hFile=0x18c) returned 0x1 [0059.169] SetErrorMode (uMode=0x0) returned 0x1 [0059.169] GetFileType (hFile=0x18c) returned 0x1 [0059.169] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x10d39 [0059.169] ReadFile (in: hFile=0x18c, lpBuffer=0x2746a48, nNumberOfBytesToRead=0x10d39, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2746a48*, lpNumberOfBytesRead=0x27e648*=0x10d39, lpOverlapped=0x0) returned 1 [0059.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0059.172] SetErrorMode (uMode=0x1) returned 0x0 [0059.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39)) returned 1 [0059.172] SetErrorMode (uMode=0x0) returned 0x1 [0059.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0059.250] SetErrorMode (uMode=0x1) returned 0x0 [0059.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.251] GetFileType (hFile=0x18c) returned 0x1 [0059.251] SetErrorMode (uMode=0x0) returned 0x1 [0059.251] GetFileType (hFile=0x18c) returned 0x1 [0059.251] WriteFile (in: hFile=0x18c, lpBuffer=0x27f5bb8*, nNumberOfBytesToWrite=0x10e40, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27f5bb8*, lpNumberOfBytesWritten=0x27e6c8*=0x10e40, lpOverlapped=0x0) returned 1 [0059.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0059.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\kxTjiio4KH41ITeo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\kxTjiio4KH41ITeo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0059.253] SetErrorMode (uMode=0x1) returned 0x0 [0059.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf3ff7010, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1 [0059.253] SetErrorMode (uMode=0x0) returned 0x1 [0059.253] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\kxTjiio4KH41ITeo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\kxtjiio4kh41iteo_encrypted_by.whiterose")) returned 1 [0059.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0059.354] SetErrorMode (uMode=0x1) returned 0x0 [0059.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0059.355] GetFileType (hFile=0x18c) returned 0x1 [0059.355] SetErrorMode (uMode=0x0) returned 0x1 [0059.355] GetFileType (hFile=0x18c) returned 0x1 [0059.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", lpFilePart=0x0) returned 0x39 [0059.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", lpFilePart=0x0) returned 0x39 [0059.357] SetErrorMode (uMode=0x1) returned 0x0 [0059.357] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.358] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.358] SetErrorMode (uMode=0x0) returned 0x1 [0059.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", lpFilePart=0x0) returned 0x39 [0059.358] SetErrorMode (uMode=0x1) returned 0x0 [0059.358] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.359] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.359] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.359] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.359] SetErrorMode (uMode=0x0) returned 0x1 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.359] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0059.359] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.359] CoTaskMemFree (pv=0xffa70) [0059.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0059.359] SetErrorMode (uMode=0x1) returned 0x0 [0059.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.360] GetFileType (hFile=0x18c) returned 0x1 [0059.360] SetErrorMode (uMode=0x0) returned 0x1 [0059.360] GetFileType (hFile=0x18c) returned 0x1 [0059.360] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xc2f5 [0059.360] ReadFile (in: hFile=0x18c, lpBuffer=0x28218d0, nNumberOfBytesToRead=0xc2f5, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28218d0*, lpNumberOfBytesRead=0x27e648*=0xc2f5, lpOverlapped=0x0) returned 1 [0059.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0059.362] SetErrorMode (uMode=0x1) returned 0x0 [0059.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5)) returned 1 [0059.362] SetErrorMode (uMode=0x0) returned 0x1 [0059.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0059.424] SetErrorMode (uMode=0x1) returned 0x0 [0059.424] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.426] GetFileType (hFile=0x18c) returned 0x1 [0059.426] SetErrorMode (uMode=0x0) returned 0x1 [0059.426] GetFileType (hFile=0x18c) returned 0x1 [0059.426] WriteFile (in: hFile=0x18c, lpBuffer=0x28a88e8*, nNumberOfBytesToWrite=0xc400, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28a88e8*, lpNumberOfBytesWritten=0x27e6c8*=0xc400, lpOverlapped=0x0) returned 1 [0059.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0059.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\3pBeJIaSTEP1ga0b_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\3pBeJIaSTEP1ga0b_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0059.427] SetErrorMode (uMode=0x1) returned 0x0 [0059.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf4199f30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc400)) returned 1 [0059.428] SetErrorMode (uMode=0x0) returned 0x1 [0059.428] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\3pBeJIaSTEP1ga0b_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\3pbejiastep1ga0b_encrypted_by.whiterose")) returned 1 [0059.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0059.524] SetErrorMode (uMode=0x1) returned 0x0 [0059.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0059.524] GetFileType (hFile=0x18c) returned 0x1 [0059.524] SetErrorMode (uMode=0x0) returned 0x1 [0059.524] GetFileType (hFile=0x18c) returned 0x1 [0059.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", lpFilePart=0x0) returned 0x39 [0059.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", lpFilePart=0x0) returned 0x39 [0059.526] SetErrorMode (uMode=0x1) returned 0x0 [0059.526] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.527] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.527] SetErrorMode (uMode=0x0) returned 0x1 [0059.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", lpFilePart=0x0) returned 0x39 [0059.527] SetErrorMode (uMode=0x1) returned 0x0 [0059.527] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.527] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.527] SetErrorMode (uMode=0x0) returned 0x1 [0059.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.528] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0059.528] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.528] CoTaskMemFree (pv=0xffa70) [0059.528] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0059.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.528] SetErrorMode (uMode=0x1) returned 0x0 [0059.528] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.528] GetFileType (hFile=0x18c) returned 0x1 [0059.528] SetErrorMode (uMode=0x0) returned 0x1 [0059.528] GetFileType (hFile=0x18c) returned 0x1 [0059.528] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xd34f [0059.528] ReadFile (in: hFile=0x18c, lpBuffer=0x28cfbc0, nNumberOfBytesToRead=0xd34f, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28cfbc0*, lpNumberOfBytesRead=0x27e648*=0xd34f, lpOverlapped=0x0) returned 1 [0059.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.531] SetErrorMode (uMode=0x1) returned 0x0 [0059.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f)) returned 1 [0059.531] SetErrorMode (uMode=0x0) returned 0x1 [0059.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.604] SetErrorMode (uMode=0x1) returned 0x0 [0059.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.605] GetFileType (hFile=0x18c) returned 0x1 [0059.605] SetErrorMode (uMode=0x0) returned 0x1 [0059.605] GetFileType (hFile=0x18c) returned 0x1 [0059.605] WriteFile (in: hFile=0x18c, lpBuffer=0x2760738*, nNumberOfBytesToWrite=0xd450, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2760738*, lpNumberOfBytesWritten=0x27e6c8*=0xd450, lpOverlapped=0x0) returned 1 [0059.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\TTPXn3e**6xhvExB_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\TTPXn3e**6xhvExB_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0059.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0059.608] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 1 [0059.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0059.611] SetErrorMode (uMode=0x1) returned 0x0 [0059.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0059.612] GetFileType (hFile=0x18c) returned 0x1 [0059.612] SetErrorMode (uMode=0x0) returned 0x1 [0059.612] GetFileType (hFile=0x18c) returned 0x1 [0059.613] WriteFile (in: hFile=0x18c, lpBuffer=0x2780718*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2780718*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0059.615] WriteFile (in: hFile=0x18c, lpBuffer=0x2780718*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2780718*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0059.615] CloseHandle (hObject=0x18c) returned 1 [0059.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", lpFilePart=0x0) returned 0x39 [0059.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", lpFilePart=0x0) returned 0x39 [0059.615] SetErrorMode (uMode=0x1) returned 0x0 [0059.615] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.616] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.616] SetErrorMode (uMode=0x0) returned 0x1 [0059.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", lpFilePart=0x0) returned 0x39 [0059.617] SetErrorMode (uMode=0x1) returned 0x0 [0059.617] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.617] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.617] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.617] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.617] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.618] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.618] SetErrorMode (uMode=0x0) returned 0x1 [0059.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.618] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0059.618] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.618] CoTaskMemFree (pv=0xffa70) [0059.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0059.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0059.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0059.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0059.619] SetErrorMode (uMode=0x1) returned 0x0 [0059.619] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.619] GetFileType (hFile=0x18c) returned 0x1 [0059.619] SetErrorMode (uMode=0x0) returned 0x1 [0059.619] GetFileType (hFile=0x18c) returned 0x1 [0059.619] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xc8bf [0059.619] ReadFile (in: hFile=0x18c, lpBuffer=0x2788e90, nNumberOfBytesToRead=0xc8bf, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2788e90*, lpNumberOfBytesRead=0x27e648*=0xc8bf, lpOverlapped=0x0) returned 1 [0059.621] CloseHandle (hObject=0x18c) returned 1 [0059.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0059.622] SetErrorMode (uMode=0x1) returned 0x0 [0059.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf)) returned 1 [0059.622] SetErrorMode (uMode=0x0) returned 0x1 [0059.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0059.724] SetErrorMode (uMode=0x1) returned 0x0 [0059.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.725] GetFileType (hFile=0x18c) returned 0x1 [0059.725] SetErrorMode (uMode=0x0) returned 0x1 [0059.725] GetFileType (hFile=0x18c) returned 0x1 [0059.725] WriteFile (in: hFile=0x18c, lpBuffer=0x2815528*, nNumberOfBytesToWrite=0xc9c0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2815528*, lpNumberOfBytesWritten=0x27e6c8*=0xc9c0, lpOverlapped=0x0) returned 1 [0059.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0059.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\1sx2PamjNKNF9yki_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\1sx2PamjNKNF9yki_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0059.728] SetErrorMode (uMode=0x1) returned 0x0 [0059.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf4493ab0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc9c0)) returned 1 [0059.728] SetErrorMode (uMode=0x0) returned 0x1 [0059.728] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\1sx2PamjNKNF9yki_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\1sx2pamjnknf9yki_encrypted_by.whiterose")) returned 1 [0059.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0059.835] SetErrorMode (uMode=0x1) returned 0x0 [0059.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0059.836] GetFileType (hFile=0x18c) returned 0x1 [0059.836] SetErrorMode (uMode=0x0) returned 0x1 [0059.836] GetFileType (hFile=0x18c) returned 0x1 [0059.838] WriteFile (in: hFile=0x18c, lpBuffer=0x2834648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2834648*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0059.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", lpFilePart=0x0) returned 0x39 [0059.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", lpFilePart=0x0) returned 0x39 [0059.840] SetErrorMode (uMode=0x1) returned 0x0 [0059.840] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.841] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.841] SetErrorMode (uMode=0x0) returned 0x1 [0059.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", lpFilePart=0x0) returned 0x39 [0059.841] SetErrorMode (uMode=0x1) returned 0x0 [0059.841] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0059.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0059.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0059.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0059.842] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0059.842] SetErrorMode (uMode=0x0) returned 0x1 [0059.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", lpFilePart=0x0) returned 0x42 [0059.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0059.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.842] CoTaskMemFree (pv=0xffa70) [0059.842] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0059.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0059.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0059.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0059.843] SetErrorMode (uMode=0x1) returned 0x0 [0059.843] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.843] GetFileType (hFile=0x18c) returned 0x1 [0059.843] SetErrorMode (uMode=0x0) returned 0x1 [0059.843] GetFileType (hFile=0x18c) returned 0x1 [0059.843] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xfa69 [0059.844] ReadFile (in: hFile=0x18c, lpBuffer=0x283cdc0, nNumberOfBytesToRead=0xfa69, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x283cdc0*, lpNumberOfBytesRead=0x27e648*=0xfa69, lpOverlapped=0x0) returned 1 [0059.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0059.846] SetErrorMode (uMode=0x1) returned 0x0 [0059.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69)) returned 1 [0059.846] SetErrorMode (uMode=0x0) returned 0x1 [0059.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0059.919] SetErrorMode (uMode=0x1) returned 0x0 [0059.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0059.921] GetFileType (hFile=0x18c) returned 0x1 [0059.921] SetErrorMode (uMode=0x0) returned 0x1 [0059.921] GetFileType (hFile=0x18c) returned 0x1 [0059.921] WriteFile (in: hFile=0x18c, lpBuffer=0x28d9718*, nNumberOfBytesToWrite=0xfb70, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d9718*, lpNumberOfBytesWritten=0x27e6c8*=0xfb70, lpOverlapped=0x0) returned 1 [0059.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0059.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\TqVxeG3GL9oS1YVs_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\TqVxeG3GL9oS1YVs_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0059.923] SetErrorMode (uMode=0x1) returned 0x0 [0059.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf465cb30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xfb70)) returned 1 [0059.923] SetErrorMode (uMode=0x0) returned 0x1 [0059.923] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\TqVxeG3GL9oS1YVs_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\tqvxeg3gl9os1yvs_encrypted_by.whiterose")) returned 1 [0060.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0060.023] SetErrorMode (uMode=0x1) returned 0x0 [0060.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.024] GetFileType (hFile=0x18c) returned 0x1 [0060.024] SetErrorMode (uMode=0x0) returned 0x1 [0060.024] GetFileType (hFile=0x18c) returned 0x1 [0060.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", lpFilePart=0x0) returned 0x39 [0060.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", lpFilePart=0x0) returned 0x39 [0060.025] SetErrorMode (uMode=0x1) returned 0x0 [0060.026] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0060.026] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.026] SetErrorMode (uMode=0x0) returned 0x1 [0060.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", lpFilePart=0x0) returned 0x39 [0060.027] SetErrorMode (uMode=0x1) returned 0x0 [0060.027] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0060.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0060.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0060.027] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.027] SetErrorMode (uMode=0x0) returned 0x1 [0060.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", lpFilePart=0x0) returned 0x42 [0060.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", lpFilePart=0x0) returned 0x42 [0060.028] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.028] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.028] CoTaskMemFree (pv=0xffa70) [0060.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.028] SetErrorMode (uMode=0x1) returned 0x0 [0060.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.029] GetFileType (hFile=0x18c) returned 0x1 [0060.029] SetErrorMode (uMode=0x0) returned 0x1 [0060.029] GetFileType (hFile=0x18c) returned 0x1 [0060.029] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3a6af [0060.031] ReadFile (in: hFile=0x18c, lpBuffer=0x129f4568, nNumberOfBytesToRead=0x3a6af, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x129f4568*, lpNumberOfBytesRead=0x27e648*=0x3a6af, lpOverlapped=0x0) returned 1 [0060.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.050] SetErrorMode (uMode=0x1) returned 0x0 [0060.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af)) returned 1 [0060.051] SetErrorMode (uMode=0x0) returned 0x1 [0060.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.155] SetErrorMode (uMode=0x1) returned 0x0 [0060.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.157] GetFileType (hFile=0x18c) returned 0x1 [0060.157] SetErrorMode (uMode=0x0) returned 0x1 [0060.157] GetFileType (hFile=0x18c) returned 0x1 [0060.157] WriteFile (in: hFile=0x18c, lpBuffer=0x127f6b08*, nNumberOfBytesToWrite=0x3a7b0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x127f6b08*, lpNumberOfBytesWritten=0x27e6c8*=0x3a7b0, lpOverlapped=0x0) returned 1 [0060.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\AiCsF7PuU7*RxfPe_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\AiCsF7PuU7*RxfPe_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x61 [0060.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0060.168] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 1 [0060.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0060.173] SetErrorMode (uMode=0x1) returned 0x0 [0060.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.173] GetFileType (hFile=0x18c) returned 0x1 [0060.174] SetErrorMode (uMode=0x0) returned 0x1 [0060.174] GetFileType (hFile=0x18c) returned 0x1 [0060.175] WriteFile (in: hFile=0x18c, lpBuffer=0x2760748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2760748*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0060.177] WriteFile (in: hFile=0x18c, lpBuffer=0x2760748*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2760748*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0060.177] CloseHandle (hObject=0x18c) returned 1 [0060.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4f [0060.177] SetErrorMode (uMode=0x1) returned 0x0 [0060.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.178] GetFileType (hFile=0x18c) returned 0x1 [0060.178] SetErrorMode (uMode=0x0) returned 0x1 [0060.178] GetFileType (hFile=0x18c) returned 0x1 [0060.180] WriteFile (in: hFile=0x18c, lpBuffer=0x2776838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2776838*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0060.181] WriteFile (in: hFile=0x18c, lpBuffer=0x2776838*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2776838*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0060.181] CloseHandle (hObject=0x18c) returned 1 [0060.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", lpFilePart=0x0) returned 0x36 [0060.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", lpFilePart=0x0) returned 0x36 [0060.181] SetErrorMode (uMode=0x1) returned 0x0 [0060.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0060.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0060.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0060.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0060.186] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.187] SetErrorMode (uMode=0x0) returned 0x1 [0060.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", lpFilePart=0x0) returned 0x36 [0060.187] SetErrorMode (uMode=0x1) returned 0x0 [0060.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0060.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0060.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0060.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0060.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0060.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0060.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0060.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0060.191] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.192] SetErrorMode (uMode=0x0) returned 0x1 [0060.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", lpFilePart=0x0) returned 0x3c [0060.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", lpFilePart=0x0) returned 0x3c [0060.192] SetErrorMode (uMode=0x1) returned 0x0 [0060.192] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0060.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0060.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0060.196] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.197] SetErrorMode (uMode=0x0) returned 0x1 [0060.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", lpFilePart=0x0) returned 0x3c [0060.197] SetErrorMode (uMode=0x1) returned 0x0 [0060.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0060.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0060.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0060.199] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.200] SetErrorMode (uMode=0x0) returned 0x1 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", lpFilePart=0x0) returned 0x4e [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", lpFilePart=0x0) returned 0x4e [0060.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.200] CoTaskMemFree (pv=0xffa70) [0060.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", lpFilePart=0x0) returned 0x49 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", lpFilePart=0x0) returned 0x49 [0060.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.200] CoTaskMemFree (pv=0xffa70) [0060.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", lpFilePart=0x0) returned 0x50 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", lpFilePart=0x0) returned 0x50 [0060.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.200] CoTaskMemFree (pv=0xffa70) [0060.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", lpFilePart=0x0) returned 0x47 [0060.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", lpFilePart=0x0) returned 0x47 [0060.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.201] CoTaskMemFree (pv=0xffa70) [0060.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", lpFilePart=0x0) returned 0x4a [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", lpFilePart=0x0) returned 0x4a [0060.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.201] CoTaskMemFree (pv=0xffa70) [0060.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", lpFilePart=0x0) returned 0x49 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", lpFilePart=0x0) returned 0x49 [0060.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.201] CoTaskMemFree (pv=0xffa70) [0060.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", lpFilePart=0x0) returned 0x47 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", lpFilePart=0x0) returned 0x47 [0060.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.201] CoTaskMemFree (pv=0xffa70) [0060.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", lpFilePart=0x0) returned 0x44 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", lpFilePart=0x0) returned 0x44 [0060.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.201] CoTaskMemFree (pv=0xffa70) [0060.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", lpFilePart=0x0) returned 0x46 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", lpFilePart=0x0) returned 0x46 [0060.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.202] CoTaskMemFree (pv=0xffa70) [0060.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", lpFilePart=0x0) returned 0x48 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", lpFilePart=0x0) returned 0x48 [0060.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.202] CoTaskMemFree (pv=0xffa70) [0060.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", lpFilePart=0x0) returned 0x45 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", lpFilePart=0x0) returned 0x45 [0060.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.202] CoTaskMemFree (pv=0xffa70) [0060.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", lpFilePart=0x0) returned 0x4f [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", lpFilePart=0x0) returned 0x4f [0060.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.202] CoTaskMemFree (pv=0xffa70) [0060.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", lpFilePart=0x0) returned 0x4b [0060.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", lpFilePart=0x0) returned 0x4b [0060.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.203] CoTaskMemFree (pv=0xffa70) [0060.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", lpFilePart=0x0) returned 0x46 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", lpFilePart=0x0) returned 0x46 [0060.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.203] CoTaskMemFree (pv=0xffa70) [0060.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", lpFilePart=0x0) returned 0x48 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", lpFilePart=0x0) returned 0x48 [0060.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.203] CoTaskMemFree (pv=0xffa70) [0060.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", lpFilePart=0x0) returned 0x49 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", lpFilePart=0x0) returned 0x49 [0060.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.203] CoTaskMemFree (pv=0xffa70) [0060.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", lpFilePart=0x0) returned 0x4c [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", lpFilePart=0x0) returned 0x4c [0060.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.203] CoTaskMemFree (pv=0xffa70) [0060.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", lpFilePart=0x0) returned 0x47 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", lpFilePart=0x0) returned 0x47 [0060.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.204] CoTaskMemFree (pv=0xffa70) [0060.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", lpFilePart=0x0) returned 0x4a [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", lpFilePart=0x0) returned 0x4a [0060.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.204] CoTaskMemFree (pv=0xffa70) [0060.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", lpFilePart=0x0) returned 0x47 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", lpFilePart=0x0) returned 0x47 [0060.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.204] CoTaskMemFree (pv=0xffa70) [0060.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", lpFilePart=0x0) returned 0x49 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", lpFilePart=0x0) returned 0x49 [0060.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.204] CoTaskMemFree (pv=0xffa70) [0060.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", lpFilePart=0x0) returned 0x49 [0060.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", lpFilePart=0x0) returned 0x49 [0060.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.204] CoTaskMemFree (pv=0xffa70) [0060.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", lpFilePart=0x0) returned 0x48 [0060.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", lpFilePart=0x0) returned 0x48 [0060.205] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.205] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.205] CoTaskMemFree (pv=0xffa70) [0060.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", lpFilePart=0x0) returned 0x48 [0060.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", lpFilePart=0x0) returned 0x48 [0060.205] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.205] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.205] CoTaskMemFree (pv=0xffa70) [0060.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", lpFilePart=0x0) returned 0x45 [0060.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", lpFilePart=0x0) returned 0x45 [0060.205] SetErrorMode (uMode=0x1) returned 0x0 [0060.205] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.213] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.213] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0060.213] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0060.213] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0060.214] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.214] SetErrorMode (uMode=0x0) returned 0x1 [0060.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", lpFilePart=0x0) returned 0x45 [0060.214] SetErrorMode (uMode=0x1) returned 0x0 [0060.214] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0060.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0060.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0060.214] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.214] SetErrorMode (uMode=0x0) returned 0x1 [0060.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0060.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0060.215] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.215] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.215] CoTaskMemFree (pv=0xffa70) [0060.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0060.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0060.215] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.215] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.215] CoTaskMemFree (pv=0xffa70) [0060.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0060.215] SetErrorMode (uMode=0x1) returned 0x0 [0060.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.217] SetErrorMode (uMode=0x0) returned 0x1 [0060.217] GetFileType (hFile=0x18c) returned 0x1 [0060.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0060.219] SetErrorMode (uMode=0x1) returned 0x0 [0060.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.219] SetErrorMode (uMode=0x0) returned 0x1 [0060.219] GetFileType (hFile=0x18c) returned 0x1 [0060.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", lpFilePart=0x0) returned 0x3c [0060.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", lpFilePart=0x0) returned 0x3c [0060.221] SetErrorMode (uMode=0x1) returned 0x0 [0060.221] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0060.224] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.225] SetErrorMode (uMode=0x0) returned 0x1 [0060.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", lpFilePart=0x0) returned 0x3c [0060.225] SetErrorMode (uMode=0x1) returned 0x0 [0060.225] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0060.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0060.227] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.228] SetErrorMode (uMode=0x0) returned 0x1 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", lpFilePart=0x0) returned 0x4e [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", lpFilePart=0x0) returned 0x4e [0060.228] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.228] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.228] CoTaskMemFree (pv=0xffa70) [0060.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", lpFilePart=0x0) returned 0x49 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", lpFilePart=0x0) returned 0x49 [0060.228] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.228] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.228] CoTaskMemFree (pv=0xffa70) [0060.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", lpFilePart=0x0) returned 0x50 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", lpFilePart=0x0) returned 0x50 [0060.228] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.228] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.228] CoTaskMemFree (pv=0xffa70) [0060.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", lpFilePart=0x0) returned 0x47 [0060.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", lpFilePart=0x0) returned 0x47 [0060.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.229] CoTaskMemFree (pv=0xffa70) [0060.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", lpFilePart=0x0) returned 0x4a [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", lpFilePart=0x0) returned 0x4a [0060.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.229] CoTaskMemFree (pv=0xffa70) [0060.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", lpFilePart=0x0) returned 0x49 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", lpFilePart=0x0) returned 0x49 [0060.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.229] CoTaskMemFree (pv=0xffa70) [0060.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", lpFilePart=0x0) returned 0x47 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", lpFilePart=0x0) returned 0x47 [0060.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.229] CoTaskMemFree (pv=0xffa70) [0060.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", lpFilePart=0x0) returned 0x44 [0060.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", lpFilePart=0x0) returned 0x44 [0060.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.229] CoTaskMemFree (pv=0xffa70) [0060.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", lpFilePart=0x0) returned 0x46 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", lpFilePart=0x0) returned 0x46 [0060.230] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.230] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.230] CoTaskMemFree (pv=0xffa70) [0060.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", lpFilePart=0x0) returned 0x48 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", lpFilePart=0x0) returned 0x48 [0060.230] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.230] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.230] CoTaskMemFree (pv=0xffa70) [0060.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", lpFilePart=0x0) returned 0x45 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", lpFilePart=0x0) returned 0x45 [0060.230] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.230] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.230] CoTaskMemFree (pv=0xffa70) [0060.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", lpFilePart=0x0) returned 0x4f [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", lpFilePart=0x0) returned 0x4f [0060.230] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.230] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.230] CoTaskMemFree (pv=0xffa70) [0060.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", lpFilePart=0x0) returned 0x4b [0060.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", lpFilePart=0x0) returned 0x4b [0060.231] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.231] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.231] CoTaskMemFree (pv=0xffa70) [0060.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", lpFilePart=0x0) returned 0x46 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", lpFilePart=0x0) returned 0x46 [0060.231] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.231] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.231] CoTaskMemFree (pv=0xffa70) [0060.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", lpFilePart=0x0) returned 0x48 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", lpFilePart=0x0) returned 0x48 [0060.231] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.231] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.231] CoTaskMemFree (pv=0xffa70) [0060.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", lpFilePart=0x0) returned 0x49 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", lpFilePart=0x0) returned 0x49 [0060.231] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.231] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.231] CoTaskMemFree (pv=0xffa70) [0060.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", lpFilePart=0x0) returned 0x4c [0060.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", lpFilePart=0x0) returned 0x4c [0060.231] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.231] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.231] CoTaskMemFree (pv=0xffa70) [0060.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", lpFilePart=0x0) returned 0x47 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", lpFilePart=0x0) returned 0x47 [0060.232] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.232] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.232] CoTaskMemFree (pv=0xffa70) [0060.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", lpFilePart=0x0) returned 0x4a [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", lpFilePart=0x0) returned 0x4a [0060.232] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.232] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.232] CoTaskMemFree (pv=0xffa70) [0060.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", lpFilePart=0x0) returned 0x47 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", lpFilePart=0x0) returned 0x47 [0060.232] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.232] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.232] CoTaskMemFree (pv=0xffa70) [0060.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", lpFilePart=0x0) returned 0x49 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", lpFilePart=0x0) returned 0x49 [0060.232] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.232] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.232] CoTaskMemFree (pv=0xffa70) [0060.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", lpFilePart=0x0) returned 0x49 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", lpFilePart=0x0) returned 0x49 [0060.233] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.233] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.233] CoTaskMemFree (pv=0xffa70) [0060.233] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", lpFilePart=0x0) returned 0x48 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", lpFilePart=0x0) returned 0x48 [0060.233] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.233] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.233] CoTaskMemFree (pv=0xffa70) [0060.233] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", lpFilePart=0x0) returned 0x48 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", lpFilePart=0x0) returned 0x48 [0060.233] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.233] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.233] CoTaskMemFree (pv=0xffa70) [0060.233] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", lpFilePart=0x0) returned 0x45 [0060.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", lpFilePart=0x0) returned 0x45 [0060.233] SetErrorMode (uMode=0x1) returned 0x0 [0060.233] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0060.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0060.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0060.235] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.235] SetErrorMode (uMode=0x0) returned 0x1 [0060.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", lpFilePart=0x0) returned 0x45 [0060.235] SetErrorMode (uMode=0x1) returned 0x0 [0060.235] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0060.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0060.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0060.236] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.236] SetErrorMode (uMode=0x0) returned 0x1 [0060.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0060.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0060.236] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.236] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.236] CoTaskMemFree (pv=0xffa70) [0060.236] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0060.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0060.236] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.236] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.236] CoTaskMemFree (pv=0xffa70) [0060.236] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0060.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0060.237] SetErrorMode (uMode=0x1) returned 0x0 [0060.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.240] SetErrorMode (uMode=0x0) returned 0x1 [0060.240] GetFileType (hFile=0x18c) returned 0x1 [0060.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0060.241] SetErrorMode (uMode=0x1) returned 0x0 [0060.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.241] SetErrorMode (uMode=0x0) returned 0x1 [0060.241] GetFileType (hFile=0x18c) returned 0x1 [0060.243] SetErrorMode (uMode=0x1) returned 0x0 [0060.243] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0060.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0060.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0060.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0060.248] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.248] SetErrorMode (uMode=0x0) returned 0x1 [0060.248] SetErrorMode (uMode=0x1) returned 0x0 [0060.249] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0060.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0060.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0060.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0060.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0060.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0060.250] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.251] SetErrorMode (uMode=0x0) returned 0x1 [0060.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.251] CoTaskMemFree (pv=0xffa70) [0060.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.251] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.252] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.253] CoTaskMemFree (pv=0xffa70) [0060.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.254] CoTaskMemFree (pv=0xffa70) [0060.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.254] CoTaskMemFree (pv=0xffa70) [0060.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.254] CoTaskMemFree (pv=0xffa70) [0060.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.254] CoTaskMemFree (pv=0xffa70) [0060.254] SetErrorMode (uMode=0x1) returned 0x0 [0060.254] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0060.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0060.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0060.255] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.255] SetErrorMode (uMode=0x0) returned 0x1 [0060.255] SetErrorMode (uMode=0x1) returned 0x0 [0060.255] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0060.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0060.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0060.256] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.256] SetErrorMode (uMode=0x0) returned 0x1 [0060.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.257] CoTaskMemFree (pv=0xffa70) [0060.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.257] CoTaskMemFree (pv=0xffa70) [0060.257] SetErrorMode (uMode=0x1) returned 0x0 [0060.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.259] SetErrorMode (uMode=0x0) returned 0x1 [0060.259] GetFileType (hFile=0x18c) returned 0x1 [0060.260] SetErrorMode (uMode=0x1) returned 0x0 [0060.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.261] SetErrorMode (uMode=0x0) returned 0x1 [0060.261] GetFileType (hFile=0x18c) returned 0x1 [0060.262] SetErrorMode (uMode=0x1) returned 0x0 [0060.262] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="ACCESS~1.DEU")) returned 1 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="ADOBEC~1.DEU")) returned 1 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="BRDLAN~1.DEU")) returned 1 [0060.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0060.264] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.265] SetErrorMode (uMode=0x0) returned 0x1 [0060.265] SetErrorMode (uMode=0x1) returned 0x0 [0060.265] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.266] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.267] SetErrorMode (uMode=0x0) returned 0x1 [0060.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.267] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.267] CoTaskMemFree (pv=0xffa70) [0060.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.267] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.267] CoTaskMemFree (pv=0xffa70) [0060.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.267] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.267] CoTaskMemFree (pv=0xffa70) [0060.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.267] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.267] CoTaskMemFree (pv=0xffa70) [0060.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.267] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.267] CoTaskMemFree (pv=0xffa70) [0060.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.268] CoTaskMemFree (pv=0xffa70) [0060.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.269] CoTaskMemFree (pv=0xffa70) [0060.270] SetErrorMode (uMode=0x1) returned 0x0 [0060.270] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.271] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.271] SetErrorMode (uMode=0x0) returned 0x1 [0060.271] SetErrorMode (uMode=0x1) returned 0x0 [0060.271] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.272] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.272] SetErrorMode (uMode=0x0) returned 0x1 [0060.272] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.272] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.272] CoTaskMemFree (pv=0xffa70) [0060.272] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.272] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.272] CoTaskMemFree (pv=0xffa70) [0060.272] SetErrorMode (uMode=0x1) returned 0x0 [0060.272] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.274] SetErrorMode (uMode=0x0) returned 0x1 [0060.274] GetFileType (hFile=0x18c) returned 0x1 [0060.275] SetErrorMode (uMode=0x1) returned 0x0 [0060.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.276] SetErrorMode (uMode=0x0) returned 0x1 [0060.276] GetFileType (hFile=0x18c) returned 0x1 [0060.277] SetErrorMode (uMode=0x1) returned 0x0 [0060.277] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.278] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.279] SetErrorMode (uMode=0x0) returned 0x1 [0060.279] SetErrorMode (uMode=0x1) returned 0x0 [0060.279] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.280] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.281] SetErrorMode (uMode=0x0) returned 0x1 [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.281] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.282] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.283] CoTaskMemFree (pv=0xffa70) [0060.283] SetErrorMode (uMode=0x1) returned 0x0 [0060.283] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.284] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.284] SetErrorMode (uMode=0x0) returned 0x1 [0060.285] SetErrorMode (uMode=0x1) returned 0x0 [0060.285] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.285] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.285] SetErrorMode (uMode=0x0) returned 0x1 [0060.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.285] CoTaskMemFree (pv=0xffa70) [0060.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.285] CoTaskMemFree (pv=0xffa70) [0060.285] SetErrorMode (uMode=0x1) returned 0x0 [0060.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.287] SetErrorMode (uMode=0x0) returned 0x1 [0060.287] GetFileType (hFile=0x18c) returned 0x1 [0060.288] SetErrorMode (uMode=0x1) returned 0x0 [0060.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.289] SetErrorMode (uMode=0x0) returned 0x1 [0060.289] GetFileType (hFile=0x18c) returned 0x1 [0060.290] SetErrorMode (uMode=0x1) returned 0x0 [0060.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.292] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.293] SetErrorMode (uMode=0x0) returned 0x1 [0060.293] SetErrorMode (uMode=0x1) returned 0x0 [0060.293] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.294] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.294] SetErrorMode (uMode=0x0) returned 0x1 [0060.294] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.294] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.294] CoTaskMemFree (pv=0xffa70) [0060.294] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.294] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.294] CoTaskMemFree (pv=0xffa70) [0060.294] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.295] CoTaskMemFree (pv=0xffa70) [0060.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.296] CoTaskMemFree (pv=0xffa70) [0060.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.297] CoTaskMemFree (pv=0xffa70) [0060.297] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.297] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.297] CoTaskMemFree (pv=0xffa70) [0060.297] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.297] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.297] CoTaskMemFree (pv=0xffa70) [0060.297] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.297] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.297] CoTaskMemFree (pv=0xffa70) [0060.297] SetErrorMode (uMode=0x1) returned 0x0 [0060.297] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.298] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.298] SetErrorMode (uMode=0x0) returned 0x1 [0060.298] SetErrorMode (uMode=0x1) returned 0x0 [0060.298] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.298] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.298] SetErrorMode (uMode=0x0) returned 0x1 [0060.298] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.298] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.298] CoTaskMemFree (pv=0xffa70) [0060.299] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0060.299] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.299] CoTaskMemFree (pv=0xffa70) [0060.302] SetErrorMode (uMode=0x1) returned 0x0 [0060.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.303] SetErrorMode (uMode=0x0) returned 0x1 [0060.303] GetFileType (hFile=0x18c) returned 0x1 [0060.307] SetErrorMode (uMode=0x1) returned 0x0 [0060.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0060.307] SetErrorMode (uMode=0x0) returned 0x1 [0060.307] GetFileType (hFile=0x18c) returned 0x1 [0060.308] SetErrorMode (uMode=0x1) returned 0x0 [0060.308] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.310] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.311] SetErrorMode (uMode=0x0) returned 0x1 [0060.311] SetErrorMode (uMode=0x1) returned 0x0 [0060.311] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0060.312] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0060.312] SetErrorMode (uMode=0x0) returned 0x1 [0060.312] SetErrorMode (uMode=0x1) returned 0x0 [0060.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.315] SetErrorMode (uMode=0x0) returned 0x1 [0060.315] GetFileType (hFile=0x18c) returned 0x1 [0060.315] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xa600 [0060.317] SetErrorMode (uMode=0x1) returned 0x0 [0060.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0060.317] SetErrorMode (uMode=0x0) returned 0x1 [0060.401] SetErrorMode (uMode=0x1) returned 0x0 [0060.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.402] SetErrorMode (uMode=0x0) returned 0x1 [0060.402] GetFileType (hFile=0x18c) returned 0x1 [0060.402] WriteFile (in: hFile=0x18c, lpBuffer=0x27ba758*, nNumberOfBytesToWrite=0xa710, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27ba758*, lpNumberOfBytesWritten=0x27e6c8*=0xa710, lpOverlapped=0x0) returned 1 [0060.404] SetErrorMode (uMode=0x1) returned 0x0 [0060.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf4af95d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa710)) returned 1 [0060.404] SetErrorMode (uMode=0x0) returned 0x1 [0060.404] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\nK4qxFJtFIbeIsvJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\nk4qxfjtfibeisvj_encrypted_by.whiterose")) returned 1 [0060.506] SetErrorMode (uMode=0x1) returned 0x0 [0060.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.507] SetErrorMode (uMode=0x0) returned 0x1 [0060.507] GetFileType (hFile=0x18c) returned 0x1 [0060.507] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x63a00 [0060.517] SetErrorMode (uMode=0x1) returned 0x0 [0060.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63a00)) returned 1 [0060.518] SetErrorMode (uMode=0x0) returned 0x1 [0060.620] SetErrorMode (uMode=0x1) returned 0x0 [0060.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.624] SetErrorMode (uMode=0x0) returned 0x1 [0060.624] GetFileType (hFile=0x18c) returned 0x1 [0060.624] WriteFile (in: hFile=0x18c, lpBuffer=0x12799a48*, nNumberOfBytesToWrite=0x63b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12799a48*, lpNumberOfBytesWritten=0x27e6c8*=0x63b10, lpOverlapped=0x0) returned 1 [0060.631] SetErrorMode (uMode=0x1) returned 0x0 [0060.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf4d34a70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x63b10)) returned 1 [0060.631] SetErrorMode (uMode=0x0) returned 0x1 [0060.631] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\qjWLb5GjMzKJg5Bv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\qjwlb5gjmzkjg5bv_encrypted_by.whiterose")) returned 1 [0060.740] SetErrorMode (uMode=0x1) returned 0x0 [0060.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.741] SetErrorMode (uMode=0x0) returned 0x1 [0060.741] GetFileType (hFile=0x18c) returned 0x1 [0060.741] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1a00 [0060.743] SetErrorMode (uMode=0x1) returned 0x0 [0060.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0060.743] SetErrorMode (uMode=0x0) returned 0x1 [0060.803] SetErrorMode (uMode=0x1) returned 0x0 [0060.803] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.804] SetErrorMode (uMode=0x0) returned 0x1 [0060.804] GetFileType (hFile=0x18c) returned 0x1 [0060.804] WriteFile (in: hFile=0x18c, lpBuffer=0x275d230*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x275d230*, lpNumberOfBytesWritten=0x27e6c8*=0x1b10, lpOverlapped=0x0) returned 1 [0060.805] SetErrorMode (uMode=0x1) returned 0x0 [0060.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf4ed7990, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1b10)) returned 1 [0060.805] SetErrorMode (uMode=0x0) returned 0x1 [0060.805] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\GYuIQywHJR0p0OoE_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\gyuiqywhjr0p0ooe_encrypted_by.whiterose")) returned 1 [0060.912] SetErrorMode (uMode=0x1) returned 0x0 [0060.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0060.913] SetErrorMode (uMode=0x0) returned 0x1 [0060.913] GetFileType (hFile=0x18c) returned 0x1 [0060.913] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x77800 [0060.926] SetErrorMode (uMode=0x1) returned 0x0 [0060.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x77800)) returned 1 [0060.926] SetErrorMode (uMode=0x0) returned 0x1 [0061.019] SetErrorMode (uMode=0x1) returned 0x0 [0061.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.024] SetErrorMode (uMode=0x0) returned 0x1 [0061.024] GetFileType (hFile=0x18c) returned 0x1 [0061.024] WriteFile (in: hFile=0x18c, lpBuffer=0x127c1648*, nNumberOfBytesToWrite=0x77910, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x127c1648*, lpNumberOfBytesWritten=0x27e6c8*=0x77910, lpOverlapped=0x0) returned 1 [0061.031] SetErrorMode (uMode=0x1) returned 0x0 [0061.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf50eccd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x77910)) returned 1 [0061.031] SetErrorMode (uMode=0x0) returned 0x1 [0061.031] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\203c410uTU8VGL7r_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\203c410utu8vgl7r_encrypted_by.whiterose")) returned 1 [0061.146] SetErrorMode (uMode=0x1) returned 0x0 [0061.146] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.147] SetErrorMode (uMode=0x0) returned 0x1 [0061.147] GetFileType (hFile=0x18c) returned 0x1 [0061.147] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3400 [0061.149] SetErrorMode (uMode=0x1) returned 0x0 [0061.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1 [0061.149] SetErrorMode (uMode=0x0) returned 0x1 [0061.207] SetErrorMode (uMode=0x1) returned 0x0 [0061.207] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.208] SetErrorMode (uMode=0x0) returned 0x1 [0061.208] GetFileType (hFile=0x18c) returned 0x1 [0061.208] WriteFile (in: hFile=0x18c, lpBuffer=0x27686f0*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27686f0*, lpNumberOfBytesWritten=0x27e6c8*=0x3510, lpOverlapped=0x0) returned 1 [0061.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", lpFilePart=0x0) returned 0x4a [0061.218] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo")) returned 1 [0061.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", lpFilePart=0x0) returned 0x49 [0061.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", lpFilePart=0x0) returned 0x49 [0061.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", lpFilePart=0x0) returned 0x49 [0061.221] SetErrorMode (uMode=0x1) returned 0x0 [0061.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.229] GetFileType (hFile=0x18c) returned 0x1 [0061.229] SetErrorMode (uMode=0x0) returned 0x1 [0061.229] GetFileType (hFile=0x18c) returned 0x1 [0061.229] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1de00 [0061.230] ReadFile (in: hFile=0x18c, lpBuffer=0x12838f88, nNumberOfBytesToRead=0x1de00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x12838f88*, lpNumberOfBytesRead=0x27e648*=0x1de00, lpOverlapped=0x0) returned 1 [0061.233] CloseHandle (hObject=0x18c) returned 1 [0061.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", lpFilePart=0x0) returned 0x49 [0061.234] SetErrorMode (uMode=0x1) returned 0x0 [0061.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00)) returned 1 [0061.234] SetErrorMode (uMode=0x0) returned 0x1 [0061.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", lpFilePart=0x0) returned 0x49 [0061.347] SetErrorMode (uMode=0x1) returned 0x0 [0061.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.349] GetFileType (hFile=0x18c) returned 0x1 [0061.349] SetErrorMode (uMode=0x0) returned 0x1 [0061.349] GetFileType (hFile=0x18c) returned 0x1 [0061.349] WriteFile (in: hFile=0x18c, lpBuffer=0x128ec978*, nNumberOfBytesToWrite=0x1df10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x128ec978*, lpNumberOfBytesWritten=0x27e6c8*=0x1df10, lpOverlapped=0x0) returned 1 [0061.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", lpFilePart=0x0) returned 0x49 [0061.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ahCB9xduCqVNRhZV_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ahCB9xduCqVNRhZV_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0061.352] SetErrorMode (uMode=0x1) returned 0x0 [0061.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf540c9b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1df10)) returned 1 [0061.352] SetErrorMode (uMode=0x0) returned 0x1 [0061.352] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ahCB9xduCqVNRhZV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ahcb9xducqvnrhzv_encrypted_by.whiterose")) returned 1 [0061.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", lpFilePart=0x0) returned 0x47 [0061.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", lpFilePart=0x0) returned 0x47 [0061.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", lpFilePart=0x0) returned 0x47 [0061.461] SetErrorMode (uMode=0x1) returned 0x0 [0061.461] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.485] GetFileType (hFile=0x18c) returned 0x1 [0061.485] SetErrorMode (uMode=0x0) returned 0x1 [0061.485] GetFileType (hFile=0x18c) returned 0x1 [0061.485] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1fa00 [0061.486] ReadFile (in: hFile=0x18c, lpBuffer=0x1290a8b8, nNumberOfBytesToRead=0x1fa00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x1290a8b8*, lpNumberOfBytesRead=0x27e648*=0x1fa00, lpOverlapped=0x0) returned 1 [0061.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", lpFilePart=0x0) returned 0x47 [0061.490] SetErrorMode (uMode=0x1) returned 0x0 [0061.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00)) returned 1 [0061.490] SetErrorMode (uMode=0x0) returned 0x1 [0061.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", lpFilePart=0x0) returned 0x47 [0061.572] SetErrorMode (uMode=0x1) returned 0x0 [0061.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.573] GetFileType (hFile=0x18c) returned 0x1 [0061.573] SetErrorMode (uMode=0x0) returned 0x1 [0061.573] GetFileType (hFile=0x18c) returned 0x1 [0061.573] WriteFile (in: hFile=0x18c, lpBuffer=0x12a4c5d8*, nNumberOfBytesToWrite=0x1fb10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x12a4c5d8*, lpNumberOfBytesWritten=0x27e6c8*=0x1fb10, lpOverlapped=0x0) returned 1 [0061.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", lpFilePart=0x0) returned 0x47 [0061.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\flFKy0Mpqfmb3Pgq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\flFKy0Mpqfmb3Pgq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0061.577] SetErrorMode (uMode=0x1) returned 0x0 [0061.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf5621cf0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1fb10)) returned 1 [0061.577] SetErrorMode (uMode=0x0) returned 0x1 [0061.577] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\flFKy0Mpqfmb3Pgq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\flfky0mpqfmb3pgq_encrypted_by.whiterose")) returned 1 [0061.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.688] SetErrorMode (uMode=0x1) returned 0x0 [0061.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.688] GetFileType (hFile=0x18c) returned 0x1 [0061.688] SetErrorMode (uMode=0x0) returned 0x1 [0061.688] GetFileType (hFile=0x18c) returned 0x1 [0061.688] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x4600 [0061.688] ReadFile (in: hFile=0x18c, lpBuffer=0x282dc20, nNumberOfBytesToRead=0x4600, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x282dc20*, lpNumberOfBytesRead=0x27e648*=0x4600, lpOverlapped=0x0) returned 1 [0061.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.691] SetErrorMode (uMode=0x1) returned 0x0 [0061.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600)) returned 1 [0061.691] SetErrorMode (uMode=0x0) returned 0x1 [0061.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.774] SetErrorMode (uMode=0x1) returned 0x0 [0061.774] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.775] GetFileType (hFile=0x18c) returned 0x1 [0061.775] SetErrorMode (uMode=0x0) returned 0x1 [0061.775] GetFileType (hFile=0x18c) returned 0x1 [0061.776] WriteFile (in: hFile=0x18c, lpBuffer=0x289c0e0*, nNumberOfBytesToWrite=0x4710, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x289c0e0*, lpNumberOfBytesWritten=0x27e6c8*=0x4710, lpOverlapped=0x0) returned 1 [0061.777] CloseHandle (hObject=0x18c) returned 1 [0061.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\FCKuqwUhw1I*ALzb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\FCKuqwUhw1I*ALzb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0061.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", lpFilePart=0x0) returned 0x44 [0061.788] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo")) returned 1 [0061.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", lpFilePart=0x0) returned 0x46 [0061.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", lpFilePart=0x0) returned 0x46 [0061.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", lpFilePart=0x0) returned 0x46 [0061.790] SetErrorMode (uMode=0x1) returned 0x0 [0061.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.791] GetFileType (hFile=0x18c) returned 0x1 [0061.791] SetErrorMode (uMode=0x0) returned 0x1 [0061.791] GetFileType (hFile=0x18c) returned 0x1 [0061.791] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1a00 [0061.791] ReadFile (in: hFile=0x18c, lpBuffer=0x28a2540, nNumberOfBytesToRead=0x1a00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a2540*, lpNumberOfBytesRead=0x27e648*=0x1a00, lpOverlapped=0x0) returned 1 [0061.794] CloseHandle (hObject=0x18c) returned 1 [0061.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", lpFilePart=0x0) returned 0x46 [0061.794] SetErrorMode (uMode=0x1) returned 0x0 [0061.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0061.794] SetErrorMode (uMode=0x0) returned 0x1 [0061.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", lpFilePart=0x0) returned 0x46 [0061.913] SetErrorMode (uMode=0x1) returned 0x0 [0061.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0061.914] GetFileType (hFile=0x18c) returned 0x1 [0061.914] SetErrorMode (uMode=0x0) returned 0x1 [0061.914] GetFileType (hFile=0x18c) returned 0x1 [0061.914] WriteFile (in: hFile=0x18c, lpBuffer=0x2712478*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2712478*, lpNumberOfBytesWritten=0x27e6c8*=0x1b10, lpOverlapped=0x0) returned 1 [0061.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", lpFilePart=0x0) returned 0x46 [0061.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\CAWLDMKY2b2fwtSg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\CAWLDMKY2b2fwtSg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0061.915] SetErrorMode (uMode=0x1) returned 0x0 [0061.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf5967b30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1b10)) returned 1 [0061.915] SetErrorMode (uMode=0x0) returned 0x1 [0061.916] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\CAWLDMKY2b2fwtSg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\cawldmky2b2fwtsg_encrypted_by.whiterose")) returned 1 [0062.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", lpFilePart=0x0) returned 0x48 [0062.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", lpFilePart=0x0) returned 0x48 [0062.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", lpFilePart=0x0) returned 0x48 [0062.037] SetErrorMode (uMode=0x1) returned 0x0 [0062.037] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.037] GetFileType (hFile=0x18c) returned 0x1 [0062.037] SetErrorMode (uMode=0x0) returned 0x1 [0062.037] GetFileType (hFile=0x18c) returned 0x1 [0062.037] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xa200 [0062.037] ReadFile (in: hFile=0x18c, lpBuffer=0x27158c8, nNumberOfBytesToRead=0xa200, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27158c8*, lpNumberOfBytesRead=0x27e648*=0xa200, lpOverlapped=0x0) returned 1 [0062.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", lpFilePart=0x0) returned 0x48 [0062.040] SetErrorMode (uMode=0x1) returned 0x0 [0062.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200)) returned 1 [0062.040] SetErrorMode (uMode=0x0) returned 0x1 [0062.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", lpFilePart=0x0) returned 0x48 [0062.100] SetErrorMode (uMode=0x1) returned 0x0 [0062.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.101] GetFileType (hFile=0x18c) returned 0x1 [0062.101] SetErrorMode (uMode=0x0) returned 0x1 [0062.101] GetFileType (hFile=0x18c) returned 0x1 [0062.101] WriteFile (in: hFile=0x18c, lpBuffer=0x27bb5f0*, nNumberOfBytesToWrite=0xa310, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27bb5f0*, lpNumberOfBytesWritten=0x27e6c8*=0xa310, lpOverlapped=0x0) returned 1 [0062.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", lpFilePart=0x0) returned 0x48 [0062.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\dXG8vfLnWncrnxRo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\dXG8vfLnWncrnxRo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0062.104] SetErrorMode (uMode=0x1) returned 0x0 [0062.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf5b30bb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa310)) returned 1 [0062.104] SetErrorMode (uMode=0x0) returned 0x1 [0062.105] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\dXG8vfLnWncrnxRo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dxg8vflnwncrnxro_encrypted_by.whiterose")) returned 1 [0062.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", lpFilePart=0x0) returned 0x45 [0062.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", lpFilePart=0x0) returned 0x45 [0062.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", lpFilePart=0x0) returned 0x45 [0062.207] SetErrorMode (uMode=0x1) returned 0x0 [0062.207] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.207] GetFileType (hFile=0x18c) returned 0x1 [0062.207] SetErrorMode (uMode=0x0) returned 0x1 [0062.207] GetFileType (hFile=0x18c) returned 0x1 [0062.208] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xe00 [0062.208] ReadFile (in: hFile=0x18c, lpBuffer=0x27c8058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27c8058*, lpNumberOfBytesRead=0x27e648*=0xe00, lpOverlapped=0x0) returned 1 [0062.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", lpFilePart=0x0) returned 0x45 [0062.209] SetErrorMode (uMode=0x1) returned 0x0 [0062.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0062.209] SetErrorMode (uMode=0x0) returned 0x1 [0062.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", lpFilePart=0x0) returned 0x45 [0062.275] SetErrorMode (uMode=0x1) returned 0x0 [0062.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.276] GetFileType (hFile=0x18c) returned 0x1 [0062.276] SetErrorMode (uMode=0x0) returned 0x1 [0062.276] GetFileType (hFile=0x18c) returned 0x1 [0062.276] WriteFile (in: hFile=0x18c, lpBuffer=0x283f5f0*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x283f5f0*, lpNumberOfBytesWritten=0x27e5e8*=0xf10, lpOverlapped=0x0) returned 1 [0062.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", lpFilePart=0x0) returned 0x45 [0062.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\y9dCIHna7rbWWuyb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\y9dCIHna7rbWWuyb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0062.277] SetErrorMode (uMode=0x1) returned 0x0 [0062.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf5cd3ad0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0062.277] SetErrorMode (uMode=0x0) returned 0x1 [0062.277] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\y9dCIHna7rbWWuyb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\y9dcihna7rbwwuyb_encrypted_by.whiterose")) returned 1 [0062.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", lpFilePart=0x0) returned 0x4f [0062.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", lpFilePart=0x0) returned 0x4f [0062.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", lpFilePart=0x0) returned 0x4f [0062.378] SetErrorMode (uMode=0x1) returned 0x0 [0062.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.379] GetFileType (hFile=0x18c) returned 0x1 [0062.379] SetErrorMode (uMode=0x0) returned 0x1 [0062.379] GetFileType (hFile=0x18c) returned 0x1 [0062.379] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x12800 [0062.379] ReadFile (in: hFile=0x18c, lpBuffer=0x2841c28, nNumberOfBytesToRead=0x12800, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2841c28*, lpNumberOfBytesRead=0x27e648*=0x12800, lpOverlapped=0x0) returned 1 [0062.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", lpFilePart=0x0) returned 0x4f [0062.384] SetErrorMode (uMode=0x1) returned 0x0 [0062.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0062.384] SetErrorMode (uMode=0x0) returned 0x1 [0062.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", lpFilePart=0x0) returned 0x4f [0062.451] SetErrorMode (uMode=0x1) returned 0x0 [0062.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.453] GetFileType (hFile=0x18c) returned 0x1 [0062.453] SetErrorMode (uMode=0x0) returned 0x1 [0062.453] GetFileType (hFile=0x18c) returned 0x1 [0062.453] WriteFile (in: hFile=0x18c, lpBuffer=0x28fb700*, nNumberOfBytesToWrite=0x12910, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28fb700*, lpNumberOfBytesWritten=0x27e6c8*=0x12910, lpOverlapped=0x0) returned 1 [0062.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", lpFilePart=0x0) returned 0x4f [0062.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pArkm1rsnSUdaZXB_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pArkm1rsnSUdaZXB_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0062.455] SetErrorMode (uMode=0x1) returned 0x0 [0062.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf5e769f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x12910)) returned 1 [0062.455] SetErrorMode (uMode=0x0) returned 0x1 [0062.455] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pArkm1rsnSUdaZXB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\parkm1rsnsudazxb_encrypted_by.whiterose")) returned 1 [0062.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.574] SetErrorMode (uMode=0x1) returned 0x0 [0062.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.574] GetFileType (hFile=0x18c) returned 0x1 [0062.574] SetErrorMode (uMode=0x0) returned 0x1 [0062.575] GetFileType (hFile=0x18c) returned 0x1 [0062.575] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x12c00 [0062.575] ReadFile (in: hFile=0x18c, lpBuffer=0x290f9a8, nNumberOfBytesToRead=0x12c00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x290f9a8*, lpNumberOfBytesRead=0x27e648*=0x12c00, lpOverlapped=0x0) returned 1 [0062.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.577] SetErrorMode (uMode=0x1) returned 0x0 [0062.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00)) returned 1 [0062.577] SetErrorMode (uMode=0x0) returned 0x1 [0062.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.637] SetErrorMode (uMode=0x1) returned 0x0 [0062.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.638] GetFileType (hFile=0x18c) returned 0x1 [0062.638] SetErrorMode (uMode=0x0) returned 0x1 [0062.639] GetFileType (hFile=0x18c) returned 0x1 [0062.639] WriteFile (in: hFile=0x18c, lpBuffer=0x27b5be0*, nNumberOfBytesToWrite=0x12d10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27b5be0*, lpNumberOfBytesWritten=0x27e6c8*=0x12d10, lpOverlapped=0x0) returned 1 [0062.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\8s*eNqehvPFdJgQo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\8s*eNqehvPFdJgQo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0062.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", lpFilePart=0x0) returned 0x4b [0062.648] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo")) returned 1 [0062.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.651] SetErrorMode (uMode=0x1) returned 0x0 [0062.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.651] GetFileType (hFile=0x18c) returned 0x1 [0062.651] SetErrorMode (uMode=0x0) returned 0x1 [0062.651] GetFileType (hFile=0x18c) returned 0x1 [0062.651] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2c00 [0062.651] ReadFile (in: hFile=0x18c, lpBuffer=0x27ca670, nNumberOfBytesToRead=0x2c00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27ca670*, lpNumberOfBytesRead=0x27e648*=0x2c00, lpOverlapped=0x0) returned 1 [0062.653] CloseHandle (hObject=0x18c) returned 1 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.653] SetErrorMode (uMode=0x1) returned 0x0 [0062.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1 [0062.654] SetErrorMode (uMode=0x0) returned 0x1 [0062.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.754] SetErrorMode (uMode=0x1) returned 0x0 [0062.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.755] GetFileType (hFile=0x18c) returned 0x1 [0062.755] SetErrorMode (uMode=0x0) returned 0x1 [0062.755] GetFileType (hFile=0x18c) returned 0x1 [0062.755] WriteFile (in: hFile=0x18c, lpBuffer=0x2826030*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2826030*, lpNumberOfBytesWritten=0x27e6c8*=0x2d10, lpOverlapped=0x0) returned 1 [0062.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RlFT2Aap*A98lRr8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RlFT2Aap*A98lRr8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0062.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", lpFilePart=0x0) returned 0x46 [0062.767] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo")) returned 1 [0062.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.770] SetErrorMode (uMode=0x1) returned 0x0 [0062.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.770] GetFileType (hFile=0x18c) returned 0x1 [0062.770] SetErrorMode (uMode=0x0) returned 0x1 [0062.770] GetFileType (hFile=0x18c) returned 0x1 [0062.770] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7d800 [0062.772] ReadFile (in: hFile=0x18c, lpBuffer=0x1271d078, nNumberOfBytesToRead=0x7d800, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x1271d078*, lpNumberOfBytesRead=0x27e648*=0x7d800, lpOverlapped=0x0) returned 1 [0062.779] CloseHandle (hObject=0x18c) returned 1 [0062.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.787] SetErrorMode (uMode=0x1) returned 0x0 [0062.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d800)) returned 1 [0062.787] SetErrorMode (uMode=0x0) returned 0x1 [0062.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.924] SetErrorMode (uMode=0x1) returned 0x0 [0062.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.928] GetFileType (hFile=0x18c) returned 0x1 [0062.928] SetErrorMode (uMode=0x0) returned 0x1 [0062.928] GetFileType (hFile=0x18c) returned 0x1 [0062.928] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x7d910, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e6c8*=0x7d910, lpOverlapped=0x0) returned 1 [0062.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*34zrPb9CGdHhTWa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*34zrPb9CGdHhTWa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0062.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", lpFilePart=0x0) returned 0x48 [0062.942] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo")) returned 1 [0062.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", lpFilePart=0x0) returned 0x49 [0062.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", lpFilePart=0x0) returned 0x49 [0062.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", lpFilePart=0x0) returned 0x49 [0062.951] SetErrorMode (uMode=0x1) returned 0x0 [0062.951] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0062.952] GetFileType (hFile=0x18c) returned 0x1 [0062.952] SetErrorMode (uMode=0x0) returned 0x1 [0062.952] GetFileType (hFile=0x18c) returned 0x1 [0062.952] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x144c00 [0062.955] ReadFile (in: hFile=0x18c, lpBuffer=0x12a0e650, nNumberOfBytesToRead=0x144c00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x12a0e650*, lpNumberOfBytesRead=0x27e648*=0x144c00, lpOverlapped=0x0) returned 1 [0062.995] CloseHandle (hObject=0x18c) returned 1 [0063.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", lpFilePart=0x0) returned 0x49 [0063.009] SetErrorMode (uMode=0x1) returned 0x0 [0063.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00)) returned 1 [0063.009] SetErrorMode (uMode=0x0) returned 0x1 [0063.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", lpFilePart=0x0) returned 0x49 [0063.175] SetErrorMode (uMode=0x1) returned 0x0 [0063.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.178] GetFileType (hFile=0x18c) returned 0x1 [0063.178] SetErrorMode (uMode=0x0) returned 0x1 [0063.178] GetFileType (hFile=0x18c) returned 0x1 [0063.178] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x144d10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e6c8*=0x144d10, lpOverlapped=0x0) returned 1 [0063.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", lpFilePart=0x0) returned 0x49 [0063.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ucz5EgOUMJccQQDY_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ucz5EgOUMJccQQDY_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0063.198] SetErrorMode (uMode=0x1) returned 0x0 [0063.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf659abf0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x144d10)) returned 1 [0063.198] SetErrorMode (uMode=0x0) returned 0x1 [0063.198] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ucz5EgOUMJccQQDY_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ucz5egoumjccqqdy_encrypted_by.whiterose")) returned 1 [0063.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", lpFilePart=0x0) returned 0x4c [0063.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", lpFilePart=0x0) returned 0x4c [0063.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", lpFilePart=0x0) returned 0x4c [0063.299] SetErrorMode (uMode=0x1) returned 0x0 [0063.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.304] GetFileType (hFile=0x18c) returned 0x1 [0063.304] SetErrorMode (uMode=0x0) returned 0x1 [0063.305] GetFileType (hFile=0x18c) returned 0x1 [0063.305] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2a00 [0063.305] ReadFile (in: hFile=0x18c, lpBuffer=0x26f5e48, nNumberOfBytesToRead=0x2a00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x26f5e48*, lpNumberOfBytesRead=0x27e648*=0x2a00, lpOverlapped=0x0) returned 1 [0063.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", lpFilePart=0x0) returned 0x4c [0063.307] SetErrorMode (uMode=0x1) returned 0x0 [0063.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0063.307] SetErrorMode (uMode=0x0) returned 0x1 [0063.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", lpFilePart=0x0) returned 0x4c [0063.367] SetErrorMode (uMode=0x1) returned 0x0 [0063.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.368] GetFileType (hFile=0x18c) returned 0x1 [0063.368] SetErrorMode (uMode=0x0) returned 0x1 [0063.368] GetFileType (hFile=0x18c) returned 0x1 [0063.368] WriteFile (in: hFile=0x18c, lpBuffer=0x2763ca8*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2763ca8*, lpNumberOfBytesWritten=0x27e6c8*=0x2b10, lpOverlapped=0x0) returned 1 [0063.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", lpFilePart=0x0) returned 0x4c [0063.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\4xvHJZE2b8HtDCVa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\4xvHJZE2b8HtDCVa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0063.369] SetErrorMode (uMode=0x1) returned 0x0 [0063.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf673db10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2b10)) returned 1 [0063.370] SetErrorMode (uMode=0x0) returned 0x1 [0063.370] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\4xvHJZE2b8HtDCVa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\4xvhjze2b8htdcva_encrypted_by.whiterose")) returned 1 [0063.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", lpFilePart=0x0) returned 0x47 [0063.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", lpFilePart=0x0) returned 0x47 [0063.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", lpFilePart=0x0) returned 0x47 [0063.471] SetErrorMode (uMode=0x1) returned 0x0 [0063.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.472] GetFileType (hFile=0x18c) returned 0x1 [0063.472] SetErrorMode (uMode=0x0) returned 0x1 [0063.472] GetFileType (hFile=0x18c) returned 0x1 [0063.472] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1200 [0063.472] ReadFile (in: hFile=0x18c, lpBuffer=0x2768118, nNumberOfBytesToRead=0x1200, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2768118*, lpNumberOfBytesRead=0x27e648*=0x1200, lpOverlapped=0x0) returned 1 [0063.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", lpFilePart=0x0) returned 0x47 [0063.474] SetErrorMode (uMode=0x1) returned 0x0 [0063.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1 [0063.474] SetErrorMode (uMode=0x0) returned 0x1 [0063.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", lpFilePart=0x0) returned 0x47 [0063.532] SetErrorMode (uMode=0x1) returned 0x0 [0063.532] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.533] GetFileType (hFile=0x18c) returned 0x1 [0063.533] SetErrorMode (uMode=0x0) returned 0x1 [0063.533] GetFileType (hFile=0x18c) returned 0x1 [0063.533] WriteFile (in: hFile=0x18c, lpBuffer=0x27d0e30*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d0e30*, lpNumberOfBytesWritten=0x27e6c8*=0x1310, lpOverlapped=0x0) returned 1 [0063.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", lpFilePart=0x0) returned 0x47 [0063.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\U1JpoiIitxpLS7jA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\U1JpoiIitxpLS7jA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0063.535] SetErrorMode (uMode=0x1) returned 0x0 [0063.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf68e0a30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1310)) returned 1 [0063.535] SetErrorMode (uMode=0x0) returned 0x1 [0063.535] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\U1JpoiIitxpLS7jA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\u1jpoiiitxpls7ja_encrypted_by.whiterose")) returned 1 [0063.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", lpFilePart=0x0) returned 0x4a [0063.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", lpFilePart=0x0) returned 0x4a [0063.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", lpFilePart=0x0) returned 0x4a [0063.642] SetErrorMode (uMode=0x1) returned 0x0 [0063.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.643] GetFileType (hFile=0x18c) returned 0x1 [0063.643] SetErrorMode (uMode=0x0) returned 0x1 [0063.643] GetFileType (hFile=0x18c) returned 0x1 [0063.643] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x4800 [0063.643] ReadFile (in: hFile=0x18c, lpBuffer=0x27d3a98, nNumberOfBytesToRead=0x4800, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27d3a98*, lpNumberOfBytesRead=0x27e648*=0x4800, lpOverlapped=0x0) returned 1 [0063.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", lpFilePart=0x0) returned 0x4a [0063.645] SetErrorMode (uMode=0x1) returned 0x0 [0063.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0063.645] SetErrorMode (uMode=0x0) returned 0x1 [0063.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", lpFilePart=0x0) returned 0x4a [0063.704] SetErrorMode (uMode=0x1) returned 0x0 [0063.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.705] GetFileType (hFile=0x18c) returned 0x1 [0063.705] SetErrorMode (uMode=0x0) returned 0x1 [0063.705] GetFileType (hFile=0x18c) returned 0x1 [0063.705] WriteFile (in: hFile=0x18c, lpBuffer=0x2851200*, nNumberOfBytesToWrite=0x4910, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2851200*, lpNumberOfBytesWritten=0x27e6c8*=0x4910, lpOverlapped=0x0) returned 1 [0063.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", lpFilePart=0x0) returned 0x4a [0063.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eagUBKk7DBogq52n_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eagUBKk7DBogq52n_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0063.707] SetErrorMode (uMode=0x1) returned 0x0 [0063.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf6a83950, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x4910)) returned 1 [0063.707] SetErrorMode (uMode=0x0) returned 0x1 [0063.707] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eagUBKk7DBogq52n_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\eagubkk7dbogq52n_encrypted_by.whiterose")) returned 1 [0063.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", lpFilePart=0x0) returned 0x47 [0063.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", lpFilePart=0x0) returned 0x47 [0063.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", lpFilePart=0x0) returned 0x47 [0063.814] SetErrorMode (uMode=0x1) returned 0x0 [0063.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.815] GetFileType (hFile=0x18c) returned 0x1 [0063.815] SetErrorMode (uMode=0x0) returned 0x1 [0063.815] GetFileType (hFile=0x18c) returned 0x1 [0063.815] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5a00 [0063.815] ReadFile (in: hFile=0x18c, lpBuffer=0x2857458, nNumberOfBytesToRead=0x5a00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2857458*, lpNumberOfBytesRead=0x27e648*=0x5a00, lpOverlapped=0x0) returned 1 [0063.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", lpFilePart=0x0) returned 0x47 [0063.817] SetErrorMode (uMode=0x1) returned 0x0 [0063.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00)) returned 1 [0063.817] SetErrorMode (uMode=0x0) returned 0x1 [0063.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", lpFilePart=0x0) returned 0x47 [0063.880] SetErrorMode (uMode=0x1) returned 0x0 [0063.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0063.881] GetFileType (hFile=0x18c) returned 0x1 [0063.881] SetErrorMode (uMode=0x0) returned 0x1 [0063.881] GetFileType (hFile=0x18c) returned 0x1 [0063.881] WriteFile (in: hFile=0x18c, lpBuffer=0x28e3530*, nNumberOfBytesToWrite=0x5b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28e3530*, lpNumberOfBytesWritten=0x27e6c8*=0x5b10, lpOverlapped=0x0) returned 1 [0063.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", lpFilePart=0x0) returned 0x47 [0063.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\7EuCf4pnU28yFypN_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\7EuCf4pnU28yFypN_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0063.882] SetErrorMode (uMode=0x1) returned 0x0 [0063.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf6c26870, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x5b10)) returned 1 [0063.883] SetErrorMode (uMode=0x0) returned 0x1 [0063.883] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\7EuCf4pnU28yFypN_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\7eucf4pnu28yfypn_encrypted_by.whiterose")) returned 1 [0064.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", lpFilePart=0x0) returned 0x49 [0064.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", lpFilePart=0x0) returned 0x49 [0064.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", lpFilePart=0x0) returned 0x49 [0064.004] SetErrorMode (uMode=0x1) returned 0x0 [0064.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.004] GetFileType (hFile=0x18c) returned 0x1 [0064.004] SetErrorMode (uMode=0x0) returned 0x1 [0064.004] GetFileType (hFile=0x18c) returned 0x1 [0064.004] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3c00 [0064.004] ReadFile (in: hFile=0x18c, lpBuffer=0x28ea998, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28ea998*, lpNumberOfBytesRead=0x27e648*=0x3c00, lpOverlapped=0x0) returned 1 [0064.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", lpFilePart=0x0) returned 0x49 [0064.008] SetErrorMode (uMode=0x1) returned 0x0 [0064.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0064.008] SetErrorMode (uMode=0x0) returned 0x1 [0064.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", lpFilePart=0x0) returned 0x49 [0064.078] SetErrorMode (uMode=0x1) returned 0x0 [0064.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.079] GetFileType (hFile=0x18c) returned 0x1 [0064.079] SetErrorMode (uMode=0x0) returned 0x1 [0064.079] GetFileType (hFile=0x18c) returned 0x1 [0064.079] WriteFile (in: hFile=0x18c, lpBuffer=0x276bad8*, nNumberOfBytesToWrite=0x3d10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x276bad8*, lpNumberOfBytesWritten=0x27e6c8*=0x3d10, lpOverlapped=0x0) returned 1 [0064.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", lpFilePart=0x0) returned 0x49 [0064.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\NwcxGsbb4ZSxdQiA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\NwcxGsbb4ZSxdQiA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0064.080] SetErrorMode (uMode=0x1) returned 0x0 [0064.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf6e15a50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x3d10)) returned 1 [0064.081] SetErrorMode (uMode=0x0) returned 0x1 [0064.081] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\NwcxGsbb4ZSxdQiA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\nwcxgsbb4zsxdqia_encrypted_by.whiterose")) returned 1 [0064.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.204] SetErrorMode (uMode=0x1) returned 0x0 [0064.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.206] GetFileType (hFile=0x18c) returned 0x1 [0064.208] SetErrorMode (uMode=0x0) returned 0x1 [0064.209] GetFileType (hFile=0x18c) returned 0x1 [0064.209] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2a00 [0064.250] ReadFile (in: hFile=0x18c, lpBuffer=0x2771160, nNumberOfBytesToRead=0x2a00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2771160*, lpNumberOfBytesRead=0x27e648*=0x2a00, lpOverlapped=0x0) returned 1 [0064.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.252] SetErrorMode (uMode=0x1) returned 0x0 [0064.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1 [0064.252] SetErrorMode (uMode=0x0) returned 0x1 [0064.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.317] SetErrorMode (uMode=0x1) returned 0x0 [0064.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.318] GetFileType (hFile=0x18c) returned 0x1 [0064.318] SetErrorMode (uMode=0x0) returned 0x1 [0064.318] GetFileType (hFile=0x18c) returned 0x1 [0064.318] WriteFile (in: hFile=0x18c, lpBuffer=0x27dab98*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27dab98*, lpNumberOfBytesWritten=0x27e6c8*=0x2b10, lpOverlapped=0x0) returned 1 [0064.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Q67RkS03*Qq3Mrom_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Q67RkS03*Qq3Mrom_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0064.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", lpFilePart=0x0) returned 0x49 [0064.322] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo")) returned 1 [0064.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.325] SetErrorMode (uMode=0x1) returned 0x0 [0064.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.326] GetFileType (hFile=0x18c) returned 0x1 [0064.326] SetErrorMode (uMode=0x0) returned 0x1 [0064.326] GetFileType (hFile=0x18c) returned 0x1 [0064.326] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2800 [0064.327] ReadFile (in: hFile=0x18c, lpBuffer=0x27df440, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27df440*, lpNumberOfBytesRead=0x27e648*=0x2800, lpOverlapped=0x0) returned 1 [0064.328] CloseHandle (hObject=0x18c) returned 1 [0064.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.329] SetErrorMode (uMode=0x1) returned 0x0 [0064.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1 [0064.329] SetErrorMode (uMode=0x0) returned 0x1 [0064.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.432] SetErrorMode (uMode=0x1) returned 0x0 [0064.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.433] GetFileType (hFile=0x18c) returned 0x1 [0064.433] SetErrorMode (uMode=0x0) returned 0x1 [0064.433] GetFileType (hFile=0x18c) returned 0x1 [0064.433] WriteFile (in: hFile=0x18c, lpBuffer=0x2849428*, nNumberOfBytesToWrite=0x2910, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2849428*, lpNumberOfBytesWritten=0x27e6c8*=0x2910, lpOverlapped=0x0) returned 1 [0064.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\N5h9x9ZJD3J9I*Hq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\N5h9x9ZJD3J9I*Hq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0064.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", lpFilePart=0x0) returned 0x48 [0064.437] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo")) returned 1 [0064.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", lpFilePart=0x0) returned 0x48 [0064.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", lpFilePart=0x0) returned 0x48 [0064.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", lpFilePart=0x0) returned 0x48 [0064.439] SetErrorMode (uMode=0x1) returned 0x0 [0064.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.439] GetFileType (hFile=0x18c) returned 0x1 [0064.439] SetErrorMode (uMode=0x0) returned 0x1 [0064.440] GetFileType (hFile=0x18c) returned 0x1 [0064.440] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6a00 [0064.440] ReadFile (in: hFile=0x18c, lpBuffer=0x284dac8, nNumberOfBytesToRead=0x6a00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x284dac8*, lpNumberOfBytesRead=0x27e648*=0x6a00, lpOverlapped=0x0) returned 1 [0064.442] CloseHandle (hObject=0x18c) returned 1 [0064.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", lpFilePart=0x0) returned 0x48 [0064.443] SetErrorMode (uMode=0x1) returned 0x0 [0064.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00)) returned 1 [0064.443] SetErrorMode (uMode=0x0) returned 0x1 [0064.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", lpFilePart=0x0) returned 0x48 [0064.531] SetErrorMode (uMode=0x1) returned 0x0 [0064.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0064.532] GetFileType (hFile=0x18c) returned 0x1 [0064.532] SetErrorMode (uMode=0x0) returned 0x1 [0064.532] GetFileType (hFile=0x18c) returned 0x1 [0064.532] WriteFile (in: hFile=0x18c, lpBuffer=0x28d4908*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d4908*, lpNumberOfBytesWritten=0x27e6c8*=0x6b10, lpOverlapped=0x0) returned 1 [0064.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", lpFilePart=0x0) returned 0x48 [0064.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\7KEOZm1q89PIDbbu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\7KEOZm1q89PIDbbu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0064.533] SetErrorMode (uMode=0x1) returned 0x0 [0064.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf7266230, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x6b10)) returned 1 [0064.534] SetErrorMode (uMode=0x0) returned 0x1 [0064.534] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\7KEOZm1q89PIDbbu_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\7keozm1q89pidbbu_encrypted_by.whiterose")) returned 1 [0064.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", lpFilePart=0x0) returned 0x45 [0064.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", lpFilePart=0x0) returned 0x45 [0064.641] SetErrorMode (uMode=0x1) returned 0x0 [0064.641] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.643] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.643] SetErrorMode (uMode=0x0) returned 0x1 [0064.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", lpFilePart=0x0) returned 0x45 [0064.643] SetErrorMode (uMode=0x1) returned 0x0 [0064.643] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.643] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.643] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.643] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.643] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.643] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.644] SetErrorMode (uMode=0x0) returned 0x1 [0064.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0064.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0064.644] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.644] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.644] CoTaskMemFree (pv=0xffa70) [0064.644] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0064.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0064.645] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.645] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.645] CoTaskMemFree (pv=0xffa70) [0064.645] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0064.646] SetErrorMode (uMode=0x1) returned 0x0 [0064.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.647] GetFileType (hFile=0x18c) returned 0x1 [0064.647] SetErrorMode (uMode=0x0) returned 0x1 [0064.647] GetFileType (hFile=0x18c) returned 0x1 [0064.649] WriteFile (in: hFile=0x18c, lpBuffer=0x28f1de8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x28f1de8*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0064.650] WriteFile (in: hFile=0x18c, lpBuffer=0x28f1de8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28f1de8*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0064.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0064.651] SetErrorMode (uMode=0x1) returned 0x0 [0064.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.651] GetFileType (hFile=0x18c) returned 0x1 [0064.651] SetErrorMode (uMode=0x0) returned 0x1 [0064.651] GetFileType (hFile=0x18c) returned 0x1 [0064.653] WriteFile (in: hFile=0x18c, lpBuffer=0x2907ef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2907ef8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0064.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", lpFilePart=0x0) returned 0x3c [0064.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", lpFilePart=0x0) returned 0x3c [0064.654] SetErrorMode (uMode=0x1) returned 0x0 [0064.654] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="ACCESS~1.FRA")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="ADOBEC~1.FRA")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="BRDLAN~1.FRA")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="MAKEAC~1.FRA")) returned 1 [0064.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="MULTIM~1.FRA")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="READOU~1.FRA")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="SAVEAS~1.FRA")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0064.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0064.658] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.659] SetErrorMode (uMode=0x0) returned 0x1 [0064.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", lpFilePart=0x0) returned 0x3c [0064.659] SetErrorMode (uMode=0x1) returned 0x0 [0064.659] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="ACCESS~1.FRA")) returned 1 [0064.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0064.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="ADOBEC~1.FRA")) returned 1 [0064.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0064.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="BRDLAN~1.FRA")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="MAKEAC~1.FRA")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="MULTIM~1.FRA")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="READOU~1.FRA")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="SAVEAS~1.FRA")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0064.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0064.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0064.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0064.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0064.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0064.662] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.663] SetErrorMode (uMode=0x0) returned 0x1 [0064.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", lpFilePart=0x0) returned 0x4e [0064.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", lpFilePart=0x0) returned 0x4e [0064.663] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.663] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.663] CoTaskMemFree (pv=0xffa70) [0064.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", lpFilePart=0x0) returned 0x49 [0064.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", lpFilePart=0x0) returned 0x49 [0064.664] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.664] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.664] CoTaskMemFree (pv=0xffa70) [0064.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", lpFilePart=0x0) returned 0x50 [0064.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", lpFilePart=0x0) returned 0x50 [0064.664] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.664] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.664] CoTaskMemFree (pv=0xffa70) [0064.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", lpFilePart=0x0) returned 0x47 [0064.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", lpFilePart=0x0) returned 0x47 [0064.665] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.665] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.665] CoTaskMemFree (pv=0xffa70) [0064.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", lpFilePart=0x0) returned 0x4a [0064.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", lpFilePart=0x0) returned 0x4a [0064.665] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.665] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.665] CoTaskMemFree (pv=0xffa70) [0064.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", lpFilePart=0x0) returned 0x49 [0064.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", lpFilePart=0x0) returned 0x49 [0064.666] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.666] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.666] CoTaskMemFree (pv=0xffa70) [0064.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", lpFilePart=0x0) returned 0x47 [0064.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", lpFilePart=0x0) returned 0x47 [0064.666] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.666] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.666] CoTaskMemFree (pv=0xffa70) [0064.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", lpFilePart=0x0) returned 0x44 [0064.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", lpFilePart=0x0) returned 0x44 [0064.667] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.667] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.667] CoTaskMemFree (pv=0xffa70) [0064.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", lpFilePart=0x0) returned 0x46 [0064.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", lpFilePart=0x0) returned 0x46 [0064.667] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.667] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.667] CoTaskMemFree (pv=0xffa70) [0064.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", lpFilePart=0x0) returned 0x48 [0064.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", lpFilePart=0x0) returned 0x48 [0064.668] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.668] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.668] CoTaskMemFree (pv=0xffa70) [0064.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", lpFilePart=0x0) returned 0x45 [0064.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", lpFilePart=0x0) returned 0x45 [0064.668] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.668] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.668] CoTaskMemFree (pv=0xffa70) [0064.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", lpFilePart=0x0) returned 0x4f [0064.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", lpFilePart=0x0) returned 0x4f [0064.668] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.669] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.669] CoTaskMemFree (pv=0xffa70) [0064.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", lpFilePart=0x0) returned 0x4b [0064.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", lpFilePart=0x0) returned 0x4b [0064.669] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.669] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.669] CoTaskMemFree (pv=0xffa70) [0064.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", lpFilePart=0x0) returned 0x46 [0064.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", lpFilePart=0x0) returned 0x46 [0064.669] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.670] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.670] CoTaskMemFree (pv=0xffa70) [0064.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", lpFilePart=0x0) returned 0x48 [0064.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", lpFilePart=0x0) returned 0x48 [0064.670] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.670] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.670] CoTaskMemFree (pv=0xffa70) [0064.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", lpFilePart=0x0) returned 0x49 [0064.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", lpFilePart=0x0) returned 0x49 [0064.670] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.670] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.671] CoTaskMemFree (pv=0xffa70) [0064.671] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", lpFilePart=0x0) returned 0x4c [0064.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", lpFilePart=0x0) returned 0x4c [0064.671] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.671] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.671] CoTaskMemFree (pv=0xffa70) [0064.671] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", lpFilePart=0x0) returned 0x47 [0064.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", lpFilePart=0x0) returned 0x47 [0064.672] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.672] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.672] CoTaskMemFree (pv=0xffa70) [0064.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", lpFilePart=0x0) returned 0x4a [0064.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", lpFilePart=0x0) returned 0x4a [0064.672] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.672] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.672] CoTaskMemFree (pv=0xffa70) [0064.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", lpFilePart=0x0) returned 0x47 [0064.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", lpFilePart=0x0) returned 0x47 [0064.672] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.672] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.673] CoTaskMemFree (pv=0xffa70) [0064.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", lpFilePart=0x0) returned 0x49 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", lpFilePart=0x0) returned 0x49 [0064.673] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.673] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.673] CoTaskMemFree (pv=0xffa70) [0064.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", lpFilePart=0x0) returned 0x49 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", lpFilePart=0x0) returned 0x49 [0064.673] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.673] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.673] CoTaskMemFree (pv=0xffa70) [0064.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", lpFilePart=0x0) returned 0x48 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", lpFilePart=0x0) returned 0x48 [0064.673] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.673] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.673] CoTaskMemFree (pv=0xffa70) [0064.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", lpFilePart=0x0) returned 0x48 [0064.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", lpFilePart=0x0) returned 0x48 [0064.674] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.674] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.674] CoTaskMemFree (pv=0xffa70) [0064.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", lpFilePart=0x0) returned 0x45 [0064.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", lpFilePart=0x0) returned 0x45 [0064.674] SetErrorMode (uMode=0x1) returned 0x0 [0064.674] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.675] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.675] SetErrorMode (uMode=0x0) returned 0x1 [0064.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", lpFilePart=0x0) returned 0x45 [0064.675] SetErrorMode (uMode=0x1) returned 0x0 [0064.676] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.676] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.676] SetErrorMode (uMode=0x0) returned 0x1 [0064.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0064.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0064.676] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.676] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.676] CoTaskMemFree (pv=0xffa70) [0064.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0064.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0064.677] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.677] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.677] CoTaskMemFree (pv=0xffa70) [0064.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0064.680] SetErrorMode (uMode=0x1) returned 0x0 [0064.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.682] GetFileType (hFile=0x18c) returned 0x1 [0064.682] SetErrorMode (uMode=0x0) returned 0x1 [0064.682] GetFileType (hFile=0x18c) returned 0x1 [0064.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0064.683] SetErrorMode (uMode=0x1) returned 0x0 [0064.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.683] GetFileType (hFile=0x18c) returned 0x1 [0064.683] SetErrorMode (uMode=0x0) returned 0x1 [0064.684] GetFileType (hFile=0x18c) returned 0x1 [0064.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", lpFilePart=0x0) returned 0x3c [0064.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", lpFilePart=0x0) returned 0x3c [0064.685] SetErrorMode (uMode=0x1) returned 0x0 [0064.685] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="ACCESS~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="ADOBEC~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="BRDLAN~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="MAKEAC~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="MULTIM~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="READOU~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="SAVEAS~1.HRV")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0064.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0064.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0064.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0064.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0064.688] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.688] SetErrorMode (uMode=0x0) returned 0x1 [0064.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", lpFilePart=0x0) returned 0x3c [0064.689] SetErrorMode (uMode=0x1) returned 0x0 [0064.689] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="ACCESS~1.HRV")) returned 1 [0064.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0064.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="ADOBEC~1.HRV")) returned 1 [0064.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="BRDLAN~1.HRV")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="MAKEAC~1.HRV")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="MULTIM~1.HRV")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="READOU~1.HRV")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="SAVEAS~1.HRV")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0064.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0064.691] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.691] SetErrorMode (uMode=0x0) returned 0x1 [0064.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", lpFilePart=0x0) returned 0x4e [0064.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", lpFilePart=0x0) returned 0x4e [0064.691] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.691] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.691] CoTaskMemFree (pv=0xffa70) [0064.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", lpFilePart=0x0) returned 0x49 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", lpFilePart=0x0) returned 0x49 [0064.692] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.692] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.692] CoTaskMemFree (pv=0xffa70) [0064.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", lpFilePart=0x0) returned 0x50 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", lpFilePart=0x0) returned 0x50 [0064.692] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.692] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.692] CoTaskMemFree (pv=0xffa70) [0064.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", lpFilePart=0x0) returned 0x47 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", lpFilePart=0x0) returned 0x47 [0064.692] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.692] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.692] CoTaskMemFree (pv=0xffa70) [0064.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", lpFilePart=0x0) returned 0x4a [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", lpFilePart=0x0) returned 0x4a [0064.692] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.692] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.692] CoTaskMemFree (pv=0xffa70) [0064.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", lpFilePart=0x0) returned 0x49 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", lpFilePart=0x0) returned 0x49 [0064.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.693] CoTaskMemFree (pv=0xffa70) [0064.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", lpFilePart=0x0) returned 0x47 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", lpFilePart=0x0) returned 0x47 [0064.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.693] CoTaskMemFree (pv=0xffa70) [0064.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", lpFilePart=0x0) returned 0x44 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", lpFilePart=0x0) returned 0x44 [0064.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.693] CoTaskMemFree (pv=0xffa70) [0064.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", lpFilePart=0x0) returned 0x46 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", lpFilePart=0x0) returned 0x46 [0064.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.693] CoTaskMemFree (pv=0xffa70) [0064.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", lpFilePart=0x0) returned 0x48 [0064.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", lpFilePart=0x0) returned 0x48 [0064.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.694] CoTaskMemFree (pv=0xffa70) [0064.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", lpFilePart=0x0) returned 0x45 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", lpFilePart=0x0) returned 0x45 [0064.694] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.694] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.694] CoTaskMemFree (pv=0xffa70) [0064.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", lpFilePart=0x0) returned 0x4f [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", lpFilePart=0x0) returned 0x4f [0064.694] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.694] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.694] CoTaskMemFree (pv=0xffa70) [0064.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", lpFilePart=0x0) returned 0x4b [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", lpFilePart=0x0) returned 0x4b [0064.694] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.694] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.694] CoTaskMemFree (pv=0xffa70) [0064.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", lpFilePart=0x0) returned 0x46 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", lpFilePart=0x0) returned 0x46 [0064.694] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.694] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.694] CoTaskMemFree (pv=0xffa70) [0064.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", lpFilePart=0x0) returned 0x48 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", lpFilePart=0x0) returned 0x48 [0064.695] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.695] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.695] CoTaskMemFree (pv=0xffa70) [0064.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", lpFilePart=0x0) returned 0x49 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", lpFilePart=0x0) returned 0x49 [0064.695] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.695] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.695] CoTaskMemFree (pv=0xffa70) [0064.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", lpFilePart=0x0) returned 0x4c [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", lpFilePart=0x0) returned 0x4c [0064.695] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.695] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.695] CoTaskMemFree (pv=0xffa70) [0064.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", lpFilePart=0x0) returned 0x47 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", lpFilePart=0x0) returned 0x47 [0064.695] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.695] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.695] CoTaskMemFree (pv=0xffa70) [0064.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", lpFilePart=0x0) returned 0x4a [0064.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", lpFilePart=0x0) returned 0x4a [0064.696] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.696] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.696] CoTaskMemFree (pv=0xffa70) [0064.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", lpFilePart=0x0) returned 0x47 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", lpFilePart=0x0) returned 0x47 [0064.696] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.696] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.696] CoTaskMemFree (pv=0xffa70) [0064.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", lpFilePart=0x0) returned 0x49 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", lpFilePart=0x0) returned 0x49 [0064.696] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.696] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.696] CoTaskMemFree (pv=0xffa70) [0064.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", lpFilePart=0x0) returned 0x49 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", lpFilePart=0x0) returned 0x49 [0064.696] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.696] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.696] CoTaskMemFree (pv=0xffa70) [0064.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", lpFilePart=0x0) returned 0x48 [0064.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", lpFilePart=0x0) returned 0x48 [0064.696] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.696] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.696] CoTaskMemFree (pv=0xffa70) [0064.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", lpFilePart=0x0) returned 0x48 [0064.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", lpFilePart=0x0) returned 0x48 [0064.697] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.697] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.697] CoTaskMemFree (pv=0xffa70) [0064.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", lpFilePart=0x0) returned 0x45 [0064.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", lpFilePart=0x0) returned 0x45 [0064.697] SetErrorMode (uMode=0x1) returned 0x0 [0064.697] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.699] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.699] SetErrorMode (uMode=0x0) returned 0x1 [0064.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", lpFilePart=0x0) returned 0x45 [0064.699] SetErrorMode (uMode=0x1) returned 0x0 [0064.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.699] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.699] SetErrorMode (uMode=0x0) returned 0x1 [0064.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0064.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", lpFilePart=0x0) returned 0x53 [0064.699] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.699] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.700] CoTaskMemFree (pv=0xffa70) [0064.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0064.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", lpFilePart=0x0) returned 0x53 [0064.700] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.700] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.700] CoTaskMemFree (pv=0xffa70) [0064.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0064.700] SetErrorMode (uMode=0x1) returned 0x0 [0064.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.702] SetErrorMode (uMode=0x0) returned 0x1 [0064.702] GetFileType (hFile=0x18c) returned 0x1 [0064.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0064.703] SetErrorMode (uMode=0x1) returned 0x0 [0064.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.703] SetErrorMode (uMode=0x0) returned 0x1 [0064.703] GetFileType (hFile=0x18c) returned 0x1 [0064.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", lpFilePart=0x0) returned 0x3c [0064.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", lpFilePart=0x0) returned 0x3c [0064.705] SetErrorMode (uMode=0x1) returned 0x0 [0064.705] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="ACCESS~1.HUN")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="ADOBEC~1.HUN")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="BRDLAN~1.HUN")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="MAKEAC~1.HUN")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="MULTIM~1.HUN")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0064.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="READOU~1.HUN")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="SAVEAS~1.HUN")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0064.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0064.708] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.709] SetErrorMode (uMode=0x0) returned 0x1 [0064.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", lpFilePart=0x0) returned 0x3c [0064.709] SetErrorMode (uMode=0x1) returned 0x0 [0064.709] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="ACCESS~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="ADOBEC~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="BRDLAN~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="MAKEAC~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="MULTIM~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="READOU~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="SAVEAS~1.HUN")) returned 1 [0064.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0064.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0064.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0064.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0064.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0064.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0064.711] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.711] SetErrorMode (uMode=0x0) returned 0x1 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", lpFilePart=0x0) returned 0x4e [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", lpFilePart=0x0) returned 0x4e [0064.712] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.712] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.712] CoTaskMemFree (pv=0xffa70) [0064.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", lpFilePart=0x0) returned 0x49 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", lpFilePart=0x0) returned 0x49 [0064.712] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.712] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.712] CoTaskMemFree (pv=0xffa70) [0064.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", lpFilePart=0x0) returned 0x50 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", lpFilePart=0x0) returned 0x50 [0064.712] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.712] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.712] CoTaskMemFree (pv=0xffa70) [0064.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", lpFilePart=0x0) returned 0x47 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", lpFilePart=0x0) returned 0x47 [0064.712] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.712] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.712] CoTaskMemFree (pv=0xffa70) [0064.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", lpFilePart=0x0) returned 0x4a [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", lpFilePart=0x0) returned 0x4a [0064.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.713] CoTaskMemFree (pv=0xffa70) [0064.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", lpFilePart=0x0) returned 0x49 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", lpFilePart=0x0) returned 0x49 [0064.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.713] CoTaskMemFree (pv=0xffa70) [0064.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", lpFilePart=0x0) returned 0x47 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", lpFilePart=0x0) returned 0x47 [0064.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.713] CoTaskMemFree (pv=0xffa70) [0064.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", lpFilePart=0x0) returned 0x44 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", lpFilePart=0x0) returned 0x44 [0064.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.713] CoTaskMemFree (pv=0xffa70) [0064.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", lpFilePart=0x0) returned 0x46 [0064.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", lpFilePart=0x0) returned 0x46 [0064.713] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.713] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.714] CoTaskMemFree (pv=0xffa70) [0064.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", lpFilePart=0x0) returned 0x48 [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", lpFilePart=0x0) returned 0x48 [0064.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.714] CoTaskMemFree (pv=0xffa70) [0064.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", lpFilePart=0x0) returned 0x45 [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", lpFilePart=0x0) returned 0x45 [0064.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.714] CoTaskMemFree (pv=0xffa70) [0064.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", lpFilePart=0x0) returned 0x4f [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", lpFilePart=0x0) returned 0x4f [0064.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.714] CoTaskMemFree (pv=0xffa70) [0064.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", lpFilePart=0x0) returned 0x4b [0064.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", lpFilePart=0x0) returned 0x4b [0064.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.714] CoTaskMemFree (pv=0xffa70) [0064.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", lpFilePart=0x0) returned 0x46 [0064.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", lpFilePart=0x0) returned 0x46 [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0064.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", lpFilePart=0x0) returned 0x48 [0064.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", lpFilePart=0x0) returned 0x48 [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.715] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.715] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.715] CoTaskMemFree (pv=0xffa70) [0064.716] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.716] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.716] CoTaskMemFree (pv=0xffa70) [0064.716] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.716] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.716] CoTaskMemFree (pv=0xffa70) [0064.716] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.716] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.716] CoTaskMemFree (pv=0xffa70) [0064.716] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.716] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.716] CoTaskMemFree (pv=0xffa70) [0064.716] SetErrorMode (uMode=0x1) returned 0x0 [0064.716] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.717] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.717] SetErrorMode (uMode=0x0) returned 0x1 [0064.717] SetErrorMode (uMode=0x1) returned 0x0 [0064.717] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0064.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0064.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0064.718] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.718] SetErrorMode (uMode=0x0) returned 0x1 [0064.718] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.718] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.718] CoTaskMemFree (pv=0xffa70) [0064.718] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.718] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.718] CoTaskMemFree (pv=0xffa70) [0064.718] SetErrorMode (uMode=0x1) returned 0x0 [0064.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.720] SetErrorMode (uMode=0x0) returned 0x1 [0064.720] GetFileType (hFile=0x18c) returned 0x1 [0064.721] SetErrorMode (uMode=0x1) returned 0x0 [0064.721] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0064.722] SetErrorMode (uMode=0x0) returned 0x1 [0064.722] GetFileType (hFile=0x18c) returned 0x1 [0064.723] SetErrorMode (uMode=0x1) returned 0x0 [0064.723] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="ACCESS~1.ITA")) returned 1 [0064.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0064.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="ADOBEC~1.ITA")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="BRDLAN~1.ITA")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="MAKEAC~1.ITA")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="MULTIM~1.ITA")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="READOU~1.ITA")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="SAVEAS~1.ITA")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0064.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0064.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0064.727] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.727] SetErrorMode (uMode=0x0) returned 0x1 [0064.727] SetErrorMode (uMode=0x1) returned 0x0 [0064.727] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="ACCESS~1.ITA")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="ADOBEC~1.ITA")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="BRDLAN~1.ITA")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0064.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="MAKEAC~1.ITA")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="MULTIM~1.ITA")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="READOU~1.ITA")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="SAVEAS~1.ITA")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0064.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0064.729] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.730] SetErrorMode (uMode=0x0) returned 0x1 [0064.730] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.730] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.730] CoTaskMemFree (pv=0xffa70) [0064.730] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.730] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.730] CoTaskMemFree (pv=0xffa70) [0064.730] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.730] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.730] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.731] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.732] CoTaskMemFree (pv=0xffa70) [0064.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.733] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.733] CoTaskMemFree (pv=0xffa70) [0064.733] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.733] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.733] CoTaskMemFree (pv=0xffa70) [0064.733] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.733] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.733] CoTaskMemFree (pv=0xffa70) [0064.733] SetErrorMode (uMode=0x1) returned 0x0 [0064.733] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.735] SetErrorMode (uMode=0x0) returned 0x1 [0064.735] SetErrorMode (uMode=0x1) returned 0x0 [0064.735] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.735] SetErrorMode (uMode=0x0) returned 0x1 [0064.735] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.735] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.735] CoTaskMemFree (pv=0xffa70) [0064.735] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.735] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.736] CoTaskMemFree (pv=0xffa70) [0064.736] SetErrorMode (uMode=0x1) returned 0x0 [0064.741] SetErrorMode (uMode=0x0) returned 0x1 [0064.741] GetFileType (hFile=0x18c) returned 0x1 [0064.742] SetErrorMode (uMode=0x1) returned 0x0 [0064.742] SetErrorMode (uMode=0x0) returned 0x1 [0064.742] GetFileType (hFile=0x18c) returned 0x1 [0064.743] SetErrorMode (uMode=0x1) returned 0x0 [0064.743] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.745] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.746] SetErrorMode (uMode=0x0) returned 0x1 [0064.746] SetErrorMode (uMode=0x1) returned 0x0 [0064.746] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.747] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.748] SetErrorMode (uMode=0x0) returned 0x1 [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.748] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.748] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.748] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.749] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.749] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.749] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.750] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.750] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.750] CoTaskMemFree (pv=0xffa70) [0064.751] SetErrorMode (uMode=0x1) returned 0x0 [0064.751] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.751] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.752] SetErrorMode (uMode=0x0) returned 0x1 [0064.752] SetErrorMode (uMode=0x1) returned 0x0 [0064.752] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.752] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.752] SetErrorMode (uMode=0x0) returned 0x1 [0064.752] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.752] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.752] CoTaskMemFree (pv=0xffa70) [0064.752] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.752] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.752] CoTaskMemFree (pv=0xffa70) [0064.752] SetErrorMode (uMode=0x1) returned 0x0 [0064.754] SetErrorMode (uMode=0x0) returned 0x1 [0064.754] GetFileType (hFile=0x18c) returned 0x1 [0064.755] SetErrorMode (uMode=0x1) returned 0x0 [0064.755] SetErrorMode (uMode=0x0) returned 0x1 [0064.755] GetFileType (hFile=0x18c) returned 0x1 [0064.756] SetErrorMode (uMode=0x1) returned 0x0 [0064.756] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.758] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.759] SetErrorMode (uMode=0x0) returned 0x1 [0064.759] SetErrorMode (uMode=0x1) returned 0x0 [0064.759] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.760] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.760] SetErrorMode (uMode=0x0) returned 0x1 [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.761] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.761] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.761] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.762] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.762] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.762] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.763] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.763] CoTaskMemFree (pv=0xffa70) [0064.763] SetErrorMode (uMode=0x1) returned 0x0 [0064.763] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.765] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.765] SetErrorMode (uMode=0x0) returned 0x1 [0064.765] SetErrorMode (uMode=0x1) returned 0x0 [0064.765] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.765] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.765] SetErrorMode (uMode=0x0) returned 0x1 [0064.765] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.765] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.765] CoTaskMemFree (pv=0xffa70) [0064.766] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.766] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.766] CoTaskMemFree (pv=0xffa70) [0064.766] SetErrorMode (uMode=0x1) returned 0x0 [0064.768] SetErrorMode (uMode=0x0) returned 0x1 [0064.768] GetFileType (hFile=0x18c) returned 0x1 [0064.769] SetErrorMode (uMode=0x1) returned 0x0 [0064.770] SetErrorMode (uMode=0x0) returned 0x1 [0064.770] GetFileType (hFile=0x18c) returned 0x1 [0064.771] SetErrorMode (uMode=0x1) returned 0x0 [0064.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.772] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.773] SetErrorMode (uMode=0x0) returned 0x1 [0064.773] SetErrorMode (uMode=0x1) returned 0x0 [0064.773] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.774] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.774] SetErrorMode (uMode=0x0) returned 0x1 [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.775] CoTaskMemFree (pv=0xffa70) [0064.775] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.775] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.776] CoTaskMemFree (pv=0xffa70) [0064.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.777] CoTaskMemFree (pv=0xffa70) [0064.777] SetErrorMode (uMode=0x1) returned 0x0 [0064.777] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.778] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.778] SetErrorMode (uMode=0x0) returned 0x1 [0064.778] SetErrorMode (uMode=0x1) returned 0x0 [0064.778] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.779] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.779] SetErrorMode (uMode=0x0) returned 0x1 [0064.779] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.779] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.779] CoTaskMemFree (pv=0xffa70) [0064.779] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.779] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.779] CoTaskMemFree (pv=0xffa70) [0064.779] SetErrorMode (uMode=0x1) returned 0x0 [0064.781] SetErrorMode (uMode=0x0) returned 0x1 [0064.781] GetFileType (hFile=0x18c) returned 0x1 [0064.782] SetErrorMode (uMode=0x1) returned 0x0 [0064.783] SetErrorMode (uMode=0x0) returned 0x1 [0064.783] GetFileType (hFile=0x18c) returned 0x1 [0064.784] SetErrorMode (uMode=0x1) returned 0x0 [0064.784] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.787] SetErrorMode (uMode=0x0) returned 0x1 [0064.787] SetErrorMode (uMode=0x1) returned 0x0 [0064.787] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.788] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.789] SetErrorMode (uMode=0x0) returned 0x1 [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.789] CoTaskMemFree (pv=0xffa70) [0064.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.790] CoTaskMemFree (pv=0xffa70) [0064.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.791] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.791] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.791] CoTaskMemFree (pv=0xffa70) [0064.792] SetErrorMode (uMode=0x1) returned 0x0 [0064.792] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.793] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.793] SetErrorMode (uMode=0x0) returned 0x1 [0064.793] SetErrorMode (uMode=0x1) returned 0x0 [0064.793] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.794] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.794] SetErrorMode (uMode=0x0) returned 0x1 [0064.794] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.794] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.794] CoTaskMemFree (pv=0xffa70) [0064.794] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.794] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.794] CoTaskMemFree (pv=0xffa70) [0064.794] SetErrorMode (uMode=0x1) returned 0x0 [0064.796] SetErrorMode (uMode=0x0) returned 0x1 [0064.796] GetFileType (hFile=0x18c) returned 0x1 [0064.799] SetErrorMode (uMode=0x1) returned 0x0 [0064.799] SetErrorMode (uMode=0x0) returned 0x1 [0064.799] GetFileType (hFile=0x18c) returned 0x1 [0064.800] SetErrorMode (uMode=0x1) returned 0x0 [0064.800] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.802] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.803] SetErrorMode (uMode=0x0) returned 0x1 [0064.803] SetErrorMode (uMode=0x1) returned 0x0 [0064.803] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.804] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.805] SetErrorMode (uMode=0x0) returned 0x1 [0064.805] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.805] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.805] CoTaskMemFree (pv=0xffa70) [0064.805] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.805] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.805] CoTaskMemFree (pv=0xffa70) [0064.805] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.805] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.805] CoTaskMemFree (pv=0xffa70) [0064.805] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.805] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.805] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.806] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.807] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.807] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.807] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.807] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.807] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.807] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.807] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.807] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.807] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.807] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.807] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.807] CoTaskMemFree (pv=0xffa70) [0064.807] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.808] CoTaskMemFree (pv=0xffa70) [0064.809] SetErrorMode (uMode=0x1) returned 0x0 [0064.809] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.810] SetErrorMode (uMode=0x0) returned 0x1 [0064.810] SetErrorMode (uMode=0x1) returned 0x0 [0064.810] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.810] SetErrorMode (uMode=0x0) returned 0x1 [0064.810] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.810] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.811] CoTaskMemFree (pv=0xffa70) [0064.811] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.811] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.811] CoTaskMemFree (pv=0xffa70) [0064.811] SetErrorMode (uMode=0x1) returned 0x0 [0064.814] SetErrorMode (uMode=0x0) returned 0x1 [0064.814] GetFileType (hFile=0x18c) returned 0x1 [0064.815] SetErrorMode (uMode=0x1) returned 0x0 [0064.815] SetErrorMode (uMode=0x0) returned 0x1 [0064.815] GetFileType (hFile=0x18c) returned 0x1 [0064.816] SetErrorMode (uMode=0x1) returned 0x0 [0064.816] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.818] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.818] SetErrorMode (uMode=0x0) returned 0x1 [0064.818] SetErrorMode (uMode=0x1) returned 0x0 [0064.819] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.819] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.820] SetErrorMode (uMode=0x0) returned 0x1 [0064.820] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.820] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.820] CoTaskMemFree (pv=0xffa70) [0064.820] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.820] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.820] CoTaskMemFree (pv=0xffa70) [0064.820] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.820] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.820] CoTaskMemFree (pv=0xffa70) [0064.820] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.820] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.820] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0064.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0064.821] CoTaskMemFree (pv=0xffa70) [0064.822] SetErrorMode (uMode=0x1) returned 0x0 [0064.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.823] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.823] SetErrorMode (uMode=0x0) returned 0x1 [0064.823] SetErrorMode (uMode=0x1) returned 0x0 [0064.823] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.824] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.824] SetErrorMode (uMode=0x0) returned 0x1 [0064.824] SetErrorMode (uMode=0x1) returned 0x0 [0064.825] SetErrorMode (uMode=0x0) returned 0x1 [0064.825] GetFileType (hFile=0x18c) returned 0x1 [0064.828] SetErrorMode (uMode=0x1) returned 0x0 [0064.829] SetErrorMode (uMode=0x0) returned 0x1 [0064.829] GetFileType (hFile=0x18c) returned 0x1 [0064.830] SetErrorMode (uMode=0x1) returned 0x0 [0064.830] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.832] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.833] SetErrorMode (uMode=0x0) returned 0x1 [0064.833] SetErrorMode (uMode=0x1) returned 0x0 [0064.833] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.833] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.834] SetErrorMode (uMode=0x0) returned 0x1 [0064.835] SetErrorMode (uMode=0x1) returned 0x0 [0064.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.835] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.836] SetErrorMode (uMode=0x0) returned 0x1 [0064.836] SetErrorMode (uMode=0x1) returned 0x0 [0064.836] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.836] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.836] SetErrorMode (uMode=0x0) returned 0x1 [0064.836] SetErrorMode (uMode=0x1) returned 0x0 [0064.840] SetErrorMode (uMode=0x0) returned 0x1 [0064.840] GetFileType (hFile=0x18c) returned 0x1 [0064.841] SetErrorMode (uMode=0x1) returned 0x0 [0064.841] SetErrorMode (uMode=0x0) returned 0x1 [0064.841] GetFileType (hFile=0x18c) returned 0x1 [0064.842] SetErrorMode (uMode=0x1) returned 0x0 [0064.843] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.844] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.845] SetErrorMode (uMode=0x0) returned 0x1 [0064.845] SetErrorMode (uMode=0x1) returned 0x0 [0064.845] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.846] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.847] SetErrorMode (uMode=0x0) returned 0x1 [0064.847] SetErrorMode (uMode=0x1) returned 0x0 [0064.847] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.849] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.849] SetErrorMode (uMode=0x0) returned 0x1 [0064.849] SetErrorMode (uMode=0x1) returned 0x0 [0064.849] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.849] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.849] SetErrorMode (uMode=0x0) returned 0x1 [0064.849] SetErrorMode (uMode=0x1) returned 0x0 [0064.852] SetErrorMode (uMode=0x0) returned 0x1 [0064.852] GetFileType (hFile=0x18c) returned 0x1 [0064.853] SetErrorMode (uMode=0x1) returned 0x0 [0064.854] SetErrorMode (uMode=0x0) returned 0x1 [0064.854] GetFileType (hFile=0x18c) returned 0x1 [0064.855] SetErrorMode (uMode=0x1) returned 0x0 [0064.855] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.856] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.857] SetErrorMode (uMode=0x0) returned 0x1 [0064.857] SetErrorMode (uMode=0x1) returned 0x0 [0064.857] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.858] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.859] SetErrorMode (uMode=0x0) returned 0x1 [0064.859] SetErrorMode (uMode=0x1) returned 0x0 [0064.859] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.860] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.860] SetErrorMode (uMode=0x0) returned 0x1 [0064.860] SetErrorMode (uMode=0x1) returned 0x0 [0064.860] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.860] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.861] SetErrorMode (uMode=0x0) returned 0x1 [0064.861] SetErrorMode (uMode=0x1) returned 0x0 [0064.862] SetErrorMode (uMode=0x0) returned 0x1 [0064.862] GetFileType (hFile=0x18c) returned 0x1 [0064.863] SetErrorMode (uMode=0x1) returned 0x0 [0064.864] SetErrorMode (uMode=0x0) returned 0x1 [0064.864] GetFileType (hFile=0x18c) returned 0x1 [0064.865] SetErrorMode (uMode=0x1) returned 0x0 [0064.865] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.867] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.868] SetErrorMode (uMode=0x0) returned 0x1 [0064.868] SetErrorMode (uMode=0x1) returned 0x0 [0064.868] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.869] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.869] SetErrorMode (uMode=0x0) returned 0x1 [0064.870] SetErrorMode (uMode=0x1) returned 0x0 [0064.870] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.871] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.871] SetErrorMode (uMode=0x0) returned 0x1 [0064.872] SetErrorMode (uMode=0x1) returned 0x0 [0064.872] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.872] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.872] SetErrorMode (uMode=0x0) returned 0x1 [0064.872] SetErrorMode (uMode=0x1) returned 0x0 [0064.874] SetErrorMode (uMode=0x0) returned 0x1 [0064.874] GetFileType (hFile=0x18c) returned 0x1 [0064.875] SetErrorMode (uMode=0x1) returned 0x0 [0064.875] SetErrorMode (uMode=0x0) returned 0x1 [0064.875] GetFileType (hFile=0x18c) returned 0x1 [0064.876] SetErrorMode (uMode=0x1) returned 0x0 [0064.876] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.884] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.885] SetErrorMode (uMode=0x0) returned 0x1 [0064.885] SetErrorMode (uMode=0x1) returned 0x0 [0064.885] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.886] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.887] SetErrorMode (uMode=0x0) returned 0x1 [0064.887] SetErrorMode (uMode=0x1) returned 0x0 [0064.887] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.888] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.888] SetErrorMode (uMode=0x0) returned 0x1 [0064.888] SetErrorMode (uMode=0x1) returned 0x0 [0064.888] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.889] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.889] SetErrorMode (uMode=0x0) returned 0x1 [0064.889] SetErrorMode (uMode=0x1) returned 0x0 [0064.893] SetErrorMode (uMode=0x0) returned 0x1 [0064.893] GetFileType (hFile=0x18c) returned 0x1 [0064.895] SetErrorMode (uMode=0x1) returned 0x0 [0064.895] SetErrorMode (uMode=0x0) returned 0x1 [0064.895] GetFileType (hFile=0x18c) returned 0x1 [0064.896] SetErrorMode (uMode=0x1) returned 0x0 [0064.896] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.898] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.898] SetErrorMode (uMode=0x0) returned 0x1 [0064.898] SetErrorMode (uMode=0x1) returned 0x0 [0064.898] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.900] SetErrorMode (uMode=0x0) returned 0x1 [0064.904] SetErrorMode (uMode=0x1) returned 0x0 [0064.904] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.906] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.906] SetErrorMode (uMode=0x0) returned 0x1 [0064.906] SetErrorMode (uMode=0x1) returned 0x0 [0064.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.906] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.906] SetErrorMode (uMode=0x0) returned 0x1 [0064.906] SetErrorMode (uMode=0x1) returned 0x0 [0064.908] SetErrorMode (uMode=0x0) returned 0x1 [0064.908] GetFileType (hFile=0x18c) returned 0x1 [0064.909] SetErrorMode (uMode=0x1) returned 0x0 [0064.910] SetErrorMode (uMode=0x0) returned 0x1 [0064.910] GetFileType (hFile=0x18c) returned 0x1 [0064.911] SetErrorMode (uMode=0x1) returned 0x0 [0064.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.913] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.914] SetErrorMode (uMode=0x0) returned 0x1 [0064.914] SetErrorMode (uMode=0x1) returned 0x0 [0064.914] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.915] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.915] SetErrorMode (uMode=0x0) returned 0x1 [0064.916] SetErrorMode (uMode=0x1) returned 0x0 [0064.916] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.917] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.917] SetErrorMode (uMode=0x0) returned 0x1 [0064.917] SetErrorMode (uMode=0x1) returned 0x0 [0064.917] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.917] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.917] SetErrorMode (uMode=0x0) returned 0x1 [0064.917] SetErrorMode (uMode=0x1) returned 0x0 [0064.919] SetErrorMode (uMode=0x0) returned 0x1 [0064.919] GetFileType (hFile=0x18c) returned 0x1 [0064.920] SetErrorMode (uMode=0x1) returned 0x0 [0064.921] SetErrorMode (uMode=0x0) returned 0x1 [0064.921] GetFileType (hFile=0x18c) returned 0x1 [0064.922] SetErrorMode (uMode=0x1) returned 0x0 [0064.922] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.925] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.926] SetErrorMode (uMode=0x0) returned 0x1 [0064.926] SetErrorMode (uMode=0x1) returned 0x0 [0064.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.927] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.927] SetErrorMode (uMode=0x0) returned 0x1 [0064.928] SetErrorMode (uMode=0x1) returned 0x0 [0064.928] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.929] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.931] SetErrorMode (uMode=0x0) returned 0x1 [0064.931] SetErrorMode (uMode=0x1) returned 0x0 [0064.931] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.931] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.931] SetErrorMode (uMode=0x0) returned 0x1 [0064.932] SetErrorMode (uMode=0x1) returned 0x0 [0064.933] SetErrorMode (uMode=0x0) returned 0x1 [0064.933] GetFileType (hFile=0x18c) returned 0x1 [0064.934] SetErrorMode (uMode=0x1) returned 0x0 [0064.934] SetErrorMode (uMode=0x0) returned 0x1 [0064.934] GetFileType (hFile=0x18c) returned 0x1 [0064.935] SetErrorMode (uMode=0x1) returned 0x0 [0064.935] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.937] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.938] SetErrorMode (uMode=0x0) returned 0x1 [0064.938] SetErrorMode (uMode=0x1) returned 0x0 [0064.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.939] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.939] SetErrorMode (uMode=0x0) returned 0x1 [0064.940] SetErrorMode (uMode=0x1) returned 0x0 [0064.940] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.941] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.941] SetErrorMode (uMode=0x0) returned 0x1 [0064.941] SetErrorMode (uMode=0x1) returned 0x0 [0064.941] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.941] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.941] SetErrorMode (uMode=0x0) returned 0x1 [0064.941] SetErrorMode (uMode=0x1) returned 0x0 [0064.943] SetErrorMode (uMode=0x0) returned 0x1 [0064.943] GetFileType (hFile=0x18c) returned 0x1 [0064.945] SetErrorMode (uMode=0x1) returned 0x0 [0064.945] SetErrorMode (uMode=0x0) returned 0x1 [0064.945] GetFileType (hFile=0x18c) returned 0x1 [0064.946] SetErrorMode (uMode=0x1) returned 0x0 [0064.946] SetErrorMode (uMode=0x0) returned 0x1 [0064.946] GetFileType (hFile=0x18c) returned 0x1 [0064.947] SetErrorMode (uMode=0x1) returned 0x0 [0064.947] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.948] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.949] SetErrorMode (uMode=0x0) returned 0x1 [0064.949] SetErrorMode (uMode=0x1) returned 0x0 [0064.949] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.950] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.950] SetErrorMode (uMode=0x0) returned 0x1 [0064.951] SetErrorMode (uMode=0x1) returned 0x0 [0064.951] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.952] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.952] SetErrorMode (uMode=0x0) returned 0x1 [0064.952] SetErrorMode (uMode=0x1) returned 0x0 [0064.953] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.953] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.953] SetErrorMode (uMode=0x0) returned 0x1 [0064.953] SetErrorMode (uMode=0x1) returned 0x0 [0064.953] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.954] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.954] SetErrorMode (uMode=0x0) returned 0x1 [0064.954] SetErrorMode (uMode=0x1) returned 0x0 [0064.954] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.954] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.954] SetErrorMode (uMode=0x0) returned 0x1 [0064.954] SetErrorMode (uMode=0x1) returned 0x0 [0064.956] SetErrorMode (uMode=0x0) returned 0x1 [0064.956] GetFileType (hFile=0x18c) returned 0x1 [0064.957] SetErrorMode (uMode=0x1) returned 0x0 [0064.959] SetErrorMode (uMode=0x0) returned 0x1 [0064.959] GetFileType (hFile=0x18c) returned 0x1 [0064.960] SetErrorMode (uMode=0x1) returned 0x0 [0064.960] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.963] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.963] SetErrorMode (uMode=0x0) returned 0x1 [0064.963] SetErrorMode (uMode=0x1) returned 0x0 [0064.963] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.963] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.963] SetErrorMode (uMode=0x0) returned 0x1 [0064.964] SetErrorMode (uMode=0x1) returned 0x0 [0064.964] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.965] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.966] SetErrorMode (uMode=0x0) returned 0x1 [0064.966] SetErrorMode (uMode=0x1) returned 0x0 [0064.966] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0064.967] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0064.967] SetErrorMode (uMode=0x0) returned 0x1 [0064.968] SetErrorMode (uMode=0x1) returned 0x0 [0064.969] SetErrorMode (uMode=0x0) returned 0x1 [0064.969] GetFileType (hFile=0x18c) returned 0x1 [0064.969] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0x1b772 [0064.972] SetErrorMode (uMode=0x1) returned 0x0 [0064.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772)) returned 1 [0064.973] SetErrorMode (uMode=0x0) returned 0x1 [0065.047] SetErrorMode (uMode=0x1) returned 0x0 [0065.048] SetErrorMode (uMode=0x0) returned 0x1 [0065.048] GetFileType (hFile=0x18c) returned 0x1 [0065.048] WriteFile (in: hFile=0x18c, lpBuffer=0x128bc3f8*, nNumberOfBytesToWrite=0x1b880, lpNumberOfBytesWritten=0x27e628, lpOverlapped=0x0 | out: lpBuffer=0x128bc3f8*, lpNumberOfBytesWritten=0x27e628*=0x1b880, lpOverlapped=0x0) returned 1 [0065.051] SetErrorMode (uMode=0x1) returned 0x0 [0065.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf774ef90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1b880)) returned 1 [0065.051] SetErrorMode (uMode=0x0) returned 0x1 [0065.051] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Yf9WgwskGyiuZVau_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\yf9wgwskgyiuzvau_encrypted_by.whiterose")) returned 1 [0065.155] SetErrorMode (uMode=0x1) returned 0x0 [0065.155] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0065.157] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0065.158] SetErrorMode (uMode=0x0) returned 0x1 [0065.158] SetErrorMode (uMode=0x1) returned 0x0 [0065.158] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0065.159] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0065.160] SetErrorMode (uMode=0x0) returned 0x1 [0065.160] SetErrorMode (uMode=0x1) returned 0x0 [0065.160] SetErrorMode (uMode=0x0) returned 0x1 [0065.161] GetFileType (hFile=0x18c) returned 0x1 [0065.161] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xcdd8 [0065.163] SetErrorMode (uMode=0x1) returned 0x0 [0065.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8)) returned 1 [0065.163] SetErrorMode (uMode=0x0) returned 0x1 [0065.230] SetErrorMode (uMode=0x1) returned 0x0 [0065.231] SetErrorMode (uMode=0x0) returned 0x1 [0065.231] GetFileType (hFile=0x18c) returned 0x1 [0065.231] WriteFile (in: hFile=0x18c, lpBuffer=0x275bee0*, nNumberOfBytesToWrite=0xcee0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x275bee0*, lpNumberOfBytesWritten=0x27e588*=0xcee0, lpOverlapped=0x0) returned 1 [0065.233] SetErrorMode (uMode=0x1) returned 0x0 [0065.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf7918010, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xcee0)) returned 1 [0065.234] SetErrorMode (uMode=0x0) returned 0x1 [0065.234] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\bpw50PHDWTNgeJMU_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\bpw50phdwtngejmu_encrypted_by.whiterose")) returned 1 [0065.342] SetErrorMode (uMode=0x1) returned 0x0 [0065.343] SetErrorMode (uMode=0x0) returned 0x1 [0065.343] GetFileType (hFile=0x18c) returned 0x1 [0065.343] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x892d [0065.345] SetErrorMode (uMode=0x1) returned 0x0 [0065.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d)) returned 1 [0065.345] SetErrorMode (uMode=0x0) returned 0x1 [0065.406] SetErrorMode (uMode=0x1) returned 0x0 [0065.407] SetErrorMode (uMode=0x0) returned 0x1 [0065.407] GetFileType (hFile=0x18c) returned 0x1 [0065.407] WriteFile (in: hFile=0x18c, lpBuffer=0x2801f38*, nNumberOfBytesToWrite=0x8a30, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2801f38*, lpNumberOfBytesWritten=0x27e588*=0x8a30, lpOverlapped=0x0) returned 1 [0065.415] SetErrorMode (uMode=0x1) returned 0x0 [0065.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf7abaf30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8a30)) returned 1 [0065.415] SetErrorMode (uMode=0x0) returned 0x1 [0065.415] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\TheYzets5QzfM2FH_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\theyzets5qzfm2fh_encrypted_by.whiterose")) returned 1 [0065.514] SetErrorMode (uMode=0x1) returned 0x0 [0065.517] SetErrorMode (uMode=0x0) returned 0x1 [0065.517] GetFileType (hFile=0x18c) returned 0x1 [0065.517] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xc084 [0065.519] SetErrorMode (uMode=0x1) returned 0x0 [0065.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084)) returned 1 [0065.519] SetErrorMode (uMode=0x0) returned 0x1 [0065.593] SetErrorMode (uMode=0x1) returned 0x0 [0065.594] SetErrorMode (uMode=0x0) returned 0x1 [0065.594] GetFileType (hFile=0x18c) returned 0x1 [0065.594] WriteFile (in: hFile=0x18c, lpBuffer=0x289ac30*, nNumberOfBytesToWrite=0xc190, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x289ac30*, lpNumberOfBytesWritten=0x27e588*=0xc190, lpOverlapped=0x0) returned 1 [0065.596] SetErrorMode (uMode=0x1) returned 0x0 [0065.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf7c83fb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc190)) returned 1 [0065.596] SetErrorMode (uMode=0x0) returned 0x1 [0065.596] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\dsLtMG7edUyLkZmt_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dsltmg7eduylkzmt_encrypted_by.whiterose")) returned 1 [0065.701] SetErrorMode (uMode=0x1) returned 0x0 [0065.701] SetErrorMode (uMode=0x0) returned 0x1 [0065.701] GetFileType (hFile=0x18c) returned 0x1 [0065.701] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x8c96 [0065.703] SetErrorMode (uMode=0x1) returned 0x0 [0065.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96)) returned 1 [0065.703] SetErrorMode (uMode=0x0) returned 0x1 [0065.765] SetErrorMode (uMode=0x1) returned 0x0 [0065.766] SetErrorMode (uMode=0x0) returned 0x1 [0065.766] GetFileType (hFile=0x18c) returned 0x1 [0065.766] WriteFile (in: hFile=0x18c, lpBuffer=0x2935088*, nNumberOfBytesToWrite=0x8da0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2935088*, lpNumberOfBytesWritten=0x27e588*=0x8da0, lpOverlapped=0x0) returned 1 [0065.768] SetErrorMode (uMode=0x1) returned 0x0 [0065.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf7e26ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8da0)) returned 1 [0065.768] SetErrorMode (uMode=0x0) returned 0x1 [0065.768] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\qCaBEYkyud5xANXT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\qcabeykyud5xanxt_encrypted_by.whiterose")) returned 1 [0065.872] SetErrorMode (uMode=0x1) returned 0x0 [0065.873] SetErrorMode (uMode=0x0) returned 0x1 [0065.873] GetFileType (hFile=0x18c) returned 0x1 [0065.873] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2eb9e [0065.880] SetErrorMode (uMode=0x1) returned 0x0 [0065.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e)) returned 1 [0065.880] SetErrorMode (uMode=0x0) returned 0x1 [0065.949] SetErrorMode (uMode=0x1) returned 0x0 [0065.952] SetErrorMode (uMode=0x0) returned 0x1 [0065.952] GetFileType (hFile=0x18c) returned 0x1 [0065.952] WriteFile (in: hFile=0x18c, lpBuffer=0x12a22918*, nNumberOfBytesToWrite=0x2eca0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12a22918*, lpNumberOfBytesWritten=0x27e588*=0x2eca0, lpOverlapped=0x0) returned 1 [0065.956] SetErrorMode (uMode=0x1) returned 0x0 [0065.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf7feff50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2eca0)) returned 1 [0065.956] SetErrorMode (uMode=0x0) returned 0x1 [0065.956] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\LNH7RoXlDh339LEG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\lnh7roxldh339leg_encrypted_by.whiterose")) returned 1 [0066.059] SetErrorMode (uMode=0x1) returned 0x0 [0066.060] SetErrorMode (uMode=0x0) returned 0x1 [0066.060] GetFileType (hFile=0x18c) returned 0x1 [0066.060] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9a88d [0066.109] SetErrorMode (uMode=0x1) returned 0x0 [0066.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d)) returned 1 [0066.110] SetErrorMode (uMode=0x0) returned 0x1 [0066.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.258] SetErrorMode (uMode=0x1) returned 0x0 [0066.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.265] GetFileType (hFile=0x18c) returned 0x1 [0066.265] SetErrorMode (uMode=0x0) returned 0x1 [0066.265] GetFileType (hFile=0x18c) returned 0x1 [0066.265] WriteFile (in: hFile=0x18c, lpBuffer=0x1276cdc0*, nNumberOfBytesToWrite=0x9a990, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1276cdc0*, lpNumberOfBytesWritten=0x27e588*=0x9a990, lpOverlapped=0x0) returned 1 [0066.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\sFp2hPK*MeO3G4yt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\sFp2hPK*MeO3G4yt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0066.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.278] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 1 [0066.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0066.290] SetErrorMode (uMode=0x1) returned 0x0 [0066.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0066.290] GetFileType (hFile=0x18c) returned 0x1 [0066.290] SetErrorMode (uMode=0x0) returned 0x1 [0066.290] GetFileType (hFile=0x18c) returned 0x1 [0066.292] WriteFile (in: hFile=0x18c, lpBuffer=0x27098f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27098f0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0066.294] WriteFile (in: hFile=0x18c, lpBuffer=0x27098f0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27098f0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0066.294] CloseHandle (hObject=0x18c) returned 1 [0066.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", lpFilePart=0x0) returned 0x4f [0066.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", lpFilePart=0x0) returned 0x4f [0066.295] SetErrorMode (uMode=0x1) returned 0x0 [0066.295] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0066.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0066.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0066.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0066.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0066.297] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0066.297] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0066.297] SetErrorMode (uMode=0x0) returned 0x1 [0066.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", lpFilePart=0x0) returned 0x4f [0066.298] SetErrorMode (uMode=0x1) returned 0x0 [0066.298] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0066.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0066.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0066.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0066.298] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0066.299] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0066.299] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0066.299] SetErrorMode (uMode=0x0) returned 0x1 [0066.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.299] SetErrorMode (uMode=0x1) returned 0x0 [0066.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.300] GetFileType (hFile=0x18c) returned 0x1 [0066.300] SetErrorMode (uMode=0x0) returned 0x1 [0066.300] GetFileType (hFile=0x18c) returned 0x1 [0066.300] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x13e0e [0066.300] ReadFile (in: hFile=0x18c, lpBuffer=0x2711c98, nNumberOfBytesToRead=0x13e0e, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2711c98*, lpNumberOfBytesRead=0x27e508*=0x13e0e, lpOverlapped=0x0) returned 1 [0066.303] CloseHandle (hObject=0x18c) returned 1 [0066.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.304] SetErrorMode (uMode=0x1) returned 0x0 [0066.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e)) returned 1 [0066.304] SetErrorMode (uMode=0x0) returned 0x1 [0066.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.394] SetErrorMode (uMode=0x1) returned 0x0 [0066.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.396] GetFileType (hFile=0x18c) returned 0x1 [0066.396] SetErrorMode (uMode=0x0) returned 0x1 [0066.396] GetFileType (hFile=0x18c) returned 0x1 [0066.396] WriteFile (in: hFile=0x18c, lpBuffer=0x27d1d28*, nNumberOfBytesToWrite=0x13f10, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27d1d28*, lpNumberOfBytesWritten=0x27e588*=0x13f10, lpOverlapped=0x0) returned 1 [0066.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\IkZXWjAyJwcIyMlB_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\IkZXWjAyJwcIyMlB_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0066.398] SetErrorMode (uMode=0x1) returned 0x0 [0066.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf841a5d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x13f10)) returned 1 [0066.398] SetErrorMode (uMode=0x0) returned 0x1 [0066.398] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\IkZXWjAyJwcIyMlB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\ikzxwjayjwciymlb_encrypted_by.whiterose")) returned 1 [0066.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0066.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0066.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0066.497] SetErrorMode (uMode=0x1) returned 0x0 [0066.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.497] GetFileType (hFile=0x18c) returned 0x1 [0066.498] SetErrorMode (uMode=0x0) returned 0x1 [0066.498] GetFileType (hFile=0x18c) returned 0x1 [0066.498] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xaf90 [0066.498] ReadFile (in: hFile=0x18c, lpBuffer=0x27e76b0, nNumberOfBytesToRead=0xaf90, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27e76b0*, lpNumberOfBytesRead=0x27e508*=0xaf90, lpOverlapped=0x0) returned 1 [0066.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0066.500] SetErrorMode (uMode=0x1) returned 0x0 [0066.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90)) returned 1 [0066.500] SetErrorMode (uMode=0x0) returned 0x1 [0066.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0066.575] SetErrorMode (uMode=0x1) returned 0x0 [0066.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.576] GetFileType (hFile=0x18c) returned 0x1 [0066.577] SetErrorMode (uMode=0x0) returned 0x1 [0066.577] GetFileType (hFile=0x18c) returned 0x1 [0066.577] WriteFile (in: hFile=0x18c, lpBuffer=0x2879ba0*, nNumberOfBytesToWrite=0xb0a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2879ba0*, lpNumberOfBytesWritten=0x27e588*=0xb0a0, lpOverlapped=0x0) returned 1 [0066.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0066.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\LTShAIxoQnLc8oqn_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\LTShAIxoQnLc8oqn_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0066.578] SetErrorMode (uMode=0x1) returned 0x0 [0066.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf85e3650, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb0a0)) returned 1 [0066.578] SetErrorMode (uMode=0x0) returned 0x1 [0066.579] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\LTShAIxoQnLc8oqn_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\ltshaixoqnlc8oqn_encrypted_by.whiterose")) returned 1 [0066.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0066.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0066.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0066.684] SetErrorMode (uMode=0x1) returned 0x0 [0066.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.684] GetFileType (hFile=0x18c) returned 0x1 [0066.684] SetErrorMode (uMode=0x0) returned 0x1 [0066.684] GetFileType (hFile=0x18c) returned 0x1 [0066.685] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xc0af [0066.685] ReadFile (in: hFile=0x18c, lpBuffer=0x28866e8, nNumberOfBytesToRead=0xc0af, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28866e8*, lpNumberOfBytesRead=0x27e508*=0xc0af, lpOverlapped=0x0) returned 1 [0066.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0066.687] SetErrorMode (uMode=0x1) returned 0x0 [0066.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af)) returned 1 [0066.688] SetErrorMode (uMode=0x0) returned 0x1 [0066.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0066.751] SetErrorMode (uMode=0x1) returned 0x0 [0066.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.753] GetFileType (hFile=0x18c) returned 0x1 [0066.753] SetErrorMode (uMode=0x0) returned 0x1 [0066.753] GetFileType (hFile=0x18c) returned 0x1 [0066.753] WriteFile (in: hFile=0x18c, lpBuffer=0x291df28*, nNumberOfBytesToWrite=0xc1b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x291df28*, lpNumberOfBytesWritten=0x27e588*=0xc1b0, lpOverlapped=0x0) returned 1 [0066.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0066.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\sLAc20kdYkwcEGka_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\sLAc20kdYkwcEGka_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0066.758] SetErrorMode (uMode=0x1) returned 0x0 [0066.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf8786570, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc1b0)) returned 1 [0066.758] SetErrorMode (uMode=0x0) returned 0x1 [0066.758] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\sLAc20kdYkwcEGka_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\slac20kdykwcegka_encrypted_by.whiterose")) returned 1 [0066.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.856] SetErrorMode (uMode=0x1) returned 0x0 [0066.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.856] GetFileType (hFile=0x18c) returned 0x1 [0066.856] SetErrorMode (uMode=0x0) returned 0x1 [0066.856] GetFileType (hFile=0x18c) returned 0x1 [0066.856] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x217ce [0066.857] ReadFile (in: hFile=0x18c, lpBuffer=0x1285da70, nNumberOfBytesToRead=0x217ce, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1285da70*, lpNumberOfBytesRead=0x27e508*=0x217ce, lpOverlapped=0x0) returned 1 [0066.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.861] SetErrorMode (uMode=0x1) returned 0x0 [0066.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce)) returned 1 [0066.861] SetErrorMode (uMode=0x0) returned 0x1 [0066.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.930] SetErrorMode (uMode=0x1) returned 0x0 [0066.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.932] GetFileType (hFile=0x18c) returned 0x1 [0066.932] SetErrorMode (uMode=0x0) returned 0x1 [0066.932] GetFileType (hFile=0x18c) returned 0x1 [0066.932] WriteFile (in: hFile=0x18c, lpBuffer=0x12a5d7e0*, nNumberOfBytesToWrite=0x218d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12a5d7e0*, lpNumberOfBytesWritten=0x27e588*=0x218d0, lpOverlapped=0x0) returned 1 [0066.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\jdOUFrovfLetU*JA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\jdOUFrovfLetU*JA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0066.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0066.944] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 1 [0066.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0066.948] SetErrorMode (uMode=0x1) returned 0x0 [0066.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0066.949] GetFileType (hFile=0x18c) returned 0x1 [0066.949] SetErrorMode (uMode=0x0) returned 0x1 [0066.949] GetFileType (hFile=0x18c) returned 0x1 [0066.951] WriteFile (in: hFile=0x18c, lpBuffer=0x2786d80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2786d80*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0066.952] WriteFile (in: hFile=0x18c, lpBuffer=0x2786d80*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2786d80*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0066.952] CloseHandle (hObject=0x18c) returned 1 [0066.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", lpFilePart=0x0) returned 0x4f [0066.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", lpFilePart=0x0) returned 0x4f [0066.953] SetErrorMode (uMode=0x1) returned 0x0 [0066.953] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0066.954] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.954] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0066.954] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0066.954] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0066.954] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0066.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0066.955] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0066.955] SetErrorMode (uMode=0x0) returned 0x1 [0066.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", lpFilePart=0x0) returned 0x4f [0066.955] SetErrorMode (uMode=0x1) returned 0x0 [0066.955] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0066.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0066.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0066.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0066.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0066.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0066.956] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0066.956] SetErrorMode (uMode=0x0) returned 0x1 [0066.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.957] SetErrorMode (uMode=0x1) returned 0x0 [0066.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0066.957] GetFileType (hFile=0x18c) returned 0x1 [0066.957] SetErrorMode (uMode=0x0) returned 0x1 [0066.957] GetFileType (hFile=0x18c) returned 0x1 [0066.957] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x132cc [0066.957] ReadFile (in: hFile=0x18c, lpBuffer=0x278f128, nNumberOfBytesToRead=0x132cc, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x278f128*, lpNumberOfBytesRead=0x27e508*=0x132cc, lpOverlapped=0x0) returned 1 [0066.960] CloseHandle (hObject=0x18c) returned 1 [0066.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0066.961] SetErrorMode (uMode=0x1) returned 0x0 [0066.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc)) returned 1 [0066.961] SetErrorMode (uMode=0x0) returned 0x1 [0067.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.067] SetErrorMode (uMode=0x1) returned 0x0 [0067.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.068] GetFileType (hFile=0x18c) returned 0x1 [0067.068] SetErrorMode (uMode=0x0) returned 0x1 [0067.068] GetFileType (hFile=0x18c) returned 0x1 [0067.068] WriteFile (in: hFile=0x18c, lpBuffer=0x284b230*, nNumberOfBytesToWrite=0x133d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x284b230*, lpNumberOfBytesWritten=0x27e588*=0x133d0, lpOverlapped=0x0) returned 1 [0067.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\qOvY8AvFTquSw5wi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\qOvY8AvFTquSw5wi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0067.070] SetErrorMode (uMode=0x1) returned 0x0 [0067.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf8a800f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x133d0)) returned 1 [0067.071] SetErrorMode (uMode=0x0) returned 0x1 [0067.071] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\qOvY8AvFTquSw5wi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\qovy8avftqusw5wi_encrypted_by.whiterose")) returned 1 [0067.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0067.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0067.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0067.183] SetErrorMode (uMode=0x1) returned 0x0 [0067.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.184] GetFileType (hFile=0x18c) returned 0x1 [0067.184] SetErrorMode (uMode=0x0) returned 0x1 [0067.184] GetFileType (hFile=0x18c) returned 0x1 [0067.184] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb7c2 [0067.184] ReadFile (in: hFile=0x18c, lpBuffer=0x2860078, nNumberOfBytesToRead=0xb7c2, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2860078*, lpNumberOfBytesRead=0x27e508*=0xb7c2, lpOverlapped=0x0) returned 1 [0067.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0067.187] SetErrorMode (uMode=0x1) returned 0x0 [0067.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2)) returned 1 [0067.187] SetErrorMode (uMode=0x0) returned 0x1 [0067.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0067.254] SetErrorMode (uMode=0x1) returned 0x0 [0067.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.256] GetFileType (hFile=0x18c) returned 0x1 [0067.256] SetErrorMode (uMode=0x0) returned 0x1 [0067.256] GetFileType (hFile=0x18c) returned 0x1 [0067.256] WriteFile (in: hFile=0x18c, lpBuffer=0x28e12c0*, nNumberOfBytesToWrite=0xb8d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28e12c0*, lpNumberOfBytesWritten=0x27e588*=0xb8d0, lpOverlapped=0x0) returned 1 [0067.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0067.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Fs6VL6l5PITynOjq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Fs6VL6l5PITynOjq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0067.258] SetErrorMode (uMode=0x1) returned 0x0 [0067.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf8c49170, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb8d0)) returned 1 [0067.258] SetErrorMode (uMode=0x0) returned 0x1 [0067.259] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Fs6VL6l5PITynOjq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\fs6vl6l5pitynojq_encrypted_by.whiterose")) returned 1 [0067.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0067.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0067.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0067.387] SetErrorMode (uMode=0x1) returned 0x0 [0067.387] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.388] GetFileType (hFile=0x18c) returned 0x1 [0067.388] SetErrorMode (uMode=0x0) returned 0x1 [0067.388] GetFileType (hFile=0x18c) returned 0x1 [0067.388] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1182b [0067.388] ReadFile (in: hFile=0x18c, lpBuffer=0x28ee638, nNumberOfBytesToRead=0x1182b, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28ee638*, lpNumberOfBytesRead=0x27e508*=0x1182b, lpOverlapped=0x0) returned 1 [0067.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0067.390] SetErrorMode (uMode=0x1) returned 0x0 [0067.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b)) returned 1 [0067.390] SetErrorMode (uMode=0x0) returned 0x1 [0067.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0067.459] SetErrorMode (uMode=0x1) returned 0x0 [0067.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.460] GetFileType (hFile=0x18c) returned 0x1 [0067.460] SetErrorMode (uMode=0x0) returned 0x1 [0067.460] GetFileType (hFile=0x18c) returned 0x1 [0067.460] WriteFile (in: hFile=0x18c, lpBuffer=0x2795620*, nNumberOfBytesToWrite=0x11930, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2795620*, lpNumberOfBytesWritten=0x27e588*=0x11930, lpOverlapped=0x0) returned 1 [0067.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0067.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\cKg3XCRoPcIffUIA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\cKg3XCRoPcIffUIA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0067.462] SetErrorMode (uMode=0x1) returned 0x0 [0067.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf8e38350, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x11930)) returned 1 [0067.462] SetErrorMode (uMode=0x0) returned 0x1 [0067.462] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\cKg3XCRoPcIffUIA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\ckg3xcropciffuia_encrypted_by.whiterose")) returned 1 [0067.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.574] SetErrorMode (uMode=0x1) returned 0x0 [0067.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.574] GetFileType (hFile=0x18c) returned 0x1 [0067.574] SetErrorMode (uMode=0x0) returned 0x1 [0067.574] GetFileType (hFile=0x18c) returned 0x1 [0067.574] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x322cc [0067.575] ReadFile (in: hFile=0x18c, lpBuffer=0x12adfcb0, nNumberOfBytesToRead=0x322cc, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12adfcb0*, lpNumberOfBytesRead=0x27e508*=0x322cc, lpOverlapped=0x0) returned 1 [0067.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.582] SetErrorMode (uMode=0x1) returned 0x0 [0067.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc)) returned 1 [0067.582] SetErrorMode (uMode=0x0) returned 0x1 [0067.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.668] SetErrorMode (uMode=0x1) returned 0x0 [0067.668] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.670] GetFileType (hFile=0x18c) returned 0x1 [0067.670] SetErrorMode (uMode=0x0) returned 0x1 [0067.670] GetFileType (hFile=0x18c) returned 0x1 [0067.670] WriteFile (in: hFile=0x18c, lpBuffer=0x12736bc8*, nNumberOfBytesToWrite=0x323d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12736bc8*, lpNumberOfBytesWritten=0x27e588*=0x323d0, lpOverlapped=0x0) returned 1 [0067.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\pUG*QU7I6wd3uIi1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\pUG*QU7I6wd3uIi1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0067.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0067.675] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 1 [0067.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0067.680] SetErrorMode (uMode=0x1) returned 0x0 [0067.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0067.681] GetFileType (hFile=0x18c) returned 0x1 [0067.681] SetErrorMode (uMode=0x0) returned 0x1 [0067.681] GetFileType (hFile=0x18c) returned 0x1 [0067.683] WriteFile (in: hFile=0x18c, lpBuffer=0x2709c00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2709c00*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0067.684] WriteFile (in: hFile=0x18c, lpBuffer=0x2709c00*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2709c00*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0067.684] CloseHandle (hObject=0x18c) returned 1 [0067.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", lpFilePart=0x0) returned 0x4f [0067.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", lpFilePart=0x0) returned 0x4f [0067.685] SetErrorMode (uMode=0x1) returned 0x0 [0067.685] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0067.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0067.688] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0067.688] SetErrorMode (uMode=0x0) returned 0x1 [0067.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", lpFilePart=0x0) returned 0x4f [0067.689] SetErrorMode (uMode=0x1) returned 0x0 [0067.689] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0067.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0067.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0067.690] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0067.691] SetErrorMode (uMode=0x0) returned 0x1 [0067.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.691] SetErrorMode (uMode=0x1) returned 0x0 [0067.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.693] GetFileType (hFile=0x18c) returned 0x1 [0067.693] SetErrorMode (uMode=0x0) returned 0x1 [0067.693] GetFileType (hFile=0x18c) returned 0x1 [0067.693] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x7d00 [0067.693] ReadFile (in: hFile=0x18c, lpBuffer=0x27122b8, nNumberOfBytesToRead=0x7d00, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27122b8*, lpNumberOfBytesRead=0x27e508*=0x7d00, lpOverlapped=0x0) returned 1 [0067.695] CloseHandle (hObject=0x18c) returned 1 [0067.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.696] SetErrorMode (uMode=0x1) returned 0x0 [0067.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00)) returned 1 [0067.696] SetErrorMode (uMode=0x0) returned 0x1 [0067.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.784] SetErrorMode (uMode=0x1) returned 0x0 [0067.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.785] GetFileType (hFile=0x18c) returned 0x1 [0067.785] SetErrorMode (uMode=0x0) returned 0x1 [0067.785] GetFileType (hFile=0x18c) returned 0x1 [0067.785] WriteFile (in: hFile=0x18c, lpBuffer=0x27a5bc0*, nNumberOfBytesToWrite=0x7e10, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a5bc0*, lpNumberOfBytesWritten=0x27e588*=0x7e10, lpOverlapped=0x0) returned 1 [0067.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\mTSq4*WozIw9qpB5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\mTSq4*WozIw9qpB5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0067.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0067.789] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 1 [0067.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0067.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0067.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0067.793] SetErrorMode (uMode=0x1) returned 0x0 [0067.793] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.793] GetFileType (hFile=0x18c) returned 0x1 [0067.793] SetErrorMode (uMode=0x0) returned 0x1 [0067.793] GetFileType (hFile=0x18c) returned 0x1 [0067.793] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x8770 [0067.793] ReadFile (in: hFile=0x18c, lpBuffer=0x27af8a0, nNumberOfBytesToRead=0x8770, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27af8a0*, lpNumberOfBytesRead=0x27e508*=0x8770, lpOverlapped=0x0) returned 1 [0067.795] CloseHandle (hObject=0x18c) returned 1 [0067.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0067.796] SetErrorMode (uMode=0x1) returned 0x0 [0067.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770)) returned 1 [0067.796] SetErrorMode (uMode=0x0) returned 0x1 [0067.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0067.892] SetErrorMode (uMode=0x1) returned 0x0 [0067.893] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0067.894] GetFileType (hFile=0x18c) returned 0x1 [0067.894] SetErrorMode (uMode=0x0) returned 0x1 [0067.894] GetFileType (hFile=0x18c) returned 0x1 [0067.894] WriteFile (in: hFile=0x18c, lpBuffer=0x28563b8*, nNumberOfBytesToWrite=0x8880, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28563b8*, lpNumberOfBytesWritten=0x27e588*=0x8880, lpOverlapped=0x0) returned 1 [0067.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0067.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\iS5HgpM64VPdl9U0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\iS5HgpM64VPdl9U0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0067.895] SetErrorMode (uMode=0x1) returned 0x0 [0067.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf92629d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8880)) returned 1 [0067.896] SetErrorMode (uMode=0x0) returned 0x1 [0067.896] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\iS5HgpM64VPdl9U0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\is5hgpm64vpdl9u0_encrypted_by.whiterose")) returned 1 [0068.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0068.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0068.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0068.000] SetErrorMode (uMode=0x1) returned 0x0 [0068.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.001] GetFileType (hFile=0x18c) returned 0x1 [0068.001] SetErrorMode (uMode=0x0) returned 0x1 [0068.001] GetFileType (hFile=0x18c) returned 0x1 [0068.001] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb7dc [0068.001] ReadFile (in: hFile=0x18c, lpBuffer=0x28606e0, nNumberOfBytesToRead=0xb7dc, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28606e0*, lpNumberOfBytesRead=0x27e508*=0xb7dc, lpOverlapped=0x0) returned 1 [0068.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0068.004] SetErrorMode (uMode=0x1) returned 0x0 [0068.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc)) returned 1 [0068.004] SetErrorMode (uMode=0x0) returned 0x1 [0068.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0068.086] SetErrorMode (uMode=0x1) returned 0x0 [0068.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.088] GetFileType (hFile=0x18c) returned 0x1 [0068.088] SetErrorMode (uMode=0x0) returned 0x1 [0068.088] GetFileType (hFile=0x18c) returned 0x1 [0068.088] WriteFile (in: hFile=0x18c, lpBuffer=0x29063b0*, nNumberOfBytesToWrite=0xb8e0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x29063b0*, lpNumberOfBytesWritten=0x27e588*=0xb8e0, lpOverlapped=0x0) returned 1 [0068.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0068.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\lqX2VOJVaMnIUJ1V_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\lqX2VOJVaMnIUJ1V_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0068.091] SetErrorMode (uMode=0x1) returned 0x0 [0068.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf9451bb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb8e0)) returned 1 [0068.091] SetErrorMode (uMode=0x0) returned 0x1 [0068.091] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\lqX2VOJVaMnIUJ1V_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\lqx2vojvamniuj1v_encrypted_by.whiterose")) returned 1 [0068.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0068.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0068.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0068.197] SetErrorMode (uMode=0x1) returned 0x0 [0068.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.198] GetFileType (hFile=0x18c) returned 0x1 [0068.198] SetErrorMode (uMode=0x0) returned 0x1 [0068.198] GetFileType (hFile=0x18c) returned 0x1 [0068.198] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x5274b [0068.201] ReadFile (in: hFile=0x18c, lpBuffer=0x12780198, nNumberOfBytesToRead=0x5274b, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12780198*, lpNumberOfBytesRead=0x27e508*=0x5274b, lpOverlapped=0x0) returned 1 [0068.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0068.207] SetErrorMode (uMode=0x1) returned 0x0 [0068.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b)) returned 1 [0068.208] SetErrorMode (uMode=0x0) returned 0x1 [0068.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0068.290] SetErrorMode (uMode=0x1) returned 0x0 [0068.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.294] GetFileType (hFile=0x18c) returned 0x1 [0068.294] SetErrorMode (uMode=0x0) returned 0x1 [0068.294] GetFileType (hFile=0x18c) returned 0x1 [0068.294] WriteFile (in: hFile=0x18c, lpBuffer=0x1296f328*, nNumberOfBytesToWrite=0x52850, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1296f328*, lpNumberOfBytesWritten=0x27e588*=0x52850, lpOverlapped=0x0) returned 1 [0068.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0068.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\p1RlzdGLhDWcsl7H_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\p1RlzdGLhDWcsl7H_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0068.300] SetErrorMode (uMode=0x1) returned 0x0 [0068.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf9640d90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x52850)) returned 1 [0068.300] SetErrorMode (uMode=0x0) returned 0x1 [0068.300] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\p1RlzdGLhDWcsl7H_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\p1rlzdglhdwcsl7h_encrypted_by.whiterose")) returned 1 [0068.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0068.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0068.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0068.400] SetErrorMode (uMode=0x1) returned 0x0 [0068.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.401] GetFileType (hFile=0x18c) returned 0x1 [0068.401] SetErrorMode (uMode=0x0) returned 0x1 [0068.401] GetFileType (hFile=0x18c) returned 0x1 [0068.401] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2c339 [0068.402] ReadFile (in: hFile=0x18c, lpBuffer=0x129c1ba8, nNumberOfBytesToRead=0x2c339, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x129c1ba8*, lpNumberOfBytesRead=0x27e508*=0x2c339, lpOverlapped=0x0) returned 1 [0068.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0068.423] SetErrorMode (uMode=0x1) returned 0x0 [0068.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339)) returned 1 [0068.423] SetErrorMode (uMode=0x0) returned 0x1 [0068.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0068.489] SetErrorMode (uMode=0x1) returned 0x0 [0068.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.491] GetFileType (hFile=0x18c) returned 0x1 [0068.491] SetErrorMode (uMode=0x0) returned 0x1 [0068.491] GetFileType (hFile=0x18c) returned 0x1 [0068.491] WriteFile (in: hFile=0x18c, lpBuffer=0x127af9d8*, nNumberOfBytesToWrite=0x2c440, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127af9d8*, lpNumberOfBytesWritten=0x27e588*=0x2c440, lpOverlapped=0x0) returned 1 [0068.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0068.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Wg4sLKb8g8LUjrtR_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Wg4sLKb8g8LUjrtR_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0068.495] SetErrorMode (uMode=0x1) returned 0x0 [0068.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf982ff70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c440)) returned 1 [0068.495] SetErrorMode (uMode=0x0) returned 0x1 [0068.495] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Wg4sLKb8g8LUjrtR_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\wg4slkb8g8lujrtr_encrypted_by.whiterose")) returned 1 [0068.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0068.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0068.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0068.603] SetErrorMode (uMode=0x1) returned 0x0 [0068.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.603] GetFileType (hFile=0x18c) returned 0x1 [0068.603] SetErrorMode (uMode=0x0) returned 0x1 [0068.603] GetFileType (hFile=0x18c) returned 0x1 [0068.603] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x15c7a [0068.604] ReadFile (in: hFile=0x18c, lpBuffer=0x127dbe48, nNumberOfBytesToRead=0x15c7a, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127dbe48*, lpNumberOfBytesRead=0x27e508*=0x15c7a, lpOverlapped=0x0) returned 1 [0068.606] CloseHandle (hObject=0x18c) returned 1 [0068.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0068.608] SetErrorMode (uMode=0x1) returned 0x0 [0068.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a)) returned 1 [0068.608] SetErrorMode (uMode=0x0) returned 0x1 [0068.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0068.729] SetErrorMode (uMode=0x1) returned 0x0 [0068.729] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.731] GetFileType (hFile=0x18c) returned 0x1 [0068.731] SetErrorMode (uMode=0x0) returned 0x1 [0068.731] GetFileType (hFile=0x18c) returned 0x1 [0068.731] WriteFile (in: hFile=0x18c, lpBuffer=0x1285eef8*, nNumberOfBytesToWrite=0x15d80, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1285eef8*, lpNumberOfBytesWritten=0x27e588*=0x15d80, lpOverlapped=0x0) returned 1 [0068.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0068.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\ZPWNp00XnYjoS4zD_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\ZPWNp00XnYjoS4zD_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0068.734] SetErrorMode (uMode=0x1) returned 0x0 [0068.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf9a6b410, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x15d80)) returned 1 [0068.734] SetErrorMode (uMode=0x0) returned 0x1 [0068.734] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\ZPWNp00XnYjoS4zD_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\zpwnp00xnyjos4zd_encrypted_by.whiterose")) returned 1 [0068.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0068.888] SetErrorMode (uMode=0x1) returned 0x0 [0068.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0068.930] GetFileType (hFile=0x18c) returned 0x1 [0068.930] SetErrorMode (uMode=0x0) returned 0x1 [0068.930] GetFileType (hFile=0x18c) returned 0x1 [0068.932] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0a00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27c0a00*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0068.933] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0a00*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27c0a00*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0068.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", lpFilePart=0x0) returned 0x4f [0068.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", lpFilePart=0x0) returned 0x4f [0068.933] SetErrorMode (uMode=0x1) returned 0x0 [0068.933] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0068.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0068.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0068.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0068.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0068.934] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0068.934] SetErrorMode (uMode=0x0) returned 0x1 [0068.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", lpFilePart=0x0) returned 0x4f [0068.934] SetErrorMode (uMode=0x1) returned 0x0 [0068.935] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0068.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0068.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0068.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0068.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0068.935] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0068.935] SetErrorMode (uMode=0x0) returned 0x1 [0068.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0068.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0068.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0068.936] SetErrorMode (uMode=0x1) returned 0x0 [0068.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0068.937] GetFileType (hFile=0x18c) returned 0x1 [0068.937] SetErrorMode (uMode=0x0) returned 0x1 [0068.937] GetFileType (hFile=0x18c) returned 0x1 [0068.937] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xe6d5 [0068.937] ReadFile (in: hFile=0x18c, lpBuffer=0x27c8c38, nNumberOfBytesToRead=0xe6d5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27c8c38*, lpNumberOfBytesRead=0x27e508*=0xe6d5, lpOverlapped=0x0) returned 1 [0068.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0068.939] SetErrorMode (uMode=0x1) returned 0x0 [0068.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5)) returned 1 [0068.939] SetErrorMode (uMode=0x0) returned 0x1 [0069.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.045] SetErrorMode (uMode=0x1) returned 0x0 [0069.045] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.046] GetFileType (hFile=0x18c) returned 0x1 [0069.046] SetErrorMode (uMode=0x0) returned 0x1 [0069.046] GetFileType (hFile=0x18c) returned 0x1 [0069.046] WriteFile (in: hFile=0x18c, lpBuffer=0x286d6f0*, nNumberOfBytesToWrite=0xe7e0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x286d6f0*, lpNumberOfBytesWritten=0x27e588*=0xe7e0, lpOverlapped=0x0) returned 1 [0069.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\l5cOvM8vYVXsmHat_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\l5cOvM8vYVXsmHat_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0069.048] SetErrorMode (uMode=0x1) returned 0x0 [0069.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf9d64f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xe7e0)) returned 1 [0069.048] SetErrorMode (uMode=0x0) returned 0x1 [0069.048] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\l5cOvM8vYVXsmHat_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\l5covm8vyvxsmhat_encrypted_by.whiterose")) returned 1 [0069.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.149] SetErrorMode (uMode=0x1) returned 0x0 [0069.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.149] GetFileType (hFile=0x18c) returned 0x1 [0069.149] SetErrorMode (uMode=0x0) returned 0x1 [0069.149] GetFileType (hFile=0x18c) returned 0x1 [0069.149] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9306 [0069.149] ReadFile (in: hFile=0x18c, lpBuffer=0x287d978, nNumberOfBytesToRead=0x9306, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x287d978*, lpNumberOfBytesRead=0x27e508*=0x9306, lpOverlapped=0x0) returned 1 [0069.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.151] SetErrorMode (uMode=0x1) returned 0x0 [0069.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306)) returned 1 [0069.151] SetErrorMode (uMode=0x0) returned 0x1 [0069.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.217] SetErrorMode (uMode=0x1) returned 0x0 [0069.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.219] GetFileType (hFile=0x18c) returned 0x1 [0069.219] SetErrorMode (uMode=0x0) returned 0x1 [0069.219] GetFileType (hFile=0x18c) returned 0x1 [0069.219] WriteFile (in: hFile=0x18c, lpBuffer=0x2723db8*, nNumberOfBytesToWrite=0x9410, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2723db8*, lpNumberOfBytesWritten=0x27e588*=0x9410, lpOverlapped=0x0) returned 1 [0069.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\e3AkWiNSWjzFd8LC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\e3AkWiNSWjzFd8LC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0069.220] SetErrorMode (uMode=0x1) returned 0x0 [0069.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf9f07eb0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9410)) returned 1 [0069.221] SetErrorMode (uMode=0x0) returned 0x1 [0069.221] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\e3AkWiNSWjzFd8LC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\e3akwinswjzfd8lc_encrypted_by.whiterose")) returned 1 [0069.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.320] SetErrorMode (uMode=0x1) returned 0x0 [0069.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.321] GetFileType (hFile=0x18c) returned 0x1 [0069.321] SetErrorMode (uMode=0x0) returned 0x1 [0069.321] GetFileType (hFile=0x18c) returned 0x1 [0069.321] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x18757 [0069.322] ReadFile (in: hFile=0x18c, lpBuffer=0x12891c78, nNumberOfBytesToRead=0x18757, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12891c78*, lpNumberOfBytesRead=0x27e508*=0x18757, lpOverlapped=0x0) returned 1 [0069.324] CloseHandle (hObject=0x18c) returned 1 [0069.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.325] SetErrorMode (uMode=0x1) returned 0x0 [0069.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757)) returned 1 [0069.325] SetErrorMode (uMode=0x0) returned 0x1 [0069.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.399] SetErrorMode (uMode=0x1) returned 0x0 [0069.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.401] GetFileType (hFile=0x18c) returned 0x1 [0069.401] SetErrorMode (uMode=0x0) returned 0x1 [0069.401] GetFileType (hFile=0x18c) returned 0x1 [0069.401] WriteFile (in: hFile=0x18c, lpBuffer=0x12924e58*, nNumberOfBytesToWrite=0x18860, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12924e58*, lpNumberOfBytesWritten=0x27e588*=0x18860, lpOverlapped=0x0) returned 1 [0069.403] CloseHandle (hObject=0x18c) returned 1 [0069.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\7vO4ABR*dJhWsA*3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\7vO4ABR*dJhWsA*3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0069.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.415] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 1 [0069.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0069.417] SetErrorMode (uMode=0x1) returned 0x0 [0069.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0069.417] GetFileType (hFile=0x18c) returned 0x1 [0069.418] SetErrorMode (uMode=0x0) returned 0x1 [0069.418] GetFileType (hFile=0x18c) returned 0x1 [0069.419] WriteFile (in: hFile=0x18c, lpBuffer=0x279cba0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x279cba0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0069.421] WriteFile (in: hFile=0x18c, lpBuffer=0x279cba0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x279cba0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0069.421] CloseHandle (hObject=0x18c) returned 1 [0069.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", lpFilePart=0x0) returned 0x4f [0069.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", lpFilePart=0x0) returned 0x4f [0069.421] SetErrorMode (uMode=0x1) returned 0x0 [0069.421] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0069.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0069.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0069.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0069.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0069.424] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0069.425] SetErrorMode (uMode=0x0) returned 0x1 [0069.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", lpFilePart=0x0) returned 0x4f [0069.425] SetErrorMode (uMode=0x1) returned 0x0 [0069.425] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0069.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0069.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0069.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0069.426] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0069.426] SetErrorMode (uMode=0x0) returned 0x1 [0069.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.426] SetErrorMode (uMode=0x1) returned 0x0 [0069.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.427] GetFileType (hFile=0x18c) returned 0x1 [0069.427] SetErrorMode (uMode=0x0) returned 0x1 [0069.427] GetFileType (hFile=0x18c) returned 0x1 [0069.427] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xcadf [0069.427] ReadFile (in: hFile=0x18c, lpBuffer=0x27a4dd8, nNumberOfBytesToRead=0xcadf, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27a4dd8*, lpNumberOfBytesRead=0x27e508*=0xcadf, lpOverlapped=0x0) returned 1 [0069.429] CloseHandle (hObject=0x18c) returned 1 [0069.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.430] SetErrorMode (uMode=0x1) returned 0x0 [0069.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf)) returned 1 [0069.430] SetErrorMode (uMode=0x0) returned 0x1 [0069.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.525] SetErrorMode (uMode=0x1) returned 0x0 [0069.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.526] GetFileType (hFile=0x18c) returned 0x1 [0069.526] SetErrorMode (uMode=0x0) returned 0x1 [0069.526] GetFileType (hFile=0x18c) returned 0x1 [0069.526] WriteFile (in: hFile=0x18c, lpBuffer=0x2840690*, nNumberOfBytesToWrite=0xcbe0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2840690*, lpNumberOfBytesWritten=0x27e588*=0xcbe0, lpOverlapped=0x0) returned 1 [0069.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\GNPUzSwOI3NyoZf8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\GNPUzSwOI3NyoZf8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0069.528] SetErrorMode (uMode=0x1) returned 0x0 [0069.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfa201a30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xcbe0)) returned 1 [0069.528] SetErrorMode (uMode=0x0) returned 0x1 [0069.529] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\GNPUzSwOI3NyoZf8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\gnpuzswoi3nyozf8_encrypted_by.whiterose")) returned 1 [0069.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.632] SetErrorMode (uMode=0x1) returned 0x0 [0069.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.633] GetFileType (hFile=0x18c) returned 0x1 [0069.633] SetErrorMode (uMode=0x0) returned 0x1 [0069.633] GetFileType (hFile=0x18c) returned 0x1 [0069.633] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xa36f [0069.633] ReadFile (in: hFile=0x18c, lpBuffer=0x284ed18, nNumberOfBytesToRead=0xa36f, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x284ed18*, lpNumberOfBytesRead=0x27e508*=0xa36f, lpOverlapped=0x0) returned 1 [0069.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.635] SetErrorMode (uMode=0x1) returned 0x0 [0069.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f)) returned 1 [0069.635] SetErrorMode (uMode=0x0) returned 0x1 [0069.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.697] SetErrorMode (uMode=0x1) returned 0x0 [0069.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.698] GetFileType (hFile=0x18c) returned 0x1 [0069.698] SetErrorMode (uMode=0x0) returned 0x1 [0069.698] GetFileType (hFile=0x18c) returned 0x1 [0069.698] WriteFile (in: hFile=0x18c, lpBuffer=0x28e4a78*, nNumberOfBytesToWrite=0xa470, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28e4a78*, lpNumberOfBytesWritten=0x27e588*=0xa470, lpOverlapped=0x0) returned 1 [0069.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0069.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\74UDrfEGON0wXVxT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\74UDrfEGON0wXVxT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0069.700] SetErrorMode (uMode=0x1) returned 0x0 [0069.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfa3a4950, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa470)) returned 1 [0069.700] SetErrorMode (uMode=0x0) returned 0x1 [0069.700] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\74UDrfEGON0wXVxT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\74udrfegon0wxvxt_encrypted_by.whiterose")) returned 1 [0069.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.804] SetErrorMode (uMode=0x1) returned 0x0 [0069.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.804] GetFileType (hFile=0x18c) returned 0x1 [0069.804] SetErrorMode (uMode=0x0) returned 0x1 [0069.804] GetFileType (hFile=0x18c) returned 0x1 [0069.804] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x178c0 [0069.805] ReadFile (in: hFile=0x18c, lpBuffer=0x12956eb8, nNumberOfBytesToRead=0x178c0, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12956eb8*, lpNumberOfBytesRead=0x27e508*=0x178c0, lpOverlapped=0x0) returned 1 [0069.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.809] SetErrorMode (uMode=0x1) returned 0x0 [0069.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0)) returned 1 [0069.809] SetErrorMode (uMode=0x0) returned 0x1 [0069.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.889] SetErrorMode (uMode=0x1) returned 0x0 [0069.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.891] GetFileType (hFile=0x18c) returned 0x1 [0069.891] SetErrorMode (uMode=0x0) returned 0x1 [0069.891] GetFileType (hFile=0x18c) returned 0x1 [0069.891] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x179d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x179d0, lpOverlapped=0x0) returned 1 [0069.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0069.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\qdq0EHgtYQ93vSeG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\qdq0EHgtYQ93vSeG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0069.894] SetErrorMode (uMode=0x1) returned 0x0 [0069.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfa56d9d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x179d0)) returned 1 [0069.894] SetErrorMode (uMode=0x0) returned 0x1 [0069.894] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\qdq0EHgtYQ93vSeG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\qdq0ehgtyq93vseg_encrypted_by.whiterose")) returned 1 [0069.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0069.991] SetErrorMode (uMode=0x1) returned 0x0 [0069.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0069.991] GetFileType (hFile=0x18c) returned 0x1 [0069.991] SetErrorMode (uMode=0x0) returned 0x1 [0069.992] GetFileType (hFile=0x18c) returned 0x1 [0069.993] WriteFile (in: hFile=0x18c, lpBuffer=0x27092e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27092e8*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0069.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x4f [0069.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x4f [0069.995] SetErrorMode (uMode=0x1) returned 0x0 [0069.995] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0069.996] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.996] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0069.996] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0069.996] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0069.996] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0069.996] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0069.996] SetErrorMode (uMode=0x0) returned 0x1 [0069.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x4f [0069.996] SetErrorMode (uMode=0x1) returned 0x0 [0069.996] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0069.997] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.997] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0069.997] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0069.997] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0069.997] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0069.997] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0069.997] SetErrorMode (uMode=0x0) returned 0x1 [0069.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0069.997] SetErrorMode (uMode=0x1) returned 0x0 [0069.998] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0069.998] GetFileType (hFile=0x18c) returned 0x1 [0069.998] SetErrorMode (uMode=0x0) returned 0x1 [0069.998] GetFileType (hFile=0x18c) returned 0x1 [0069.998] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xdf82 [0069.998] ReadFile (in: hFile=0x18c, lpBuffer=0x2711520, nNumberOfBytesToRead=0xdf82, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2711520*, lpNumberOfBytesRead=0x27e508*=0xdf82, lpOverlapped=0x0) returned 1 [0070.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.000] SetErrorMode (uMode=0x1) returned 0x0 [0070.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82)) returned 1 [0070.000] SetErrorMode (uMode=0x0) returned 0x1 [0070.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.060] SetErrorMode (uMode=0x1) returned 0x0 [0070.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.061] GetFileType (hFile=0x18c) returned 0x1 [0070.061] SetErrorMode (uMode=0x0) returned 0x1 [0070.061] GetFileType (hFile=0x18c) returned 0x1 [0070.061] WriteFile (in: hFile=0x18c, lpBuffer=0x27b3ac0*, nNumberOfBytesToWrite=0xe090, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27b3ac0*, lpNumberOfBytesWritten=0x27e588*=0xe090, lpOverlapped=0x0) returned 1 [0070.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\DnQgxZuNdaDOKGQ7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\DnQgxZuNdaDOKGQ7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0070.066] SetErrorMode (uMode=0x1) returned 0x0 [0070.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfa7108f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xe090)) returned 1 [0070.066] SetErrorMode (uMode=0x0) returned 0x1 [0070.066] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\DnQgxZuNdaDOKGQ7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dnqgxzundadokgq7_encrypted_by.whiterose")) returned 1 [0070.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.163] SetErrorMode (uMode=0x1) returned 0x0 [0070.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.163] GetFileType (hFile=0x18c) returned 0x1 [0070.163] SetErrorMode (uMode=0x0) returned 0x1 [0070.163] GetFileType (hFile=0x18c) returned 0x1 [0070.163] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9f16 [0070.163] ReadFile (in: hFile=0x18c, lpBuffer=0x27c35f8, nNumberOfBytesToRead=0x9f16, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27c35f8*, lpNumberOfBytesRead=0x27e508*=0x9f16, lpOverlapped=0x0) returned 1 [0070.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.165] SetErrorMode (uMode=0x1) returned 0x0 [0070.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16)) returned 1 [0070.166] SetErrorMode (uMode=0x0) returned 0x1 [0070.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.224] SetErrorMode (uMode=0x1) returned 0x0 [0070.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.225] GetFileType (hFile=0x18c) returned 0x1 [0070.225] SetErrorMode (uMode=0x0) returned 0x1 [0070.225] GetFileType (hFile=0x18c) returned 0x1 [0070.225] WriteFile (in: hFile=0x18c, lpBuffer=0x28648e8*, nNumberOfBytesToWrite=0xa020, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28648e8*, lpNumberOfBytesWritten=0x27e588*=0xa020, lpOverlapped=0x0) returned 1 [0070.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\YymLJq8zndCiiExT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\YymLJq8zndCiiExT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0070.227] SetErrorMode (uMode=0x1) returned 0x0 [0070.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfa8b3810, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa020)) returned 1 [0070.227] SetErrorMode (uMode=0x0) returned 0x1 [0070.227] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\YymLJq8zndCiiExT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\yymljq8zndciiext_encrypted_by.whiterose")) returned 1 [0070.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.336] SetErrorMode (uMode=0x1) returned 0x0 [0070.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.337] GetFileType (hFile=0x18c) returned 0x1 [0070.337] SetErrorMode (uMode=0x0) returned 0x1 [0070.337] GetFileType (hFile=0x18c) returned 0x1 [0070.337] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1a8db [0070.338] ReadFile (in: hFile=0x18c, lpBuffer=0x12705f48, nNumberOfBytesToRead=0x1a8db, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12705f48*, lpNumberOfBytesRead=0x27e508*=0x1a8db, lpOverlapped=0x0) returned 1 [0070.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.343] SetErrorMode (uMode=0x1) returned 0x0 [0070.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db)) returned 1 [0070.343] SetErrorMode (uMode=0x0) returned 0x1 [0070.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.409] SetErrorMode (uMode=0x1) returned 0x0 [0070.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.411] GetFileType (hFile=0x18c) returned 0x1 [0070.411] SetErrorMode (uMode=0x0) returned 0x1 [0070.411] GetFileType (hFile=0x18c) returned 0x1 [0070.411] WriteFile (in: hFile=0x18c, lpBuffer=0x127a5a38*, nNumberOfBytesToWrite=0x1a9e0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127a5a38*, lpNumberOfBytesWritten=0x27e588*=0x1a9e0, lpOverlapped=0x0) returned 1 [0070.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\P3AtoJbSFEkAx9Vi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\P3AtoJbSFEkAx9Vi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0070.414] SetErrorMode (uMode=0x1) returned 0x0 [0070.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfaa7c890, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1a9e0)) returned 1 [0070.414] SetErrorMode (uMode=0x0) returned 0x1 [0070.415] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\P3AtoJbSFEkAx9Vi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\p3atojbsfekax9vi_encrypted_by.whiterose")) returned 1 [0070.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0070.521] SetErrorMode (uMode=0x1) returned 0x0 [0070.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0070.523] GetFileType (hFile=0x18c) returned 0x1 [0070.523] SetErrorMode (uMode=0x0) returned 0x1 [0070.523] GetFileType (hFile=0x18c) returned 0x1 [0070.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", lpFilePart=0x0) returned 0x4f [0070.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", lpFilePart=0x0) returned 0x4f [0070.525] SetErrorMode (uMode=0x1) returned 0x0 [0070.525] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0070.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0070.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0070.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0070.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0070.526] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0070.526] SetErrorMode (uMode=0x0) returned 0x1 [0070.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", lpFilePart=0x0) returned 0x4f [0070.526] SetErrorMode (uMode=0x1) returned 0x0 [0070.526] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0070.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0070.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0070.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0070.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0070.527] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0070.527] SetErrorMode (uMode=0x0) returned 0x1 [0070.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.527] SetErrorMode (uMode=0x1) returned 0x0 [0070.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.530] GetFileType (hFile=0x18c) returned 0x1 [0070.531] SetErrorMode (uMode=0x0) returned 0x1 [0070.531] GetFileType (hFile=0x18c) returned 0x1 [0070.531] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xcdd8 [0070.531] ReadFile (in: hFile=0x18c, lpBuffer=0x28fa230, nNumberOfBytesToRead=0xcdd8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28fa230*, lpNumberOfBytesRead=0x27e508*=0xcdd8, lpOverlapped=0x0) returned 1 [0070.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.532] SetErrorMode (uMode=0x1) returned 0x0 [0070.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8)) returned 1 [0070.533] SetErrorMode (uMode=0x0) returned 0x1 [0070.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.609] SetErrorMode (uMode=0x1) returned 0x0 [0070.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.611] GetFileType (hFile=0x18c) returned 0x1 [0070.611] SetErrorMode (uMode=0x0) returned 0x1 [0070.611] GetFileType (hFile=0x18c) returned 0x1 [0070.611] WriteFile (in: hFile=0x18c, lpBuffer=0x2796e10*, nNumberOfBytesToWrite=0xcee0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2796e10*, lpNumberOfBytesWritten=0x27e588*=0xcee0, lpOverlapped=0x0) returned 1 [0070.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\wUioP*YGNB7A7qP6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\wUioP*YGNB7A7qP6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0070.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0070.622] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 1 [0070.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.626] SetErrorMode (uMode=0x1) returned 0x0 [0070.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.626] GetFileType (hFile=0x18c) returned 0x1 [0070.626] SetErrorMode (uMode=0x0) returned 0x1 [0070.626] GetFileType (hFile=0x18c) returned 0x1 [0070.626] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x8c96 [0070.626] ReadFile (in: hFile=0x18c, lpBuffer=0x27a5bf0, nNumberOfBytesToRead=0x8c96, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27a5bf0*, lpNumberOfBytesRead=0x27e508*=0x8c96, lpOverlapped=0x0) returned 1 [0070.629] CloseHandle (hObject=0x18c) returned 1 [0070.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.630] SetErrorMode (uMode=0x1) returned 0x0 [0070.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96)) returned 1 [0070.630] SetErrorMode (uMode=0x0) returned 0x1 [0070.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.732] SetErrorMode (uMode=0x1) returned 0x0 [0070.732] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.733] GetFileType (hFile=0x18c) returned 0x1 [0070.733] SetErrorMode (uMode=0x0) returned 0x1 [0070.733] GetFileType (hFile=0x18c) returned 0x1 [0070.733] WriteFile (in: hFile=0x18c, lpBuffer=0x2831858*, nNumberOfBytesToWrite=0x8da0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2831858*, lpNumberOfBytesWritten=0x27e588*=0x8da0, lpOverlapped=0x0) returned 1 [0070.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0070.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dt1sfi6QqglYIjCN_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dt1sfi6QqglYIjCN_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0070.736] SetErrorMode (uMode=0x1) returned 0x0 [0070.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfad76410, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8da0)) returned 1 [0070.736] SetErrorMode (uMode=0x0) returned 0x1 [0070.736] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dt1sfi6QqglYIjCN_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dt1sfi6qqglyijcn_encrypted_by.whiterose")) returned 1 [0070.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.834] SetErrorMode (uMode=0x1) returned 0x0 [0070.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.834] GetFileType (hFile=0x18c) returned 0x1 [0070.834] SetErrorMode (uMode=0x0) returned 0x1 [0070.834] GetFileType (hFile=0x18c) returned 0x1 [0070.834] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9a88d [0070.839] ReadFile (in: hFile=0x18c, lpBuffer=0x127da218, nNumberOfBytesToRead=0x9a88d, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127da218*, lpNumberOfBytesRead=0x27e508*=0x9a88d, lpOverlapped=0x0) returned 1 [0070.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.852] SetErrorMode (uMode=0x1) returned 0x0 [0070.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d)) returned 1 [0070.852] SetErrorMode (uMode=0x0) returned 0x1 [0070.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.959] SetErrorMode (uMode=0x1) returned 0x0 [0070.959] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0070.964] GetFileType (hFile=0x18c) returned 0x1 [0070.964] SetErrorMode (uMode=0x0) returned 0x1 [0070.964] GetFileType (hFile=0x18c) returned 0x1 [0070.964] WriteFile (in: hFile=0x18c, lpBuffer=0x1290f480*, nNumberOfBytesToWrite=0x9a990, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1290f480*, lpNumberOfBytesWritten=0x27e588*=0x9a990, lpOverlapped=0x0) returned 1 [0070.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\wrnZGOLcoEX*zKcW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\wrnZGOLcoEX*zKcW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0070.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0070.980] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 1 [0070.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0070.992] SetErrorMode (uMode=0x1) returned 0x0 [0070.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0070.993] GetFileType (hFile=0x18c) returned 0x1 [0070.993] SetErrorMode (uMode=0x0) returned 0x1 [0070.993] GetFileType (hFile=0x18c) returned 0x1 [0070.995] WriteFile (in: hFile=0x18c, lpBuffer=0x2709b68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2709b68*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0070.996] WriteFile (in: hFile=0x18c, lpBuffer=0x2709b68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2709b68*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0070.996] CloseHandle (hObject=0x18c) returned 1 [0070.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", lpFilePart=0x0) returned 0x4f [0070.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", lpFilePart=0x0) returned 0x4f [0070.997] SetErrorMode (uMode=0x1) returned 0x0 [0070.997] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0070.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0070.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0070.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0070.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0070.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0071.000] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0071.000] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0071.000] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0071.000] SetErrorMode (uMode=0x0) returned 0x1 [0071.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", lpFilePart=0x0) returned 0x4f [0071.001] SetErrorMode (uMode=0x1) returned 0x0 [0071.001] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0071.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0071.002] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0071.003] SetErrorMode (uMode=0x0) returned 0x1 [0071.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0071.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0071.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0071.004] SetErrorMode (uMode=0x1) returned 0x0 [0071.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.005] GetFileType (hFile=0x18c) returned 0x1 [0071.005] SetErrorMode (uMode=0x0) returned 0x1 [0071.005] GetFileType (hFile=0x18c) returned 0x1 [0071.005] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xcdd8 [0071.005] ReadFile (in: hFile=0x18c, lpBuffer=0x2712220, nNumberOfBytesToRead=0xcdd8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2712220*, lpNumberOfBytesRead=0x27e508*=0xcdd8, lpOverlapped=0x0) returned 1 [0071.007] CloseHandle (hObject=0x18c) returned 1 [0071.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0071.008] SetErrorMode (uMode=0x1) returned 0x0 [0071.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8)) returned 1 [0071.008] SetErrorMode (uMode=0x0) returned 0x1 [0071.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0071.095] SetErrorMode (uMode=0x1) returned 0x0 [0071.095] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.096] GetFileType (hFile=0x18c) returned 0x1 [0071.096] SetErrorMode (uMode=0x0) returned 0x1 [0071.096] GetFileType (hFile=0x18c) returned 0x1 [0071.096] WriteFile (in: hFile=0x18c, lpBuffer=0x27af348*, nNumberOfBytesToWrite=0xcee0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27af348*, lpNumberOfBytesWritten=0x27e588*=0xcee0, lpOverlapped=0x0) returned 1 [0071.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0071.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\2dqh80FtHaTXPUpm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\2dqh80FtHaTXPUpm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0071.099] SetErrorMode (uMode=0x1) returned 0x0 [0071.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfb108510, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xcee0)) returned 1 [0071.099] SetErrorMode (uMode=0x0) returned 0x1 [0071.099] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\2dqh80FtHaTXPUpm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\2dqh80fthatxpupm_encrypted_by.whiterose")) returned 1 [0071.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0071.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0071.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0071.208] SetErrorMode (uMode=0x1) returned 0x0 [0071.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.209] GetFileType (hFile=0x18c) returned 0x1 [0071.209] SetErrorMode (uMode=0x0) returned 0x1 [0071.209] GetFileType (hFile=0x18c) returned 0x1 [0071.209] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x892d [0071.209] ReadFile (in: hFile=0x18c, lpBuffer=0x27bdca0, nNumberOfBytesToRead=0x892d, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27bdca0*, lpNumberOfBytesRead=0x27e508*=0x892d, lpOverlapped=0x0) returned 1 [0071.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0071.211] SetErrorMode (uMode=0x1) returned 0x0 [0071.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d)) returned 1 [0071.211] SetErrorMode (uMode=0x0) returned 0x1 [0071.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0071.271] SetErrorMode (uMode=0x1) returned 0x0 [0071.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.272] GetFileType (hFile=0x18c) returned 0x1 [0071.272] SetErrorMode (uMode=0x0) returned 0x1 [0071.272] GetFileType (hFile=0x18c) returned 0x1 [0071.272] WriteFile (in: hFile=0x18c, lpBuffer=0x28555f0*, nNumberOfBytesToWrite=0x8a30, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28555f0*, lpNumberOfBytesWritten=0x27e588*=0x8a30, lpOverlapped=0x0) returned 1 [0071.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0071.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\UbOOxEkQFzu0Gj1v_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\UbOOxEkQFzu0Gj1v_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0071.274] SetErrorMode (uMode=0x1) returned 0x0 [0071.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfb2ab430, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8a30)) returned 1 [0071.274] SetErrorMode (uMode=0x0) returned 0x1 [0071.274] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\UbOOxEkQFzu0Gj1v_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\ubooxekqfzu0gj1v_encrypted_by.whiterose")) returned 1 [0071.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0071.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0071.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0071.380] SetErrorMode (uMode=0x1) returned 0x0 [0071.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.380] GetFileType (hFile=0x18c) returned 0x1 [0071.380] SetErrorMode (uMode=0x0) returned 0x1 [0071.380] GetFileType (hFile=0x18c) returned 0x1 [0071.380] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xc084 [0071.380] ReadFile (in: hFile=0x18c, lpBuffer=0x285fac8, nNumberOfBytesToRead=0xc084, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x285fac8*, lpNumberOfBytesRead=0x27e508*=0xc084, lpOverlapped=0x0) returned 1 [0071.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0071.383] SetErrorMode (uMode=0x1) returned 0x0 [0071.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084)) returned 1 [0071.383] SetErrorMode (uMode=0x0) returned 0x1 [0071.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0071.442] SetErrorMode (uMode=0x1) returned 0x0 [0071.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.444] GetFileType (hFile=0x18c) returned 0x1 [0071.444] SetErrorMode (uMode=0x0) returned 0x1 [0071.444] GetFileType (hFile=0x18c) returned 0x1 [0071.444] WriteFile (in: hFile=0x18c, lpBuffer=0x28f7218*, nNumberOfBytesToWrite=0xc190, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28f7218*, lpNumberOfBytesWritten=0x27e588*=0xc190, lpOverlapped=0x0) returned 1 [0071.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0071.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\LE3wbXo9X1cqVNoV_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\LE3wbXo9X1cqVNoV_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0071.446] SetErrorMode (uMode=0x1) returned 0x0 [0071.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfb44e350, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc190)) returned 1 [0071.446] SetErrorMode (uMode=0x0) returned 0x1 [0071.446] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\LE3wbXo9X1cqVNoV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\le3wbxo9x1cqvnov_encrypted_by.whiterose")) returned 1 [0071.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0071.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0071.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0071.565] SetErrorMode (uMode=0x1) returned 0x0 [0071.565] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.566] GetFileType (hFile=0x18c) returned 0x1 [0071.566] SetErrorMode (uMode=0x0) returned 0x1 [0071.566] GetFileType (hFile=0x18c) returned 0x1 [0071.566] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x8c96 [0071.566] ReadFile (in: hFile=0x18c, lpBuffer=0x2904e70, nNumberOfBytesToRead=0x8c96, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2904e70*, lpNumberOfBytesRead=0x27e508*=0x8c96, lpOverlapped=0x0) returned 1 [0071.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0071.568] SetErrorMode (uMode=0x1) returned 0x0 [0071.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96)) returned 1 [0071.568] SetErrorMode (uMode=0x0) returned 0x1 [0071.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0071.631] SetErrorMode (uMode=0x1) returned 0x0 [0071.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.633] GetFileType (hFile=0x18c) returned 0x1 [0071.633] SetErrorMode (uMode=0x0) returned 0x1 [0071.633] GetFileType (hFile=0x18c) returned 0x1 [0071.633] WriteFile (in: hFile=0x18c, lpBuffer=0x279dda0*, nNumberOfBytesToWrite=0x8da0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x279dda0*, lpNumberOfBytesWritten=0x27e588*=0x8da0, lpOverlapped=0x0) returned 1 [0071.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0071.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\C9feRgspdpWIahNk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\C9feRgspdpWIahNk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0071.634] SetErrorMode (uMode=0x1) returned 0x0 [0071.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfb6173d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8da0)) returned 1 [0071.635] SetErrorMode (uMode=0x0) returned 0x1 [0071.635] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\C9feRgspdpWIahNk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\c9fergspdpwiahnk_encrypted_by.whiterose")) returned 1 [0071.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.739] SetErrorMode (uMode=0x1) returned 0x0 [0071.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.739] GetFileType (hFile=0x18c) returned 0x1 [0071.739] SetErrorMode (uMode=0x0) returned 0x1 [0071.739] GetFileType (hFile=0x18c) returned 0x1 [0071.739] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2eb9e [0071.741] ReadFile (in: hFile=0x18c, lpBuffer=0x129dbf40, nNumberOfBytesToRead=0x2eb9e, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x129dbf40*, lpNumberOfBytesRead=0x27e508*=0x2eb9e, lpOverlapped=0x0) returned 1 [0071.745] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.745] SetErrorMode (uMode=0x1) returned 0x0 [0071.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e)) returned 1 [0071.745] SetErrorMode (uMode=0x0) returned 0x1 [0071.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.826] SetErrorMode (uMode=0x1) returned 0x0 [0071.826] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.828] GetFileType (hFile=0x18c) returned 0x1 [0071.828] SetErrorMode (uMode=0x0) returned 0x1 [0071.828] GetFileType (hFile=0x18c) returned 0x1 [0071.828] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x2eca0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x2eca0, lpOverlapped=0x0) returned 1 [0071.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\jZY*gGfemnHIIzG9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\jZY*gGfemnHIIzG9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0071.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0071.841] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 1 [0071.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0071.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0071.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0071.846] SetErrorMode (uMode=0x1) returned 0x0 [0071.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0071.846] GetFileType (hFile=0x18c) returned 0x1 [0071.846] SetErrorMode (uMode=0x0) returned 0x1 [0071.846] GetFileType (hFile=0x18c) returned 0x1 [0071.847] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9a88d [0071.860] ReadFile (in: hFile=0x18c, lpBuffer=0x127010e8, nNumberOfBytesToRead=0x9a88d, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127010e8*, lpNumberOfBytesRead=0x27e508*=0x9a88d, lpOverlapped=0x0) returned 1 [0071.867] CloseHandle (hObject=0x18c) returned 1 [0071.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0071.872] SetErrorMode (uMode=0x1) returned 0x0 [0071.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d)) returned 1 [0071.872] SetErrorMode (uMode=0x0) returned 0x1 [0072.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.023] SetErrorMode (uMode=0x1) returned 0x0 [0072.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.024] GetFileType (hFile=0x18c) returned 0x1 [0072.024] SetErrorMode (uMode=0x0) returned 0x1 [0072.024] GetFileType (hFile=0x18c) returned 0x1 [0072.024] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x9a990, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x9a990, lpOverlapped=0x0) returned 1 [0072.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\UhY1gYVTSFdjEXMc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\UhY1gYVTSFdjEXMc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.035] SetErrorMode (uMode=0x1) returned 0x0 [0072.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfb9f5790, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9a990)) returned 1 [0072.035] SetErrorMode (uMode=0x0) returned 0x1 [0072.035] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\UhY1gYVTSFdjEXMc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\uhy1gyvtsfdjexmc_encrypted_by.whiterose")) returned 1 [0072.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0072.144] SetErrorMode (uMode=0x1) returned 0x0 [0072.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0072.144] GetFileType (hFile=0x18c) returned 0x1 [0072.144] SetErrorMode (uMode=0x0) returned 0x1 [0072.144] GetFileType (hFile=0x18c) returned 0x1 [0072.146] WriteFile (in: hFile=0x18c, lpBuffer=0x2709480*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2709480*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0072.147] WriteFile (in: hFile=0x18c, lpBuffer=0x2709480*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2709480*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0072.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", lpFilePart=0x0) returned 0x4f [0072.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", lpFilePart=0x0) returned 0x4f [0072.148] SetErrorMode (uMode=0x1) returned 0x0 [0072.148] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0072.149] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.149] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0072.149] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0072.149] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0072.149] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0072.150] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0072.150] SetErrorMode (uMode=0x0) returned 0x1 [0072.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", lpFilePart=0x0) returned 0x4f [0072.150] SetErrorMode (uMode=0x1) returned 0x0 [0072.150] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0072.150] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.150] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0072.150] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0072.150] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0072.151] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0072.151] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0072.151] SetErrorMode (uMode=0x0) returned 0x1 [0072.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.151] SetErrorMode (uMode=0x1) returned 0x0 [0072.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.152] GetFileType (hFile=0x18c) returned 0x1 [0072.152] SetErrorMode (uMode=0x0) returned 0x1 [0072.152] GetFileType (hFile=0x18c) returned 0x1 [0072.152] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x30eb7 [0072.153] ReadFile (in: hFile=0x18c, lpBuffer=0x12836350, nNumberOfBytesToRead=0x30eb7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12836350*, lpNumberOfBytesRead=0x27e508*=0x30eb7, lpOverlapped=0x0) returned 1 [0072.156] CloseHandle (hObject=0x18c) returned 1 [0072.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.159] SetErrorMode (uMode=0x1) returned 0x0 [0072.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7)) returned 1 [0072.159] SetErrorMode (uMode=0x0) returned 0x1 [0072.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.229] SetErrorMode (uMode=0x1) returned 0x0 [0072.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.231] GetFileType (hFile=0x18c) returned 0x1 [0072.231] SetErrorMode (uMode=0x0) returned 0x1 [0072.231] GetFileType (hFile=0x18c) returned 0x1 [0072.231] WriteFile (in: hFile=0x18c, lpBuffer=0x1295c170*, nNumberOfBytesToWrite=0x30fc0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1295c170*, lpNumberOfBytesWritten=0x27e588*=0x30fc0, lpOverlapped=0x0) returned 1 [0072.234] CloseHandle (hObject=0x18c) returned 1 [0072.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\UP5B9CIpsI6U0ga5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\UP5B9CIpsI6U0ga5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.237] SetErrorMode (uMode=0x1) returned 0x0 [0072.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfbbbe810, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x30fc0)) returned 1 [0072.237] SetErrorMode (uMode=0x0) returned 0x1 [0072.237] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\UP5B9CIpsI6U0ga5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\up5b9cipsi6u0ga5_encrypted_by.whiterose")) returned 1 [0072.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0072.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0072.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0072.347] SetErrorMode (uMode=0x1) returned 0x0 [0072.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.347] GetFileType (hFile=0x18c) returned 0x1 [0072.347] SetErrorMode (uMode=0x0) returned 0x1 [0072.348] GetFileType (hFile=0x18c) returned 0x1 [0072.348] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9d75 [0072.348] ReadFile (in: hFile=0x18c, lpBuffer=0x276f4d0, nNumberOfBytesToRead=0x9d75, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x276f4d0*, lpNumberOfBytesRead=0x27e508*=0x9d75, lpOverlapped=0x0) returned 1 [0072.357] CloseHandle (hObject=0x18c) returned 1 [0072.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0072.357] SetErrorMode (uMode=0x1) returned 0x0 [0072.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75)) returned 1 [0072.358] SetErrorMode (uMode=0x0) returned 0x1 [0072.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0072.421] SetErrorMode (uMode=0x1) returned 0x0 [0072.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.422] GetFileType (hFile=0x18c) returned 0x1 [0072.422] SetErrorMode (uMode=0x0) returned 0x1 [0072.422] GetFileType (hFile=0x18c) returned 0x1 [0072.422] WriteFile (in: hFile=0x18c, lpBuffer=0x280fc88*, nNumberOfBytesToWrite=0x9e80, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x280fc88*, lpNumberOfBytesWritten=0x27e588*=0x9e80, lpOverlapped=0x0) returned 1 [0072.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0072.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\XnXVM2FfAzDnHTgQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\XnXVM2FfAzDnHTgQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.424] SetErrorMode (uMode=0x1) returned 0x0 [0072.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfbd87890, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9e80)) returned 1 [0072.424] SetErrorMode (uMode=0x0) returned 0x1 [0072.424] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\XnXVM2FfAzDnHTgQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\xnxvm2ffazdnhtgq_encrypted_by.whiterose")) returned 1 [0072.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.534] SetErrorMode (uMode=0x1) returned 0x0 [0072.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.535] GetFileType (hFile=0x18c) returned 0x1 [0072.535] SetErrorMode (uMode=0x0) returned 0x1 [0072.535] GetFileType (hFile=0x18c) returned 0x1 [0072.535] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x44925 [0072.537] ReadFile (in: hFile=0x18c, lpBuffer=0x1298d160, nNumberOfBytesToRead=0x44925, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1298d160*, lpNumberOfBytesRead=0x27e508*=0x44925, lpOverlapped=0x0) returned 1 [0072.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.542] SetErrorMode (uMode=0x1) returned 0x0 [0072.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925)) returned 1 [0072.543] SetErrorMode (uMode=0x0) returned 0x1 [0072.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.642] SetErrorMode (uMode=0x1) returned 0x0 [0072.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.645] GetFileType (hFile=0x18c) returned 0x1 [0072.645] SetErrorMode (uMode=0x0) returned 0x1 [0072.645] GetFileType (hFile=0x18c) returned 0x1 [0072.645] WriteFile (in: hFile=0x18c, lpBuffer=0x1275b888*, nNumberOfBytesToWrite=0x44a30, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1275b888*, lpNumberOfBytesWritten=0x27e588*=0x44a30, lpOverlapped=0x0) returned 1 [0072.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\EfFQcrs5Ixonea*C_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\EfFQcrs5Ixonea*C_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0072.660] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 1 [0072.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0072.667] SetErrorMode (uMode=0x1) returned 0x0 [0072.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0072.667] GetFileType (hFile=0x18c) returned 0x1 [0072.667] SetErrorMode (uMode=0x0) returned 0x1 [0072.667] GetFileType (hFile=0x18c) returned 0x1 [0072.669] WriteFile (in: hFile=0x18c, lpBuffer=0x2709b28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2709b28*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0072.670] WriteFile (in: hFile=0x18c, lpBuffer=0x2709b28*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2709b28*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0072.671] CloseHandle (hObject=0x18c) returned 1 [0072.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", lpFilePart=0x0) returned 0x4f [0072.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", lpFilePart=0x0) returned 0x4f [0072.671] SetErrorMode (uMode=0x1) returned 0x0 [0072.671] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0072.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0072.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0072.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0072.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0072.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0072.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0072.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0072.674] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0072.675] SetErrorMode (uMode=0x0) returned 0x1 [0072.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", lpFilePart=0x0) returned 0x4f [0072.675] SetErrorMode (uMode=0x1) returned 0x0 [0072.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0072.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0072.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0072.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0072.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0072.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0072.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0072.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0072.677] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0072.678] SetErrorMode (uMode=0x0) returned 0x1 [0072.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.678] SetErrorMode (uMode=0x1) returned 0x0 [0072.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.681] GetFileType (hFile=0x18c) returned 0x1 [0072.681] SetErrorMode (uMode=0x0) returned 0x1 [0072.681] GetFileType (hFile=0x18c) returned 0x1 [0072.681] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x21a02 [0072.682] ReadFile (in: hFile=0x18c, lpBuffer=0x127a02e8, nNumberOfBytesToRead=0x21a02, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127a02e8*, lpNumberOfBytesRead=0x27e508*=0x21a02, lpOverlapped=0x0) returned 1 [0072.685] CloseHandle (hObject=0x18c) returned 1 [0072.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.687] SetErrorMode (uMode=0x1) returned 0x0 [0072.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02)) returned 1 [0072.687] SetErrorMode (uMode=0x0) returned 0x1 [0072.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.780] SetErrorMode (uMode=0x1) returned 0x0 [0072.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.782] GetFileType (hFile=0x18c) returned 0x1 [0072.782] SetErrorMode (uMode=0x0) returned 0x1 [0072.782] GetFileType (hFile=0x18c) returned 0x1 [0072.782] WriteFile (in: hFile=0x18c, lpBuffer=0x1286a4e8*, nNumberOfBytesToWrite=0x21b10, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1286a4e8*, lpNumberOfBytesWritten=0x27e588*=0x21b10, lpOverlapped=0x0) returned 1 [0072.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\iDdWSEDO*whsawRG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\iDdWSEDO*whsawRG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0072.787] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 1 [0072.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.791] SetErrorMode (uMode=0x1) returned 0x0 [0072.791] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.792] GetFileType (hFile=0x18c) returned 0x1 [0072.792] SetErrorMode (uMode=0x0) returned 0x1 [0072.792] GetFileType (hFile=0x18c) returned 0x1 [0072.792] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0072.792] ReadFile (in: hFile=0x18c, lpBuffer=0x2770868, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2770868*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0072.794] CloseHandle (hObject=0x18c) returned 1 [0072.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.795] SetErrorMode (uMode=0x1) returned 0x0 [0072.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0072.795] SetErrorMode (uMode=0x0) returned 0x1 [0072.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.889] SetErrorMode (uMode=0x1) returned 0x0 [0072.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.890] GetFileType (hFile=0x18c) returned 0x1 [0072.890] SetErrorMode (uMode=0x0) returned 0x1 [0072.890] GetFileType (hFile=0x18c) returned 0x1 [0072.890] WriteFile (in: hFile=0x18c, lpBuffer=0x28049f0*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28049f0*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0072.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\fCpc6UtuEIAy8e*K_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\fCpc6UtuEIAy8e*K_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0072.894] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 1 [0072.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0072.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0072.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0072.896] SetErrorMode (uMode=0x1) returned 0x0 [0072.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.897] GetFileType (hFile=0x18c) returned 0x1 [0072.897] SetErrorMode (uMode=0x0) returned 0x1 [0072.897] GetFileType (hFile=0x18c) returned 0x1 [0072.897] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0072.897] ReadFile (in: hFile=0x18c, lpBuffer=0x280eaf0, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x280eaf0*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0072.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0072.899] SetErrorMode (uMode=0x1) returned 0x0 [0072.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0072.899] SetErrorMode (uMode=0x0) returned 0x1 [0072.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0072.963] SetErrorMode (uMode=0x1) returned 0x0 [0072.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0072.964] GetFileType (hFile=0x18c) returned 0x1 [0072.964] SetErrorMode (uMode=0x0) returned 0x1 [0072.964] GetFileType (hFile=0x18c) returned 0x1 [0072.964] WriteFile (in: hFile=0x18c, lpBuffer=0x28b3b68*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28b3b68*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0072.966] CloseHandle (hObject=0x18c) returned 1 [0072.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0072.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\bABshaja9VTE4XsP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\bABshaja9VTE4XsP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0072.967] SetErrorMode (uMode=0x1) returned 0x0 [0072.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfc2bc8b0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0072.967] SetErrorMode (uMode=0x0) returned 0x1 [0072.967] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\bABshaja9VTE4XsP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\babshaja9vte4xsp_encrypted_by.whiterose")) returned 1 [0073.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0073.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0073.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0073.064] SetErrorMode (uMode=0x1) returned 0x0 [0073.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.065] GetFileType (hFile=0x18c) returned 0x1 [0073.065] SetErrorMode (uMode=0x0) returned 0x1 [0073.065] GetFileType (hFile=0x18c) returned 0x1 [0073.065] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb6cc [0073.065] ReadFile (in: hFile=0x18c, lpBuffer=0x28c0e70, nNumberOfBytesToRead=0xb6cc, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28c0e70*, lpNumberOfBytesRead=0x27e508*=0xb6cc, lpOverlapped=0x0) returned 1 [0073.067] CloseHandle (hObject=0x18c) returned 1 [0073.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0073.068] SetErrorMode (uMode=0x1) returned 0x0 [0073.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc)) returned 1 [0073.068] SetErrorMode (uMode=0x0) returned 0x1 [0073.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0073.157] SetErrorMode (uMode=0x1) returned 0x0 [0073.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.158] GetFileType (hFile=0x18c) returned 0x1 [0073.158] SetErrorMode (uMode=0x0) returned 0x1 [0073.158] GetFileType (hFile=0x18c) returned 0x1 [0073.158] WriteFile (in: hFile=0x18c, lpBuffer=0x2755568*, nNumberOfBytesToWrite=0xb7d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2755568*, lpNumberOfBytesWritten=0x27e588*=0xb7d0, lpOverlapped=0x0) returned 1 [0073.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0073.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\45PaXtnspkBWhqRe_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\45PaXtnspkBWhqRe_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0073.160] SetErrorMode (uMode=0x1) returned 0x0 [0073.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfc4aba90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb7d0)) returned 1 [0073.160] SetErrorMode (uMode=0x0) returned 0x1 [0073.160] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\45PaXtnspkBWhqRe_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\45paxtnspkbwhqre_encrypted_by.whiterose")) returned 1 [0073.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.268] SetErrorMode (uMode=0x1) returned 0x0 [0073.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.268] GetFileType (hFile=0x18c) returned 0x1 [0073.268] SetErrorMode (uMode=0x0) returned 0x1 [0073.268] GetFileType (hFile=0x18c) returned 0x1 [0073.268] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0073.269] ReadFile (in: hFile=0x18c, lpBuffer=0x128ba068, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128ba068*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0073.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.272] SetErrorMode (uMode=0x1) returned 0x0 [0073.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0073.272] SetErrorMode (uMode=0x0) returned 0x1 [0073.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.339] SetErrorMode (uMode=0x1) returned 0x0 [0073.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.340] GetFileType (hFile=0x18c) returned 0x1 [0073.340] SetErrorMode (uMode=0x0) returned 0x1 [0073.340] GetFileType (hFile=0x18c) returned 0x1 [0073.340] WriteFile (in: hFile=0x18c, lpBuffer=0x12964408*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12964408*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0073.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\8CIvBSkiwb*qQ4X2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\8CIvBSkiwb*qQ4X2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0073.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0073.353] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 1 [0073.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.357] SetErrorMode (uMode=0x1) returned 0x0 [0073.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.357] GetFileType (hFile=0x18c) returned 0x1 [0073.357] SetErrorMode (uMode=0x0) returned 0x1 [0073.357] GetFileType (hFile=0x18c) returned 0x1 [0073.357] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1b7c1 [0073.358] ReadFile (in: hFile=0x18c, lpBuffer=0x12980a38, nNumberOfBytesToRead=0x1b7c1, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12980a38*, lpNumberOfBytesRead=0x27e508*=0x1b7c1, lpOverlapped=0x0) returned 1 [0073.367] CloseHandle (hObject=0x18c) returned 1 [0073.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.369] SetErrorMode (uMode=0x1) returned 0x0 [0073.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1)) returned 1 [0073.369] SetErrorMode (uMode=0x0) returned 0x1 [0073.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.498] SetErrorMode (uMode=0x1) returned 0x0 [0073.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.501] GetFileType (hFile=0x18c) returned 0x1 [0073.501] SetErrorMode (uMode=0x0) returned 0x1 [0073.501] GetFileType (hFile=0x18c) returned 0x1 [0073.501] WriteFile (in: hFile=0x18c, lpBuffer=0x12724eb8*, nNumberOfBytesToWrite=0x1b8d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12724eb8*, lpNumberOfBytesWritten=0x27e588*=0x1b8d0, lpOverlapped=0x0) returned 1 [0073.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Rve*O4hraXCjsCxJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Rve*O4hraXCjsCxJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0073.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0073.509] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 1 [0073.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0073.513] SetErrorMode (uMode=0x1) returned 0x0 [0073.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0073.514] GetFileType (hFile=0x18c) returned 0x1 [0073.514] SetErrorMode (uMode=0x0) returned 0x1 [0073.514] GetFileType (hFile=0x18c) returned 0x1 [0073.515] WriteFile (in: hFile=0x18c, lpBuffer=0x2709e40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2709e40*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0073.517] WriteFile (in: hFile=0x18c, lpBuffer=0x2709e40*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2709e40*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0073.517] CloseHandle (hObject=0x18c) returned 1 [0073.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", lpFilePart=0x0) returned 0x4f [0073.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", lpFilePart=0x0) returned 0x4f [0073.518] SetErrorMode (uMode=0x1) returned 0x0 [0073.518] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0073.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0073.521] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0073.521] SetErrorMode (uMode=0x0) returned 0x1 [0073.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", lpFilePart=0x0) returned 0x4f [0073.522] SetErrorMode (uMode=0x1) returned 0x0 [0073.522] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0073.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0073.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0073.523] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0073.524] SetErrorMode (uMode=0x0) returned 0x1 [0073.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0073.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0073.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0073.524] SetErrorMode (uMode=0x1) returned 0x0 [0073.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.528] GetFileType (hFile=0x18c) returned 0x1 [0073.528] SetErrorMode (uMode=0x0) returned 0x1 [0073.528] GetFileType (hFile=0x18c) returned 0x1 [0073.528] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xbb3e [0073.528] ReadFile (in: hFile=0x18c, lpBuffer=0x27124f8, nNumberOfBytesToRead=0xbb3e, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27124f8*, lpNumberOfBytesRead=0x27e508*=0xbb3e, lpOverlapped=0x0) returned 1 [0073.530] CloseHandle (hObject=0x18c) returned 1 [0073.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0073.531] SetErrorMode (uMode=0x1) returned 0x0 [0073.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e)) returned 1 [0073.531] SetErrorMode (uMode=0x0) returned 0x1 [0073.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0073.631] SetErrorMode (uMode=0x1) returned 0x0 [0073.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.632] GetFileType (hFile=0x18c) returned 0x1 [0073.632] SetErrorMode (uMode=0x0) returned 0x1 [0073.632] GetFileType (hFile=0x18c) returned 0x1 [0073.632] WriteFile (in: hFile=0x18c, lpBuffer=0x27a98e0*, nNumberOfBytesToWrite=0xbc40, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a98e0*, lpNumberOfBytesWritten=0x27e588*=0xbc40, lpOverlapped=0x0) returned 1 [0073.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0073.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\bGLE2tUdk2BP2Aew_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\bGLE2tUdk2BP2Aew_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0073.634] SetErrorMode (uMode=0x1) returned 0x0 [0073.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfc9223d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xbc40)) returned 1 [0073.634] SetErrorMode (uMode=0x0) returned 0x1 [0073.634] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\bGLE2tUdk2BP2Aew_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\bgle2tudk2bp2aew_encrypted_by.whiterose")) returned 1 [0073.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0073.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0073.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0073.735] SetErrorMode (uMode=0x1) returned 0x0 [0073.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.736] GetFileType (hFile=0x18c) returned 0x1 [0073.736] SetErrorMode (uMode=0x0) returned 0x1 [0073.736] GetFileType (hFile=0x18c) returned 0x1 [0073.736] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0073.736] ReadFile (in: hFile=0x18c, lpBuffer=0x27b6f98, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27b6f98*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0073.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0073.738] SetErrorMode (uMode=0x1) returned 0x0 [0073.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0073.738] SetErrorMode (uMode=0x0) returned 0x1 [0073.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0073.800] SetErrorMode (uMode=0x1) returned 0x0 [0073.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.801] GetFileType (hFile=0x18c) returned 0x1 [0073.801] SetErrorMode (uMode=0x0) returned 0x1 [0073.801] GetFileType (hFile=0x18c) returned 0x1 [0073.801] WriteFile (in: hFile=0x18c, lpBuffer=0x284afb0*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x284afb0*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0073.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0073.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\BXQoTR27qMXNywxi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\BXQoTR27qMXNywxi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0073.803] SetErrorMode (uMode=0x1) returned 0x0 [0073.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfcac52f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0073.803] SetErrorMode (uMode=0x0) returned 0x1 [0073.803] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\BXQoTR27qMXNywxi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\bxqotr27qmxnywxi_encrypted_by.whiterose")) returned 1 [0073.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0073.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0073.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0073.913] SetErrorMode (uMode=0x1) returned 0x0 [0073.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0073.913] GetFileType (hFile=0x18c) returned 0x1 [0073.913] SetErrorMode (uMode=0x0) returned 0x1 [0073.914] GetFileType (hFile=0x18c) returned 0x1 [0073.914] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0073.914] ReadFile (in: hFile=0x18c, lpBuffer=0x2854c58, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2854c58*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0073.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0073.916] SetErrorMode (uMode=0x1) returned 0x0 [0073.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0073.916] SetErrorMode (uMode=0x0) returned 0x1 [0074.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0074.048] SetErrorMode (uMode=0x1) returned 0x0 [0074.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.049] GetFileType (hFile=0x18c) returned 0x1 [0074.049] SetErrorMode (uMode=0x0) returned 0x1 [0074.049] GetFileType (hFile=0x18c) returned 0x1 [0074.049] WriteFile (in: hFile=0x18c, lpBuffer=0x28f9b58*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28f9b58*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0074.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0074.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\W9nU7iDTAPWi8ud7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\W9nU7iDTAPWi8ud7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0074.051] SetErrorMode (uMode=0x1) returned 0x0 [0074.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfcd268f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0074.051] SetErrorMode (uMode=0x0) returned 0x1 [0074.051] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\W9nU7iDTAPWi8ud7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\w9nu7idtapwi8ud7_encrypted_by.whiterose")) returned 1 [0074.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.157] SetErrorMode (uMode=0x1) returned 0x0 [0074.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.157] GetFileType (hFile=0x18c) returned 0x1 [0074.157] SetErrorMode (uMode=0x0) returned 0x1 [0074.157] GetFileType (hFile=0x18c) returned 0x1 [0074.157] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9083 [0074.157] ReadFile (in: hFile=0x18c, lpBuffer=0x2906e60, nNumberOfBytesToRead=0x9083, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2906e60*, lpNumberOfBytesRead=0x27e508*=0x9083, lpOverlapped=0x0) returned 1 [0074.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.159] SetErrorMode (uMode=0x1) returned 0x0 [0074.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083)) returned 1 [0074.160] SetErrorMode (uMode=0x0) returned 0x1 [0074.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.220] SetErrorMode (uMode=0x1) returned 0x0 [0074.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.221] GetFileType (hFile=0x18c) returned 0x1 [0074.221] SetErrorMode (uMode=0x0) returned 0x1 [0074.221] GetFileType (hFile=0x18c) returned 0x1 [0074.221] WriteFile (in: hFile=0x18c, lpBuffer=0x27a1930*, nNumberOfBytesToWrite=0x9190, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a1930*, lpNumberOfBytesWritten=0x27e588*=0x9190, lpOverlapped=0x0) returned 1 [0074.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\xt9fYMEiv28tZydd_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\xt9fYMEiv28tZydd_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0074.223] SetErrorMode (uMode=0x1) returned 0x0 [0074.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfcec9810, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9190)) returned 1 [0074.223] SetErrorMode (uMode=0x0) returned 0x1 [0074.223] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\xt9fYMEiv28tZydd_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\xt9fymeiv28tzydd_encrypted_by.whiterose")) returned 1 [0074.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0074.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0074.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0074.328] SetErrorMode (uMode=0x1) returned 0x0 [0074.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.328] GetFileType (hFile=0x18c) returned 0x1 [0074.328] SetErrorMode (uMode=0x0) returned 0x1 [0074.328] GetFileType (hFile=0x18c) returned 0x1 [0074.328] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0074.329] ReadFile (in: hFile=0x18c, lpBuffer=0x1276f0d8, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1276f0d8*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0074.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0074.333] SetErrorMode (uMode=0x1) returned 0x0 [0074.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0074.333] SetErrorMode (uMode=0x0) returned 0x1 [0074.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0074.407] SetErrorMode (uMode=0x1) returned 0x0 [0074.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.408] GetFileType (hFile=0x18c) returned 0x1 [0074.408] SetErrorMode (uMode=0x0) returned 0x1 [0074.408] GetFileType (hFile=0x18c) returned 0x1 [0074.408] WriteFile (in: hFile=0x18c, lpBuffer=0x12819478*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12819478*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0074.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0074.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SEELacg7F67ZxvV2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SEELacg7F67ZxvV2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0074.411] SetErrorMode (uMode=0x1) returned 0x0 [0074.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfd092890, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0074.411] SetErrorMode (uMode=0x0) returned 0x1 [0074.411] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SEELacg7F67ZxvV2_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\seelacg7f67zxvv2_encrypted_by.whiterose")) returned 1 [0074.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0074.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0074.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0074.515] SetErrorMode (uMode=0x1) returned 0x0 [0074.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.515] GetFileType (hFile=0x18c) returned 0x1 [0074.516] SetErrorMode (uMode=0x0) returned 0x1 [0074.516] GetFileType (hFile=0x18c) returned 0x1 [0074.516] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x17b14 [0074.517] ReadFile (in: hFile=0x18c, lpBuffer=0x12835aa8, nNumberOfBytesToRead=0x17b14, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12835aa8*, lpNumberOfBytesRead=0x27e508*=0x17b14, lpOverlapped=0x0) returned 1 [0074.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0074.519] SetErrorMode (uMode=0x1) returned 0x0 [0074.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14)) returned 1 [0074.519] SetErrorMode (uMode=0x0) returned 0x1 [0074.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0074.594] SetErrorMode (uMode=0x1) returned 0x0 [0074.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.595] GetFileType (hFile=0x18c) returned 0x1 [0074.595] SetErrorMode (uMode=0x0) returned 0x1 [0074.595] GetFileType (hFile=0x18c) returned 0x1 [0074.595] WriteFile (in: hFile=0x18c, lpBuffer=0x128c4308*, nNumberOfBytesToWrite=0x17c20, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128c4308*, lpNumberOfBytesWritten=0x27e588*=0x17c20, lpOverlapped=0x0) returned 1 [0074.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0074.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\7O5T4vvpVoBLMjvq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\7O5T4vvpVoBLMjvq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0074.598] SetErrorMode (uMode=0x1) returned 0x0 [0074.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfd25b910, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x17c20)) returned 1 [0074.598] SetErrorMode (uMode=0x0) returned 0x1 [0074.598] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\7O5T4vvpVoBLMjvq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\7o5t4vvpvoblmjvq_encrypted_by.whiterose")) returned 1 [0074.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0074.702] SetErrorMode (uMode=0x1) returned 0x0 [0074.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0074.703] GetFileType (hFile=0x18c) returned 0x1 [0074.703] SetErrorMode (uMode=0x0) returned 0x1 [0074.703] GetFileType (hFile=0x18c) returned 0x1 [0074.704] WriteFile (in: hFile=0x18c, lpBuffer=0x286ce78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x286ce78*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0074.706] WriteFile (in: hFile=0x18c, lpBuffer=0x286ce78*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x286ce78*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0074.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", lpFilePart=0x0) returned 0x4f [0074.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", lpFilePart=0x0) returned 0x4f [0074.708] SetErrorMode (uMode=0x1) returned 0x0 [0074.708] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0074.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0074.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0074.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0074.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0074.710] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0074.710] SetErrorMode (uMode=0x0) returned 0x1 [0074.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", lpFilePart=0x0) returned 0x4f [0074.710] SetErrorMode (uMode=0x1) returned 0x0 [0074.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0074.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0074.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0074.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0074.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0074.711] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0074.711] SetErrorMode (uMode=0x0) returned 0x1 [0074.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0074.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0074.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0074.711] SetErrorMode (uMode=0x1) returned 0x0 [0074.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.711] GetFileType (hFile=0x18c) returned 0x1 [0074.712] SetErrorMode (uMode=0x0) returned 0x1 [0074.712] GetFileType (hFile=0x18c) returned 0x1 [0074.712] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xca88 [0074.712] ReadFile (in: hFile=0x18c, lpBuffer=0x28750b0, nNumberOfBytesToRead=0xca88, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28750b0*, lpNumberOfBytesRead=0x27e508*=0xca88, lpOverlapped=0x0) returned 1 [0074.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0074.714] SetErrorMode (uMode=0x1) returned 0x0 [0074.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88)) returned 1 [0074.714] SetErrorMode (uMode=0x0) returned 0x1 [0074.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0074.775] SetErrorMode (uMode=0x1) returned 0x0 [0074.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.776] GetFileType (hFile=0x18c) returned 0x1 [0074.776] SetErrorMode (uMode=0x0) returned 0x1 [0074.776] GetFileType (hFile=0x18c) returned 0x1 [0074.776] WriteFile (in: hFile=0x18c, lpBuffer=0x29105e8*, nNumberOfBytesToWrite=0xcb90, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x29105e8*, lpNumberOfBytesWritten=0x27e588*=0xcb90, lpOverlapped=0x0) returned 1 [0074.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0074.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\MGLNtVid5lmKkBpc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\MGLNtVid5lmKkBpc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0074.778] SetErrorMode (uMode=0x1) returned 0x0 [0074.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfd3fe830, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xcb90)) returned 1 [0074.778] SetErrorMode (uMode=0x0) returned 0x1 [0074.778] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\MGLNtVid5lmKkBpc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\mglntvid5lmkkbpc_encrypted_by.whiterose")) returned 1 [0074.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.874] SetErrorMode (uMode=0x1) returned 0x0 [0074.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.874] GetFileType (hFile=0x18c) returned 0x1 [0074.874] SetErrorMode (uMode=0x0) returned 0x1 [0074.874] GetFileType (hFile=0x18c) returned 0x1 [0074.874] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x8ff9 [0074.875] ReadFile (in: hFile=0x18c, lpBuffer=0x291ec20, nNumberOfBytesToRead=0x8ff9, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x291ec20*, lpNumberOfBytesRead=0x27e508*=0x8ff9, lpOverlapped=0x0) returned 1 [0074.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.878] SetErrorMode (uMode=0x1) returned 0x0 [0074.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9)) returned 1 [0074.878] SetErrorMode (uMode=0x0) returned 0x1 [0074.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.943] SetErrorMode (uMode=0x1) returned 0x0 [0074.943] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0074.944] GetFileType (hFile=0x18c) returned 0x1 [0074.944] SetErrorMode (uMode=0x0) returned 0x1 [0074.944] GetFileType (hFile=0x18c) returned 0x1 [0074.944] WriteFile (in: hFile=0x18c, lpBuffer=0x27ac1e8*, nNumberOfBytesToWrite=0x9100, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27ac1e8*, lpNumberOfBytesWritten=0x27e588*=0x9100, lpOverlapped=0x0) returned 1 [0074.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0074.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\9RiiGmU2dplfTz71_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\9RiiGmU2dplfTz71_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0074.946] SetErrorMode (uMode=0x1) returned 0x0 [0074.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfd5a1750, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9100)) returned 1 [0074.946] SetErrorMode (uMode=0x0) returned 0x1 [0074.946] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\9RiiGmU2dplfTz71_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\9riigmu2dplftz71_encrypted_by.whiterose")) returned 1 [0075.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.046] SetErrorMode (uMode=0x1) returned 0x0 [0075.046] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.046] GetFileType (hFile=0x18c) returned 0x1 [0075.046] SetErrorMode (uMode=0x0) returned 0x1 [0075.046] GetFileType (hFile=0x18c) returned 0x1 [0075.046] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x18575 [0075.047] ReadFile (in: hFile=0x18c, lpBuffer=0x128f5688, nNumberOfBytesToRead=0x18575, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128f5688*, lpNumberOfBytesRead=0x27e508*=0x18575, lpOverlapped=0x0) returned 1 [0075.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.050] SetErrorMode (uMode=0x1) returned 0x0 [0075.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575)) returned 1 [0075.050] SetErrorMode (uMode=0x0) returned 0x1 [0075.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.118] SetErrorMode (uMode=0x1) returned 0x0 [0075.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.119] GetFileType (hFile=0x18c) returned 0x1 [0075.119] SetErrorMode (uMode=0x0) returned 0x1 [0075.119] GetFileType (hFile=0x18c) returned 0x1 [0075.119] WriteFile (in: hFile=0x18c, lpBuffer=0x129b7b10*, nNumberOfBytesToWrite=0x18680, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x129b7b10*, lpNumberOfBytesWritten=0x27e588*=0x18680, lpOverlapped=0x0) returned 1 [0075.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Zjw2kFZiuQ5x95up_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Zjw2kFZiuQ5x95up_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0075.122] SetErrorMode (uMode=0x1) returned 0x0 [0075.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfd744670, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x18680)) returned 1 [0075.122] SetErrorMode (uMode=0x0) returned 0x1 [0075.122] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Zjw2kFZiuQ5x95up_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\zjw2kfziuq5x95up_encrypted_by.whiterose")) returned 1 [0075.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0075.217] SetErrorMode (uMode=0x1) returned 0x0 [0075.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0075.220] GetFileType (hFile=0x18c) returned 0x1 [0075.220] SetErrorMode (uMode=0x0) returned 0x1 [0075.220] GetFileType (hFile=0x18c) returned 0x1 [0075.222] WriteFile (in: hFile=0x18c, lpBuffer=0x281b180*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x281b180*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0075.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", lpFilePart=0x0) returned 0x4f [0075.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", lpFilePart=0x0) returned 0x4f [0075.224] SetErrorMode (uMode=0x1) returned 0x0 [0075.224] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0075.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0075.225] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0075.225] SetErrorMode (uMode=0x0) returned 0x1 [0075.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", lpFilePart=0x0) returned 0x4f [0075.225] SetErrorMode (uMode=0x1) returned 0x0 [0075.225] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0075.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0075.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0075.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0075.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0075.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0075.226] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0075.226] SetErrorMode (uMode=0x0) returned 0x1 [0075.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.227] SetErrorMode (uMode=0x1) returned 0x0 [0075.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.227] GetFileType (hFile=0x18c) returned 0x1 [0075.227] SetErrorMode (uMode=0x0) returned 0x1 [0075.227] GetFileType (hFile=0x18c) returned 0x1 [0075.227] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xcc2c [0075.227] ReadFile (in: hFile=0x18c, lpBuffer=0x2823528, nNumberOfBytesToRead=0xcc2c, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2823528*, lpNumberOfBytesRead=0x27e508*=0xcc2c, lpOverlapped=0x0) returned 1 [0075.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.229] SetErrorMode (uMode=0x1) returned 0x0 [0075.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c)) returned 1 [0075.230] SetErrorMode (uMode=0x0) returned 0x1 [0075.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.293] SetErrorMode (uMode=0x1) returned 0x0 [0075.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.294] GetFileType (hFile=0x18c) returned 0x1 [0075.294] SetErrorMode (uMode=0x0) returned 0x1 [0075.294] GetFileType (hFile=0x18c) returned 0x1 [0075.294] WriteFile (in: hFile=0x18c, lpBuffer=0x28be208*, nNumberOfBytesToWrite=0xcd30, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28be208*, lpNumberOfBytesWritten=0x27e588*=0xcd30, lpOverlapped=0x0) returned 1 [0075.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\QNKI1Z4AMfMOmxTQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\QNKI1Z4AMfMOmxTQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0075.296] SetErrorMode (uMode=0x1) returned 0x0 [0075.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfd90d6f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xcd30)) returned 1 [0075.296] SetErrorMode (uMode=0x0) returned 0x1 [0075.296] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\QNKI1Z4AMfMOmxTQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\qnki1z4amfmomxtq_encrypted_by.whiterose")) returned 1 [0075.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0075.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0075.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0075.405] SetErrorMode (uMode=0x1) returned 0x0 [0075.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.405] GetFileType (hFile=0x18c) returned 0x1 [0075.406] SetErrorMode (uMode=0x0) returned 0x1 [0075.406] GetFileType (hFile=0x18c) returned 0x1 [0075.406] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xffc9 [0075.406] ReadFile (in: hFile=0x18c, lpBuffer=0x28cc9b0, nNumberOfBytesToRead=0xffc9, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28cc9b0*, lpNumberOfBytesRead=0x27e508*=0xffc9, lpOverlapped=0x0) returned 1 [0075.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0075.409] SetErrorMode (uMode=0x1) returned 0x0 [0075.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9)) returned 1 [0075.409] SetErrorMode (uMode=0x0) returned 0x1 [0075.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0075.496] SetErrorMode (uMode=0x1) returned 0x0 [0075.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.497] GetFileType (hFile=0x18c) returned 0x1 [0075.497] SetErrorMode (uMode=0x0) returned 0x1 [0075.497] GetFileType (hFile=0x18c) returned 0x1 [0075.497] WriteFile (in: hFile=0x18c, lpBuffer=0x276aac8*, nNumberOfBytesToWrite=0x100d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x276aac8*, lpNumberOfBytesWritten=0x27e588*=0x100d0, lpOverlapped=0x0) returned 1 [0075.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0075.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\wFsDqoPpUdyOVPMC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\wFsDqoPpUdyOVPMC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0075.499] SetErrorMode (uMode=0x1) returned 0x0 [0075.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfdafc8d0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x100d0)) returned 1 [0075.500] SetErrorMode (uMode=0x0) returned 0x1 [0075.500] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\wFsDqoPpUdyOVPMC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\wfsdqoppudyovpmc_encrypted_by.whiterose")) returned 1 [0075.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0075.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0075.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0075.607] SetErrorMode (uMode=0x1) returned 0x0 [0075.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.608] GetFileType (hFile=0x18c) returned 0x1 [0075.608] SetErrorMode (uMode=0x0) returned 0x1 [0075.608] GetFileType (hFile=0x18c) returned 0x1 [0075.608] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xa447 [0075.608] ReadFile (in: hFile=0x18c, lpBuffer=0x277c640, nNumberOfBytesToRead=0xa447, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x277c640*, lpNumberOfBytesRead=0x27e508*=0xa447, lpOverlapped=0x0) returned 1 [0075.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0075.611] SetErrorMode (uMode=0x1) returned 0x0 [0075.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447)) returned 1 [0075.611] SetErrorMode (uMode=0x0) returned 0x1 [0075.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0075.690] SetErrorMode (uMode=0x1) returned 0x0 [0075.690] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.691] GetFileType (hFile=0x18c) returned 0x1 [0075.691] SetErrorMode (uMode=0x0) returned 0x1 [0075.691] GetFileType (hFile=0x18c) returned 0x1 [0075.691] WriteFile (in: hFile=0x18c, lpBuffer=0x27db4c0*, nNumberOfBytesToWrite=0xa550, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27db4c0*, lpNumberOfBytesWritten=0x27e588*=0xa550, lpOverlapped=0x0) returned 1 [0075.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0075.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\AdlY6NMf268itrSo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\AdlY6NMf268itrSo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0075.693] SetErrorMode (uMode=0x1) returned 0x0 [0075.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfdcc5950, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xa550)) returned 1 [0075.693] SetErrorMode (uMode=0x0) returned 0x1 [0075.693] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\AdlY6NMf268itrSo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\adly6nmf268itrso_encrypted_by.whiterose")) returned 1 [0075.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.794] SetErrorMode (uMode=0x1) returned 0x0 [0075.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.795] GetFileType (hFile=0x18c) returned 0x1 [0075.795] SetErrorMode (uMode=0x0) returned 0x1 [0075.795] GetFileType (hFile=0x18c) returned 0x1 [0075.795] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c005 [0075.796] ReadFile (in: hFile=0x18c, lpBuffer=0x126d2418, nNumberOfBytesToRead=0x1c005, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesRead=0x27e508*=0x1c005, lpOverlapped=0x0) returned 1 [0075.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.799] SetErrorMode (uMode=0x1) returned 0x0 [0075.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005)) returned 1 [0075.799] SetErrorMode (uMode=0x0) returned 0x1 [0075.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.865] SetErrorMode (uMode=0x1) returned 0x0 [0075.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.867] GetFileType (hFile=0x18c) returned 0x1 [0075.867] SetErrorMode (uMode=0x0) returned 0x1 [0075.867] GetFileType (hFile=0x18c) returned 0x1 [0075.867] WriteFile (in: hFile=0x18c, lpBuffer=0x1277aa18*, nNumberOfBytesToWrite=0x1c110, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1277aa18*, lpNumberOfBytesWritten=0x27e588*=0x1c110, lpOverlapped=0x0) returned 1 [0075.870] CloseHandle (hObject=0x18c) returned 1 [0075.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\g75Svdz5*3Sh2JMb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\g75Svdz5*3Sh2JMb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0075.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0075.881] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 1 [0075.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0075.883] SetErrorMode (uMode=0x1) returned 0x0 [0075.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0075.884] GetFileType (hFile=0x18c) returned 0x1 [0075.884] SetErrorMode (uMode=0x0) returned 0x1 [0075.884] GetFileType (hFile=0x18c) returned 0x1 [0075.886] WriteFile (in: hFile=0x18c, lpBuffer=0x286a028*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x286a028*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0075.887] WriteFile (in: hFile=0x18c, lpBuffer=0x286a028*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x286a028*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0075.888] CloseHandle (hObject=0x18c) returned 1 [0075.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", lpFilePart=0x0) returned 0x4f [0075.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", lpFilePart=0x0) returned 0x4f [0075.888] SetErrorMode (uMode=0x1) returned 0x0 [0075.888] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0075.888] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0075.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0075.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0075.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0075.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0075.889] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0075.889] SetErrorMode (uMode=0x0) returned 0x1 [0075.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", lpFilePart=0x0) returned 0x4f [0075.889] SetErrorMode (uMode=0x1) returned 0x0 [0075.890] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0075.890] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.890] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0075.890] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0075.890] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0075.890] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0075.890] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0075.890] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0075.890] SetErrorMode (uMode=0x0) returned 0x1 [0075.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.891] SetErrorMode (uMode=0x1) returned 0x0 [0075.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0075.891] GetFileType (hFile=0x18c) returned 0x1 [0075.891] SetErrorMode (uMode=0x0) returned 0x1 [0075.891] GetFileType (hFile=0x18c) returned 0x1 [0075.891] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x12b04 [0075.892] ReadFile (in: hFile=0x18c, lpBuffer=0x28723d0, nNumberOfBytesToRead=0x12b04, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28723d0*, lpNumberOfBytesRead=0x27e508*=0x12b04, lpOverlapped=0x0) returned 1 [0075.893] CloseHandle (hObject=0x18c) returned 1 [0075.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0075.894] SetErrorMode (uMode=0x1) returned 0x0 [0075.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04)) returned 1 [0075.894] SetErrorMode (uMode=0x0) returned 0x1 [0076.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.016] SetErrorMode (uMode=0x1) returned 0x0 [0076.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.016] GetFileType (hFile=0x18c) returned 0x1 [0076.016] SetErrorMode (uMode=0x0) returned 0x1 [0076.016] GetFileType (hFile=0x18c) returned 0x1 [0076.016] WriteFile (in: hFile=0x18c, lpBuffer=0x272a8b0*, nNumberOfBytesToWrite=0x12c10, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x272a8b0*, lpNumberOfBytesWritten=0x27e588*=0x12c10, lpOverlapped=0x0) returned 1 [0076.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Rn5JuueIFjoTX8Sg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Rn5JuueIFjoTX8Sg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0076.018] SetErrorMode (uMode=0x1) returned 0x0 [0076.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfdfe5630, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x12c10)) returned 1 [0076.018] SetErrorMode (uMode=0x0) returned 0x1 [0076.018] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Rn5JuueIFjoTX8Sg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\rn5juueifjotx8sg_encrypted_by.whiterose")) returned 1 [0076.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0076.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0076.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0076.122] SetErrorMode (uMode=0x1) returned 0x0 [0076.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.122] GetFileType (hFile=0x18c) returned 0x1 [0076.122] SetErrorMode (uMode=0x0) returned 0x1 [0076.122] GetFileType (hFile=0x18c) returned 0x1 [0076.122] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xeac1 [0076.123] ReadFile (in: hFile=0x18c, lpBuffer=0x273ef38, nNumberOfBytesToRead=0xeac1, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x273ef38*, lpNumberOfBytesRead=0x27e508*=0xeac1, lpOverlapped=0x0) returned 1 [0076.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0076.124] SetErrorMode (uMode=0x1) returned 0x0 [0076.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1)) returned 1 [0076.125] SetErrorMode (uMode=0x0) returned 0x1 [0076.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0076.188] SetErrorMode (uMode=0x1) returned 0x0 [0076.188] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.189] GetFileType (hFile=0x18c) returned 0x1 [0076.189] SetErrorMode (uMode=0x0) returned 0x1 [0076.189] GetFileType (hFile=0x18c) returned 0x1 [0076.189] WriteFile (in: hFile=0x18c, lpBuffer=0x27d0b58*, nNumberOfBytesToWrite=0xebd0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27d0b58*, lpNumberOfBytesWritten=0x27e588*=0xebd0, lpOverlapped=0x0) returned 1 [0076.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0076.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\84DF0Z68CCNAPRFo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\84DF0Z68CCNAPRFo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0076.191] SetErrorMode (uMode=0x1) returned 0x0 [0076.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfe188550, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xebd0)) returned 1 [0076.191] SetErrorMode (uMode=0x0) returned 0x1 [0076.191] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\84DF0Z68CCNAPRFo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\84df0z68ccnaprfo_encrypted_by.whiterose")) returned 1 [0076.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.294] SetErrorMode (uMode=0x1) returned 0x0 [0076.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.295] GetFileType (hFile=0x18c) returned 0x1 [0076.295] SetErrorMode (uMode=0x0) returned 0x1 [0076.295] GetFileType (hFile=0x18c) returned 0x1 [0076.295] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xd074 [0076.295] ReadFile (in: hFile=0x18c, lpBuffer=0x27e11d0, nNumberOfBytesToRead=0xd074, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27e11d0*, lpNumberOfBytesRead=0x27e508*=0xd074, lpOverlapped=0x0) returned 1 [0076.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.297] SetErrorMode (uMode=0x1) returned 0x0 [0076.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074)) returned 1 [0076.297] SetErrorMode (uMode=0x0) returned 0x1 [0076.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.361] SetErrorMode (uMode=0x1) returned 0x0 [0076.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.362] GetFileType (hFile=0x18c) returned 0x1 [0076.362] SetErrorMode (uMode=0x0) returned 0x1 [0076.362] GetFileType (hFile=0x18c) returned 0x1 [0076.362] WriteFile (in: hFile=0x18c, lpBuffer=0x286e838*, nNumberOfBytesToWrite=0xd180, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x286e838*, lpNumberOfBytesWritten=0x27e588*=0xd180, lpOverlapped=0x0) returned 1 [0076.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\YvRnNi*oT3vR5k5P_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\YvRnNi*oT3vR5k5P_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0076.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.373] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 1 [0076.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.376] SetErrorMode (uMode=0x1) returned 0x0 [0076.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.376] GetFileType (hFile=0x18c) returned 0x1 [0076.376] SetErrorMode (uMode=0x0) returned 0x1 [0076.376] GetFileType (hFile=0x18c) returned 0x1 [0076.376] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x24f7f [0076.377] ReadFile (in: hFile=0x18c, lpBuffer=0x127f3e48, nNumberOfBytesToRead=0x24f7f, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127f3e48*, lpNumberOfBytesRead=0x27e508*=0x24f7f, lpOverlapped=0x0) returned 1 [0076.386] CloseHandle (hObject=0x18c) returned 1 [0076.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.389] SetErrorMode (uMode=0x1) returned 0x0 [0076.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f)) returned 1 [0076.389] SetErrorMode (uMode=0x0) returned 0x1 [0076.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.483] SetErrorMode (uMode=0x1) returned 0x0 [0076.484] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.485] GetFileType (hFile=0x18c) returned 0x1 [0076.485] SetErrorMode (uMode=0x0) returned 0x1 [0076.485] GetFileType (hFile=0x18c) returned 0x1 [0076.485] WriteFile (in: hFile=0x18c, lpBuffer=0x128d20f8*, nNumberOfBytesToWrite=0x25080, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128d20f8*, lpNumberOfBytesWritten=0x27e588*=0x25080, lpOverlapped=0x0) returned 1 [0076.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Ion32s7xxNYLGVEw_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Ion32s7xxNYLGVEw_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0076.488] SetErrorMode (uMode=0x1) returned 0x0 [0076.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfe45bf70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x25080)) returned 1 [0076.489] SetErrorMode (uMode=0x0) returned 0x1 [0076.489] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Ion32s7xxNYLGVEw_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\ion32s7xxnylgvew_encrypted_by.whiterose")) returned 1 [0076.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0076.590] SetErrorMode (uMode=0x1) returned 0x0 [0076.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0076.590] GetFileType (hFile=0x18c) returned 0x1 [0076.590] SetErrorMode (uMode=0x0) returned 0x1 [0076.590] GetFileType (hFile=0x18c) returned 0x1 [0076.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", lpFilePart=0x0) returned 0x4f [0076.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", lpFilePart=0x0) returned 0x4f [0076.593] SetErrorMode (uMode=0x1) returned 0x0 [0076.593] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0076.594] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.594] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0076.594] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0076.594] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0076.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0076.595] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0076.595] SetErrorMode (uMode=0x0) returned 0x1 [0076.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", lpFilePart=0x0) returned 0x4f [0076.595] SetErrorMode (uMode=0x1) returned 0x0 [0076.595] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0076.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0076.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0076.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0076.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0076.596] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0076.596] SetErrorMode (uMode=0x0) returned 0x1 [0076.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.596] SetErrorMode (uMode=0x1) returned 0x0 [0076.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.597] GetFileType (hFile=0x18c) returned 0x1 [0076.597] SetErrorMode (uMode=0x0) returned 0x1 [0076.597] GetFileType (hFile=0x18c) returned 0x1 [0076.597] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xff3a [0076.597] ReadFile (in: hFile=0x18c, lpBuffer=0x28e5dc8, nNumberOfBytesToRead=0xff3a, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28e5dc8*, lpNumberOfBytesRead=0x27e508*=0xff3a, lpOverlapped=0x0) returned 1 [0076.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.599] SetErrorMode (uMode=0x1) returned 0x0 [0076.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a)) returned 1 [0076.599] SetErrorMode (uMode=0x0) returned 0x1 [0076.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.661] SetErrorMode (uMode=0x1) returned 0x0 [0076.661] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.662] GetFileType (hFile=0x18c) returned 0x1 [0076.662] SetErrorMode (uMode=0x0) returned 0x1 [0076.662] GetFileType (hFile=0x18c) returned 0x1 [0076.662] WriteFile (in: hFile=0x18c, lpBuffer=0x2790870*, nNumberOfBytesToWrite=0x10040, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2790870*, lpNumberOfBytesWritten=0x27e588*=0x10040, lpOverlapped=0x0) returned 1 [0076.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0076.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\BmLzqYMUvbzXxkfG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\BmLzqYMUvbzXxkfG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0076.664] SetErrorMode (uMode=0x1) returned 0x0 [0076.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfe5fee90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10040)) returned 1 [0076.664] SetErrorMode (uMode=0x0) returned 0x1 [0076.664] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\BmLzqYMUvbzXxkfG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\bmlzqymuvbzxxkfg_encrypted_by.whiterose")) returned 1 [0076.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.764] SetErrorMode (uMode=0x1) returned 0x0 [0076.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.764] GetFileType (hFile=0x18c) returned 0x1 [0076.765] SetErrorMode (uMode=0x0) returned 0x1 [0076.765] GetFileType (hFile=0x18c) returned 0x1 [0076.765] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9542 [0076.765] ReadFile (in: hFile=0x18c, lpBuffer=0x27a2358, nNumberOfBytesToRead=0x9542, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27a2358*, lpNumberOfBytesRead=0x27e508*=0x9542, lpOverlapped=0x0) returned 1 [0076.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.768] SetErrorMode (uMode=0x1) returned 0x0 [0076.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542)) returned 1 [0076.768] SetErrorMode (uMode=0x0) returned 0x1 [0076.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.832] SetErrorMode (uMode=0x1) returned 0x0 [0076.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.833] GetFileType (hFile=0x18c) returned 0x1 [0076.833] SetErrorMode (uMode=0x0) returned 0x1 [0076.833] GetFileType (hFile=0x18c) returned 0x1 [0076.833] WriteFile (in: hFile=0x18c, lpBuffer=0x282e9a8*, nNumberOfBytesToWrite=0x9650, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x282e9a8*, lpNumberOfBytesWritten=0x27e588*=0x9650, lpOverlapped=0x0) returned 1 [0076.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0076.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\sPZg7hQbNCieNOE7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\sPZg7hQbNCieNOE7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0076.835] SetErrorMode (uMode=0x1) returned 0x0 [0076.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfe7a1db0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9650)) returned 1 [0076.835] SetErrorMode (uMode=0x0) returned 0x1 [0076.835] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\sPZg7hQbNCieNOE7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\spzg7hqbncienoe7_encrypted_by.whiterose")) returned 1 [0076.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.933] SetErrorMode (uMode=0x1) returned 0x0 [0076.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0076.934] GetFileType (hFile=0x18c) returned 0x1 [0076.934] SetErrorMode (uMode=0x0) returned 0x1 [0076.934] GetFileType (hFile=0x18c) returned 0x1 [0076.934] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x180e0 [0076.934] ReadFile (in: hFile=0x18c, lpBuffer=0x12917238, nNumberOfBytesToRead=0x180e0, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12917238*, lpNumberOfBytesRead=0x27e508*=0x180e0, lpOverlapped=0x0) returned 1 [0076.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0076.938] SetErrorMode (uMode=0x1) returned 0x0 [0076.938] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0)) returned 1 [0076.938] SetErrorMode (uMode=0x0) returned 0x1 [0077.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.002] SetErrorMode (uMode=0x1) returned 0x0 [0077.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.003] GetFileType (hFile=0x18c) returned 0x1 [0077.003] SetErrorMode (uMode=0x0) returned 0x1 [0077.003] GetFileType (hFile=0x18c) returned 0x1 [0077.003] WriteFile (in: hFile=0x18c, lpBuffer=0x129a7d68*, nNumberOfBytesToWrite=0x181f0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x129a7d68*, lpNumberOfBytesWritten=0x27e588*=0x181f0, lpOverlapped=0x0) returned 1 [0077.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\jicZKAUt532w3i4v_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\jicZKAUt532w3i4v_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0077.005] SetErrorMode (uMode=0x1) returned 0x0 [0077.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfe944cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x181f0)) returned 1 [0077.006] SetErrorMode (uMode=0x0) returned 0x1 [0077.006] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\jicZKAUt532w3i4v_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\jiczkaut532w3i4v_encrypted_by.whiterose")) returned 1 [0077.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0077.105] SetErrorMode (uMode=0x1) returned 0x0 [0077.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0077.106] GetFileType (hFile=0x18c) returned 0x1 [0077.106] SetErrorMode (uMode=0x0) returned 0x1 [0077.106] GetFileType (hFile=0x18c) returned 0x1 [0077.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", lpFilePart=0x0) returned 0x4f [0077.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", lpFilePart=0x0) returned 0x4f [0077.109] SetErrorMode (uMode=0x1) returned 0x0 [0077.109] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0077.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0077.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0077.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0077.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0077.110] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0077.110] SetErrorMode (uMode=0x0) returned 0x1 [0077.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", lpFilePart=0x0) returned 0x4f [0077.110] SetErrorMode (uMode=0x1) returned 0x0 [0077.110] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0077.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0077.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0077.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0077.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0077.111] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0077.111] SetErrorMode (uMode=0x0) returned 0x1 [0077.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.112] SetErrorMode (uMode=0x1) returned 0x0 [0077.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.112] GetFileType (hFile=0x18c) returned 0x1 [0077.112] SetErrorMode (uMode=0x0) returned 0x1 [0077.112] GetFileType (hFile=0x18c) returned 0x1 [0077.112] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xfbd7 [0077.112] ReadFile (in: hFile=0x18c, lpBuffer=0x28a5b68, nNumberOfBytesToRead=0xfbd7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28a5b68*, lpNumberOfBytesRead=0x27e508*=0xfbd7, lpOverlapped=0x0) returned 1 [0077.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.114] SetErrorMode (uMode=0x1) returned 0x0 [0077.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7)) returned 1 [0077.115] SetErrorMode (uMode=0x0) returned 0x1 [0077.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.180] SetErrorMode (uMode=0x1) returned 0x0 [0077.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.181] GetFileType (hFile=0x18c) returned 0x1 [0077.181] SetErrorMode (uMode=0x0) returned 0x1 [0077.181] GetFileType (hFile=0x18c) returned 0x1 [0077.181] WriteFile (in: hFile=0x18c, lpBuffer=0x274f5e0*, nNumberOfBytesToWrite=0xfce0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x274f5e0*, lpNumberOfBytesWritten=0x27e588*=0xfce0, lpOverlapped=0x0) returned 1 [0077.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\EtKuX3wgd712AfJi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\EtKuX3wgd712AfJi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0077.183] SetErrorMode (uMode=0x1) returned 0x0 [0077.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfeb0dd50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xfce0)) returned 1 [0077.184] SetErrorMode (uMode=0x0) returned 0x1 [0077.184] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\EtKuX3wgd712AfJi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\etkux3wgd712afji_encrypted_by.whiterose")) returned 1 [0077.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0077.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0077.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0077.292] SetErrorMode (uMode=0x1) returned 0x0 [0077.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.293] GetFileType (hFile=0x18c) returned 0x1 [0077.293] SetErrorMode (uMode=0x0) returned 0x1 [0077.293] GetFileType (hFile=0x18c) returned 0x1 [0077.293] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x95a4 [0077.293] ReadFile (in: hFile=0x18c, lpBuffer=0x2760d68, nNumberOfBytesToRead=0x95a4, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2760d68*, lpNumberOfBytesRead=0x27e508*=0x95a4, lpOverlapped=0x0) returned 1 [0077.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0077.295] SetErrorMode (uMode=0x1) returned 0x0 [0077.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4)) returned 1 [0077.295] SetErrorMode (uMode=0x0) returned 0x1 [0077.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0077.368] SetErrorMode (uMode=0x1) returned 0x0 [0077.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.369] GetFileType (hFile=0x18c) returned 0x1 [0077.369] SetErrorMode (uMode=0x0) returned 0x1 [0077.369] GetFileType (hFile=0x18c) returned 0x1 [0077.369] WriteFile (in: hFile=0x18c, lpBuffer=0x27cc890*, nNumberOfBytesToWrite=0x96b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27cc890*, lpNumberOfBytesWritten=0x27e588*=0x96b0, lpOverlapped=0x0) returned 1 [0077.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0077.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\llronrj6m4L20yD7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\llronrj6m4L20yD7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0077.371] SetErrorMode (uMode=0x1) returned 0x0 [0077.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfecd6dd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x96b0)) returned 1 [0077.371] SetErrorMode (uMode=0x0) returned 0x1 [0077.371] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\llronrj6m4L20yD7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\llronrj6m4l20yd7_encrypted_by.whiterose")) returned 1 [0077.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.479] SetErrorMode (uMode=0x1) returned 0x0 [0077.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.480] GetFileType (hFile=0x18c) returned 0x1 [0077.480] SetErrorMode (uMode=0x0) returned 0x1 [0077.480] GetFileType (hFile=0x18c) returned 0x1 [0077.480] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x17ff8 [0077.480] ReadFile (in: hFile=0x18c, lpBuffer=0x126d2418, nNumberOfBytesToRead=0x17ff8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesRead=0x27e508*=0x17ff8, lpOverlapped=0x0) returned 1 [0077.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.483] SetErrorMode (uMode=0x1) returned 0x0 [0077.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8)) returned 1 [0077.484] SetErrorMode (uMode=0x0) returned 0x1 [0077.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.550] SetErrorMode (uMode=0x1) returned 0x0 [0077.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.551] GetFileType (hFile=0x18c) returned 0x1 [0077.551] SetErrorMode (uMode=0x0) returned 0x1 [0077.551] GetFileType (hFile=0x18c) returned 0x1 [0077.551] WriteFile (in: hFile=0x18c, lpBuffer=0x127629b8*, nNumberOfBytesToWrite=0x18100, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127629b8*, lpNumberOfBytesWritten=0x27e588*=0x18100, lpOverlapped=0x0) returned 1 [0077.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0077.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\yvRwfJyoCngNnmdv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\yvRwfJyoCngNnmdv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0077.553] SetErrorMode (uMode=0x1) returned 0x0 [0077.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfee79cf0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x18100)) returned 1 [0077.554] SetErrorMode (uMode=0x0) returned 0x1 [0077.554] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\yvRwfJyoCngNnmdv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\yvrwfjyocngnnmdv_encrypted_by.whiterose")) returned 1 [0077.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0077.651] SetErrorMode (uMode=0x1) returned 0x0 [0077.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0077.651] GetFileType (hFile=0x18c) returned 0x1 [0077.651] SetErrorMode (uMode=0x0) returned 0x1 [0077.651] GetFileType (hFile=0x18c) returned 0x1 [0077.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", lpFilePart=0x0) returned 0x4f [0077.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", lpFilePart=0x0) returned 0x4f [0077.653] SetErrorMode (uMode=0x1) returned 0x0 [0077.653] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0077.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0077.656] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0077.656] SetErrorMode (uMode=0x0) returned 0x1 [0077.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", lpFilePart=0x0) returned 0x4f [0077.657] SetErrorMode (uMode=0x1) returned 0x0 [0077.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0077.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0077.658] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0077.659] SetErrorMode (uMode=0x0) returned 0x1 [0077.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.659] SetErrorMode (uMode=0x1) returned 0x0 [0077.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.660] GetFileType (hFile=0x18c) returned 0x1 [0077.660] SetErrorMode (uMode=0x0) returned 0x1 [0077.660] GetFileType (hFile=0x18c) returned 0x1 [0077.660] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x907a [0077.660] ReadFile (in: hFile=0x18c, lpBuffer=0x2860a50, nNumberOfBytesToRead=0x907a, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2860a50*, lpNumberOfBytesRead=0x27e508*=0x907a, lpOverlapped=0x0) returned 1 [0077.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.662] SetErrorMode (uMode=0x1) returned 0x0 [0077.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a)) returned 1 [0077.662] SetErrorMode (uMode=0x0) returned 0x1 [0077.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.722] SetErrorMode (uMode=0x1) returned 0x0 [0077.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.723] GetFileType (hFile=0x18c) returned 0x1 [0077.723] SetErrorMode (uMode=0x0) returned 0x1 [0077.723] GetFileType (hFile=0x18c) returned 0x1 [0077.723] WriteFile (in: hFile=0x18c, lpBuffer=0x28fca50*, nNumberOfBytesToWrite=0x9180, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28fca50*, lpNumberOfBytesWritten=0x27e588*=0x9180, lpOverlapped=0x0) returned 1 [0077.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\TGn3sa*bMqfiWjVi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\TGn3sa*bMqfiWjVi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0077.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0077.735] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 1 [0077.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0077.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0077.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0077.738] SetErrorMode (uMode=0x1) returned 0x0 [0077.738] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.738] GetFileType (hFile=0x18c) returned 0x1 [0077.738] SetErrorMode (uMode=0x0) returned 0x1 [0077.738] GetFileType (hFile=0x18c) returned 0x1 [0077.738] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0077.738] ReadFile (in: hFile=0x18c, lpBuffer=0x2907aa0, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2907aa0*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0077.747] CloseHandle (hObject=0x18c) returned 1 [0077.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0077.748] SetErrorMode (uMode=0x1) returned 0x0 [0077.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0077.748] SetErrorMode (uMode=0x0) returned 0x1 [0077.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0077.852] SetErrorMode (uMode=0x1) returned 0x0 [0077.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.854] GetFileType (hFile=0x18c) returned 0x1 [0077.854] SetErrorMode (uMode=0x0) returned 0x1 [0077.854] GetFileType (hFile=0x18c) returned 0x1 [0077.854] WriteFile (in: hFile=0x18c, lpBuffer=0x27adcf8*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27adcf8*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0077.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0077.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\EzUGGk8jqbIbyUw1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\EzUGGk8jqbIbyUw1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0077.855] SetErrorMode (uMode=0x1) returned 0x0 [0077.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff173870, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0077.855] SetErrorMode (uMode=0x0) returned 0x1 [0077.856] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\EzUGGk8jqbIbyUw1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\ezuggk8jqbibyuw1_encrypted_by.whiterose")) returned 1 [0077.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0077.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0077.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0077.963] SetErrorMode (uMode=0x1) returned 0x0 [0077.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0077.964] GetFileType (hFile=0x18c) returned 0x1 [0077.964] SetErrorMode (uMode=0x0) returned 0x1 [0077.964] GetFileType (hFile=0x18c) returned 0x1 [0077.964] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0077.964] ReadFile (in: hFile=0x18c, lpBuffer=0x27b79a0, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27b79a0*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0077.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0077.980] SetErrorMode (uMode=0x1) returned 0x0 [0077.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0077.980] SetErrorMode (uMode=0x0) returned 0x1 [0078.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0078.047] SetErrorMode (uMode=0x1) returned 0x0 [0078.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.048] GetFileType (hFile=0x18c) returned 0x1 [0078.048] SetErrorMode (uMode=0x0) returned 0x1 [0078.048] GetFileType (hFile=0x18c) returned 0x1 [0078.048] WriteFile (in: hFile=0x18c, lpBuffer=0x283d900*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x283d900*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0078.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0078.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\TdtCjPXInt8SpDj0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\TdtCjPXInt8SpDj0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0078.050] SetErrorMode (uMode=0x1) returned 0x0 [0078.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff33c8f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0078.050] SetErrorMode (uMode=0x0) returned 0x1 [0078.050] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\TdtCjPXInt8SpDj0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\tdtcjpxint8spdj0_encrypted_by.whiterose")) returned 1 [0078.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.150] SetErrorMode (uMode=0x1) returned 0x0 [0078.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.151] GetFileType (hFile=0x18c) returned 0x1 [0078.151] SetErrorMode (uMode=0x0) returned 0x1 [0078.151] GetFileType (hFile=0x18c) returned 0x1 [0078.151] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4fff9 [0078.152] ReadFile (in: hFile=0x18c, lpBuffer=0x12791b78, nNumberOfBytesToRead=0x4fff9, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12791b78*, lpNumberOfBytesRead=0x27e508*=0x4fff9, lpOverlapped=0x0) returned 1 [0078.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.160] SetErrorMode (uMode=0x1) returned 0x0 [0078.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9)) returned 1 [0078.160] SetErrorMode (uMode=0x0) returned 0x1 [0078.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.245] SetErrorMode (uMode=0x1) returned 0x0 [0078.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.249] GetFileType (hFile=0x18c) returned 0x1 [0078.249] SetErrorMode (uMode=0x0) returned 0x1 [0078.249] GetFileType (hFile=0x18c) returned 0x1 [0078.249] WriteFile (in: hFile=0x18c, lpBuffer=0x12972128*, nNumberOfBytesToWrite=0x50100, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12972128*, lpNumberOfBytesWritten=0x27e588*=0x50100, lpOverlapped=0x0) returned 1 [0078.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\A7axKfKwvrSSYVcW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\A7axKfKwvrSSYVcW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0078.254] SetErrorMode (uMode=0x1) returned 0x0 [0078.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff52bad0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x50100)) returned 1 [0078.255] SetErrorMode (uMode=0x0) returned 0x1 [0078.255] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\A7axKfKwvrSSYVcW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\a7axkfkwvrssyvcw_encrypted_by.whiterose")) returned 1 [0078.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0078.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0078.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0078.353] SetErrorMode (uMode=0x1) returned 0x0 [0078.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.353] GetFileType (hFile=0x18c) returned 0x1 [0078.353] SetErrorMode (uMode=0x0) returned 0x1 [0078.353] GetFileType (hFile=0x18c) returned 0x1 [0078.353] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0078.354] ReadFile (in: hFile=0x18c, lpBuffer=0x129c2258, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x129c2258*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0078.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0078.368] SetErrorMode (uMode=0x1) returned 0x0 [0078.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0078.368] SetErrorMode (uMode=0x0) returned 0x1 [0078.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0078.439] SetErrorMode (uMode=0x1) returned 0x0 [0078.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.440] GetFileType (hFile=0x18c) returned 0x1 [0078.440] SetErrorMode (uMode=0x0) returned 0x1 [0078.441] GetFileType (hFile=0x18c) returned 0x1 [0078.441] WriteFile (in: hFile=0x18c, lpBuffer=0x12760290*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12760290*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0078.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0078.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\DF6RoEHmCiqlwxiI_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\DF6RoEHmCiqlwxiI_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0078.443] SetErrorMode (uMode=0x1) returned 0x0 [0078.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff6f4b50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0078.443] SetErrorMode (uMode=0x0) returned 0x1 [0078.443] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\DF6RoEHmCiqlwxiI_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\df6roehmciqlwxii_encrypted_by.whiterose")) returned 1 [0078.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0078.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0078.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0078.540] SetErrorMode (uMode=0x1) returned 0x0 [0078.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.540] GetFileType (hFile=0x18c) returned 0x1 [0078.540] SetErrorMode (uMode=0x0) returned 0x1 [0078.541] GetFileType (hFile=0x18c) returned 0x1 [0078.541] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x10873 [0078.541] ReadFile (in: hFile=0x18c, lpBuffer=0x2752e48, nNumberOfBytesToRead=0x10873, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2752e48*, lpNumberOfBytesRead=0x27e508*=0x10873, lpOverlapped=0x0) returned 1 [0078.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0078.543] SetErrorMode (uMode=0x1) returned 0x0 [0078.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873)) returned 1 [0078.543] SetErrorMode (uMode=0x0) returned 0x1 [0078.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0078.612] SetErrorMode (uMode=0x1) returned 0x0 [0078.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.613] GetFileType (hFile=0x18c) returned 0x1 [0078.613] SetErrorMode (uMode=0x0) returned 0x1 [0078.613] GetFileType (hFile=0x18c) returned 0x1 [0078.613] WriteFile (in: hFile=0x18c, lpBuffer=0x2801010*, nNumberOfBytesToWrite=0x10980, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2801010*, lpNumberOfBytesWritten=0x27e588*=0x10980, lpOverlapped=0x0) returned 1 [0078.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0078.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\kwNMP5ubLfcl6Pbu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\kwNMP5ubLfcl6Pbu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0078.615] SetErrorMode (uMode=0x1) returned 0x0 [0078.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff897a70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x10980)) returned 1 [0078.615] SetErrorMode (uMode=0x0) returned 0x1 [0078.616] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\kwNMP5ubLfcl6Pbu_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\kwnmp5ublfcl6pbu_encrypted_by.whiterose")) returned 1 [0078.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0078.727] SetErrorMode (uMode=0x1) returned 0x0 [0078.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0078.728] GetFileType (hFile=0x18c) returned 0x1 [0078.728] SetErrorMode (uMode=0x0) returned 0x1 [0078.728] GetFileType (hFile=0x18c) returned 0x1 [0078.729] WriteFile (in: hFile=0x18c, lpBuffer=0x2824298*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2824298*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0078.731] WriteFile (in: hFile=0x18c, lpBuffer=0x2824298*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2824298*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0078.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", lpFilePart=0x0) returned 0x4f [0078.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", lpFilePart=0x0) returned 0x4f [0078.731] SetErrorMode (uMode=0x1) returned 0x0 [0078.731] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0078.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0078.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0078.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0078.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0078.732] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0078.732] SetErrorMode (uMode=0x0) returned 0x1 [0078.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", lpFilePart=0x0) returned 0x4f [0078.732] SetErrorMode (uMode=0x1) returned 0x0 [0078.732] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0078.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0078.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0078.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0078.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0078.733] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0078.733] SetErrorMode (uMode=0x0) returned 0x1 [0078.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0078.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0078.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0078.733] SetErrorMode (uMode=0x1) returned 0x0 [0078.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.734] GetFileType (hFile=0x18c) returned 0x1 [0078.734] SetErrorMode (uMode=0x0) returned 0x1 [0078.734] GetFileType (hFile=0x18c) returned 0x1 [0078.734] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xc4a8 [0078.734] ReadFile (in: hFile=0x18c, lpBuffer=0x282c4d0, nNumberOfBytesToRead=0xc4a8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x282c4d0*, lpNumberOfBytesRead=0x27e508*=0xc4a8, lpOverlapped=0x0) returned 1 [0078.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0078.736] SetErrorMode (uMode=0x1) returned 0x0 [0078.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8)) returned 1 [0078.736] SetErrorMode (uMode=0x0) returned 0x1 [0078.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0078.796] SetErrorMode (uMode=0x1) returned 0x0 [0078.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.797] GetFileType (hFile=0x18c) returned 0x1 [0078.797] SetErrorMode (uMode=0x0) returned 0x1 [0078.797] GetFileType (hFile=0x18c) returned 0x1 [0078.798] WriteFile (in: hFile=0x18c, lpBuffer=0x28c6428*, nNumberOfBytesToWrite=0xc5b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28c6428*, lpNumberOfBytesWritten=0x27e588*=0xc5b0, lpOverlapped=0x0) returned 1 [0078.799] CloseHandle (hObject=0x18c) returned 1 [0078.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0078.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\xHbUImJv2zI9jDNU_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\xHbUImJv2zI9jDNU_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0078.800] SetErrorMode (uMode=0x1) returned 0x0 [0078.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffa60af0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0xc5b0)) returned 1 [0078.801] SetErrorMode (uMode=0x0) returned 0x1 [0078.801] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\xHbUImJv2zI9jDNU_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\xhbuimjv2zi9jdnu_encrypted_by.whiterose")) returned 1 [0078.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.899] SetErrorMode (uMode=0x1) returned 0x0 [0078.899] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.899] GetFileType (hFile=0x18c) returned 0x1 [0078.899] SetErrorMode (uMode=0x0) returned 0x1 [0078.899] GetFileType (hFile=0x18c) returned 0x1 [0078.899] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9c53 [0078.900] ReadFile (in: hFile=0x18c, lpBuffer=0x28d4480, nNumberOfBytesToRead=0x9c53, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28d4480*, lpNumberOfBytesRead=0x27e508*=0x9c53, lpOverlapped=0x0) returned 1 [0078.901] CloseHandle (hObject=0x18c) returned 1 [0078.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.902] SetErrorMode (uMode=0x1) returned 0x0 [0078.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53)) returned 1 [0078.902] SetErrorMode (uMode=0x0) returned 0x1 [0078.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.985] SetErrorMode (uMode=0x1) returned 0x0 [0078.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0078.986] GetFileType (hFile=0x18c) returned 0x1 [0078.987] SetErrorMode (uMode=0x0) returned 0x1 [0078.987] GetFileType (hFile=0x18c) returned 0x1 [0078.987] WriteFile (in: hFile=0x18c, lpBuffer=0x2774278*, nNumberOfBytesToWrite=0x9d60, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2774278*, lpNumberOfBytesWritten=0x27e588*=0x9d60, lpOverlapped=0x0) returned 1 [0078.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0078.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\TSJpVNkhaDGCSBuH_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\TSJpVNkhaDGCSBuH_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0078.988] SetErrorMode (uMode=0x1) returned 0x0 [0078.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffc29b70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x9d60)) returned 1 [0078.988] SetErrorMode (uMode=0x0) returned 0x1 [0078.989] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\TSJpVNkhaDGCSBuH_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\tsjpvnkhadgcsbuh_encrypted_by.whiterose")) returned 1 [0079.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0079.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0079.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0079.102] SetErrorMode (uMode=0x1) returned 0x0 [0079.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.102] GetFileType (hFile=0x18c) returned 0x1 [0079.102] SetErrorMode (uMode=0x0) returned 0x1 [0079.102] GetFileType (hFile=0x18c) returned 0x1 [0079.102] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x19c87 [0079.103] ReadFile (in: hFile=0x18c, lpBuffer=0x127b6740, nNumberOfBytesToRead=0x19c87, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127b6740*, lpNumberOfBytesRead=0x27e508*=0x19c87, lpOverlapped=0x0) returned 1 [0079.106] CloseHandle (hObject=0x18c) returned 1 [0079.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0079.107] SetErrorMode (uMode=0x1) returned 0x0 [0079.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87)) returned 1 [0079.107] SetErrorMode (uMode=0x0) returned 0x1 [0079.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0079.212] SetErrorMode (uMode=0x1) returned 0x0 [0079.212] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.213] GetFileType (hFile=0x18c) returned 0x1 [0079.213] SetErrorMode (uMode=0x0) returned 0x1 [0079.214] GetFileType (hFile=0x18c) returned 0x1 [0079.214] WriteFile (in: hFile=0x18c, lpBuffer=0x12851840*, nNumberOfBytesToWrite=0x19d90, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12851840*, lpNumberOfBytesWritten=0x27e588*=0x19d90, lpOverlapped=0x0) returned 1 [0079.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0079.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\WqCJzci9hue8qcAt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\WqCJzci9hue8qcAt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0079.216] SetErrorMode (uMode=0x1) returned 0x0 [0079.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffe65010, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x19d90)) returned 1 [0079.216] SetErrorMode (uMode=0x0) returned 0x1 [0079.216] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\WqCJzci9hue8qcAt_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\wqcjzci9hue8qcat_encrypted_by.whiterose")) returned 1 [0079.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0079.321] SetErrorMode (uMode=0x1) returned 0x0 [0079.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0079.321] GetFileType (hFile=0x18c) returned 0x1 [0079.321] SetErrorMode (uMode=0x0) returned 0x1 [0079.321] GetFileType (hFile=0x18c) returned 0x1 [0079.323] WriteFile (in: hFile=0x18c, lpBuffer=0x27e31f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27e31f0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0079.324] WriteFile (in: hFile=0x18c, lpBuffer=0x27e31f0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27e31f0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0079.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", lpFilePart=0x0) returned 0x4f [0079.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", lpFilePart=0x0) returned 0x4f [0079.325] SetErrorMode (uMode=0x1) returned 0x0 [0079.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0079.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0079.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0079.328] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0079.329] SetErrorMode (uMode=0x0) returned 0x1 [0079.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", lpFilePart=0x0) returned 0x4f [0079.329] SetErrorMode (uMode=0x1) returned 0x0 [0079.329] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0079.330] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0079.331] SetErrorMode (uMode=0x0) returned 0x1 [0079.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0079.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0079.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0079.332] SetErrorMode (uMode=0x1) returned 0x0 [0079.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.333] GetFileType (hFile=0x18c) returned 0x1 [0079.333] SetErrorMode (uMode=0x0) returned 0x1 [0079.333] GetFileType (hFile=0x18c) returned 0x1 [0079.333] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x15fc8 [0079.334] ReadFile (in: hFile=0x18c, lpBuffer=0x1286b600, nNumberOfBytesToRead=0x15fc8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1286b600*, lpNumberOfBytesRead=0x27e508*=0x15fc8, lpOverlapped=0x0) returned 1 [0079.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0079.338] SetErrorMode (uMode=0x1) returned 0x0 [0079.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8)) returned 1 [0079.338] SetErrorMode (uMode=0x0) returned 0x1 [0079.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0079.408] SetErrorMode (uMode=0x1) returned 0x0 [0079.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.409] GetFileType (hFile=0x18c) returned 0x1 [0079.410] SetErrorMode (uMode=0x0) returned 0x1 [0079.410] GetFileType (hFile=0x18c) returned 0x1 [0079.410] WriteFile (in: hFile=0x18c, lpBuffer=0x128efa80*, nNumberOfBytesToWrite=0x160d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128efa80*, lpNumberOfBytesWritten=0x27e588*=0x160d0, lpOverlapped=0x0) returned 1 [0079.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0079.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Po1gZIYvfSRihCaC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Po1gZIYvfSRihCaC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0079.412] SetErrorMode (uMode=0x1) returned 0x0 [0079.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2e090, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160d0)) returned 1 [0079.412] SetErrorMode (uMode=0x0) returned 0x1 [0079.412] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Po1gZIYvfSRihCaC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\po1gziyvfsrihcac_encrypted_by.whiterose")) returned 1 [0079.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0079.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0079.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0079.523] SetErrorMode (uMode=0x1) returned 0x0 [0079.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.523] GetFileType (hFile=0x18c) returned 0x1 [0079.523] SetErrorMode (uMode=0x0) returned 0x1 [0079.523] GetFileType (hFile=0x18c) returned 0x1 [0079.524] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0079.524] ReadFile (in: hFile=0x18c, lpBuffer=0x2849228, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2849228*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0079.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0079.526] SetErrorMode (uMode=0x1) returned 0x0 [0079.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0079.526] SetErrorMode (uMode=0x0) returned 0x1 [0079.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0079.598] SetErrorMode (uMode=0x1) returned 0x0 [0079.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.599] GetFileType (hFile=0x18c) returned 0x1 [0079.599] SetErrorMode (uMode=0x0) returned 0x1 [0079.599] GetFileType (hFile=0x18c) returned 0x1 [0079.599] WriteFile (in: hFile=0x18c, lpBuffer=0x28dca68*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28dca68*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0079.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0079.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SYTAD8VlnJpNQego_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SYTAD8VlnJpNQego_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0079.601] SetErrorMode (uMode=0x1) returned 0x0 [0079.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x21d270, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0079.601] SetErrorMode (uMode=0x0) returned 0x1 [0079.601] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SYTAD8VlnJpNQego_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\sytad8vlnjpnqego_encrypted_by.whiterose")) returned 1 [0079.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.710] SetErrorMode (uMode=0x1) returned 0x0 [0079.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.711] GetFileType (hFile=0x18c) returned 0x1 [0079.711] SetErrorMode (uMode=0x0) returned 0x1 [0079.711] GetFileType (hFile=0x18c) returned 0x1 [0079.711] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0079.711] ReadFile (in: hFile=0x18c, lpBuffer=0x28e6710, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28e6710*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0079.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.713] SetErrorMode (uMode=0x1) returned 0x0 [0079.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0079.713] SetErrorMode (uMode=0x0) returned 0x1 [0079.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.780] SetErrorMode (uMode=0x1) returned 0x0 [0079.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.781] GetFileType (hFile=0x18c) returned 0x1 [0079.781] SetErrorMode (uMode=0x0) returned 0x1 [0079.781] GetFileType (hFile=0x18c) returned 0x1 [0079.781] WriteFile (in: hFile=0x18c, lpBuffer=0x27728c0*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27728c0*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0079.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\zPBv5wI*vHaMow*a_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\zPBv5wI*vHaMow*a_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0079.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0079.793] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 1 [0079.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.796] SetErrorMode (uMode=0x1) returned 0x0 [0079.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.796] GetFileType (hFile=0x18c) returned 0x1 [0079.796] SetErrorMode (uMode=0x0) returned 0x1 [0079.796] GetFileType (hFile=0x18c) returned 0x1 [0079.796] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xe736 [0079.796] ReadFile (in: hFile=0x18c, lpBuffer=0x2780028, nNumberOfBytesToRead=0xe736, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2780028*, lpNumberOfBytesRead=0x27e508*=0xe736, lpOverlapped=0x0) returned 1 [0079.798] CloseHandle (hObject=0x18c) returned 1 [0079.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.799] SetErrorMode (uMode=0x1) returned 0x0 [0079.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736)) returned 1 [0079.799] SetErrorMode (uMode=0x0) returned 0x1 [0079.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.902] SetErrorMode (uMode=0x1) returned 0x0 [0079.902] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.904] GetFileType (hFile=0x18c) returned 0x1 [0079.904] SetErrorMode (uMode=0x0) returned 0x1 [0079.904] GetFileType (hFile=0x18c) returned 0x1 [0079.904] WriteFile (in: hFile=0x18c, lpBuffer=0x2817cc8*, nNumberOfBytesToWrite=0xe840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2817cc8*, lpNumberOfBytesWritten=0x27e588*=0xe840, lpOverlapped=0x0) returned 1 [0079.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\jI9*hHFh*sDG28LT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\jI9*hHFh*sDG28LT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0079.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0079.908] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 1 [0079.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0079.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0079.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0079.911] SetErrorMode (uMode=0x1) returned 0x0 [0079.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0079.911] GetFileType (hFile=0x18c) returned 0x1 [0079.911] SetErrorMode (uMode=0x0) returned 0x1 [0079.911] GetFileType (hFile=0x18c) returned 0x1 [0079.911] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0079.913] ReadFile (in: hFile=0x18c, lpBuffer=0x12939ca0, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12939ca0*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0079.915] CloseHandle (hObject=0x18c) returned 1 [0079.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0079.917] SetErrorMode (uMode=0x1) returned 0x0 [0079.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0079.918] SetErrorMode (uMode=0x0) returned 0x1 [0080.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0080.036] SetErrorMode (uMode=0x1) returned 0x0 [0080.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.036] GetFileType (hFile=0x18c) returned 0x1 [0080.036] SetErrorMode (uMode=0x0) returned 0x1 [0080.036] GetFileType (hFile=0x18c) returned 0x1 [0080.036] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0080.039] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0080.039] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\M12DXPXtL2GyDkLA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\M12DXPXtL2GyDkLA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0080.039] SetErrorMode (uMode=0x1) returned 0x0 [0080.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6478f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0080.039] SetErrorMode (uMode=0x0) returned 0x1 [0080.039] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\M12DXPXtL2GyDkLA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\m12dxpxtl2gydkla_encrypted_by.whiterose")) returned 1 [0080.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0080.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0080.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0080.147] SetErrorMode (uMode=0x1) returned 0x0 [0080.147] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.147] GetFileType (hFile=0x18c) returned 0x1 [0080.147] SetErrorMode (uMode=0x0) returned 0x1 [0080.147] GetFileType (hFile=0x18c) returned 0x1 [0080.147] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2fe62 [0080.149] ReadFile (in: hFile=0x18c, lpBuffer=0x126eea48, nNumberOfBytesToRead=0x2fe62, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x126eea48*, lpNumberOfBytesRead=0x27e508*=0x2fe62, lpOverlapped=0x0) returned 1 [0080.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0080.178] SetErrorMode (uMode=0x1) returned 0x0 [0080.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62)) returned 1 [0080.178] SetErrorMode (uMode=0x0) returned 0x1 [0080.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0080.250] SetErrorMode (uMode=0x1) returned 0x0 [0080.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.252] GetFileType (hFile=0x18c) returned 0x1 [0080.252] SetErrorMode (uMode=0x0) returned 0x1 [0080.252] GetFileType (hFile=0x18c) returned 0x1 [0080.252] WriteFile (in: hFile=0x18c, lpBuffer=0x1280e688*, nNumberOfBytesToWrite=0x2ff70, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1280e688*, lpNumberOfBytesWritten=0x27e588*=0x2ff70, lpOverlapped=0x0) returned 1 [0080.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0080.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\S45MmqvozQ9XOS47_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\S45MmqvozQ9XOS47_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0080.256] SetErrorMode (uMode=0x1) returned 0x0 [0080.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x85cc30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff70)) returned 1 [0080.256] SetErrorMode (uMode=0x0) returned 0x1 [0080.256] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\S45MmqvozQ9XOS47_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\s45mmqvozq9xos47_encrypted_by.whiterose")) returned 1 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0080.365] SetErrorMode (uMode=0x1) returned 0x0 [0080.365] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0080.366] GetFileType (hFile=0x18c) returned 0x1 [0080.366] SetErrorMode (uMode=0x0) returned 0x1 [0080.366] GetFileType (hFile=0x18c) returned 0x1 [0080.367] WriteFile (in: hFile=0x18c, lpBuffer=0x27662a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27662a0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0080.369] WriteFile (in: hFile=0x18c, lpBuffer=0x27662a0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27662a0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0080.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", lpFilePart=0x0) returned 0x4f [0080.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", lpFilePart=0x0) returned 0x4f [0080.369] SetErrorMode (uMode=0x1) returned 0x0 [0080.369] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0080.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0080.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0080.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0080.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0080.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0080.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0080.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0080.372] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0080.372] SetErrorMode (uMode=0x0) returned 0x1 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", lpFilePart=0x0) returned 0x4f [0080.373] SetErrorMode (uMode=0x1) returned 0x0 [0080.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0080.374] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0080.375] SetErrorMode (uMode=0x0) returned 0x1 [0080.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0080.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0080.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0080.375] SetErrorMode (uMode=0x1) returned 0x0 [0080.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.377] GetFileType (hFile=0x18c) returned 0x1 [0080.377] SetErrorMode (uMode=0x0) returned 0x1 [0080.377] GetFileType (hFile=0x18c) returned 0x1 [0080.377] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xeac7 [0080.377] ReadFile (in: hFile=0x18c, lpBuffer=0x276e958, nNumberOfBytesToRead=0xeac7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x276e958*, lpNumberOfBytesRead=0x27e508*=0xeac7, lpOverlapped=0x0) returned 1 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0080.379] SetErrorMode (uMode=0x1) returned 0x0 [0080.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7)) returned 1 [0080.380] SetErrorMode (uMode=0x0) returned 0x1 [0080.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0080.448] SetErrorMode (uMode=0x1) returned 0x0 [0080.448] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.449] GetFileType (hFile=0x18c) returned 0x1 [0080.449] SetErrorMode (uMode=0x0) returned 0x1 [0080.449] GetFileType (hFile=0x18c) returned 0x1 [0080.449] WriteFile (in: hFile=0x18c, lpBuffer=0x2814a88*, nNumberOfBytesToWrite=0xebd0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2814a88*, lpNumberOfBytesWritten=0x27e588*=0xebd0, lpOverlapped=0x0) returned 1 [0080.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0080.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\hj0weODgFAtWmOlS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\hj0weODgFAtWmOlS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0080.451] SetErrorMode (uMode=0x1) returned 0x0 [0080.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa25cb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xebd0)) returned 1 [0080.451] SetErrorMode (uMode=0x0) returned 0x1 [0080.451] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\hj0weODgFAtWmOlS_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\hj0weodgfatwmols_encrypted_by.whiterose")) returned 1 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0080.561] SetErrorMode (uMode=0x1) returned 0x0 [0080.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.562] GetFileType (hFile=0x18c) returned 0x1 [0080.562] SetErrorMode (uMode=0x0) returned 0x1 [0080.562] GetFileType (hFile=0x18c) returned 0x1 [0080.562] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0080.562] ReadFile (in: hFile=0x18c, lpBuffer=0x28250d0, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28250d0*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0080.564] SetErrorMode (uMode=0x1) returned 0x0 [0080.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0080.564] SetErrorMode (uMode=0x0) returned 0x1 [0080.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0080.623] SetErrorMode (uMode=0x1) returned 0x0 [0080.624] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.625] GetFileType (hFile=0x18c) returned 0x1 [0080.625] SetErrorMode (uMode=0x0) returned 0x1 [0080.625] GetFileType (hFile=0x18c) returned 0x1 [0080.625] WriteFile (in: hFile=0x18c, lpBuffer=0x28b9030*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28b9030*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0080.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0080.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\YaQrFdq6OyeVV7eE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\YaQrFdq6OyeVV7eE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0080.626] SetErrorMode (uMode=0x1) returned 0x0 [0080.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbc8bd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0080.626] SetErrorMode (uMode=0x0) returned 0x1 [0080.627] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\YaQrFdq6OyeVV7eE_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\yaqrfdq6oyevv7ee_encrypted_by.whiterose")) returned 1 [0080.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0080.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0080.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0080.726] SetErrorMode (uMode=0x1) returned 0x0 [0080.726] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.726] GetFileType (hFile=0x18c) returned 0x1 [0080.726] SetErrorMode (uMode=0x0) returned 0x1 [0080.726] GetFileType (hFile=0x18c) returned 0x1 [0080.726] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0080.726] ReadFile (in: hFile=0x18c, lpBuffer=0x28c2cd8, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28c2cd8*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0080.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0080.728] SetErrorMode (uMode=0x1) returned 0x0 [0080.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0080.729] SetErrorMode (uMode=0x0) returned 0x1 [0080.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0080.789] SetErrorMode (uMode=0x1) returned 0x0 [0080.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.790] GetFileType (hFile=0x18c) returned 0x1 [0080.790] SetErrorMode (uMode=0x0) returned 0x1 [0080.791] GetFileType (hFile=0x18c) returned 0x1 [0080.791] WriteFile (in: hFile=0x18c, lpBuffer=0x2767bf8*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2767bf8*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0080.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0080.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\ilnWSF4RXBdqt5Wr_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\ilnWSF4RXBdqt5Wr_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0080.792] SetErrorMode (uMode=0x1) returned 0x0 [0080.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd6baf0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0080.792] SetErrorMode (uMode=0x0) returned 0x1 [0080.792] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\ilnWSF4RXBdqt5Wr_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\ilnwsf4rxbdqt5wr_encrypted_by.whiterose")) returned 1 [0080.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.896] SetErrorMode (uMode=0x1) returned 0x0 [0080.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.896] GetFileType (hFile=0x18c) returned 0x1 [0080.896] SetErrorMode (uMode=0x0) returned 0x1 [0080.896] GetFileType (hFile=0x18c) returned 0x1 [0080.896] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xa118 [0080.896] ReadFile (in: hFile=0x18c, lpBuffer=0x2774f00, nNumberOfBytesToRead=0xa118, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2774f00*, lpNumberOfBytesRead=0x27e508*=0xa118, lpOverlapped=0x0) returned 1 [0080.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.898] SetErrorMode (uMode=0x1) returned 0x0 [0080.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118)) returned 1 [0080.898] SetErrorMode (uMode=0x0) returned 0x1 [0080.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.964] SetErrorMode (uMode=0x1) returned 0x0 [0080.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.965] GetFileType (hFile=0x18c) returned 0x1 [0080.965] SetErrorMode (uMode=0x0) returned 0x1 [0080.965] GetFileType (hFile=0x18c) returned 0x1 [0080.965] WriteFile (in: hFile=0x18c, lpBuffer=0x2816d80*, nNumberOfBytesToWrite=0xa220, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2816d80*, lpNumberOfBytesWritten=0x27e588*=0xa220, lpOverlapped=0x0) returned 1 [0080.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*PBExY8*e3WIIykR_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*PBExY8*e3WIIykR_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0080.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0080.972] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 1 [0080.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0080.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0080.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0080.975] SetErrorMode (uMode=0x1) returned 0x0 [0080.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0080.975] GetFileType (hFile=0x18c) returned 0x1 [0080.975] SetErrorMode (uMode=0x0) returned 0x1 [0080.976] GetFileType (hFile=0x18c) returned 0x1 [0080.976] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0080.977] ReadFile (in: hFile=0x18c, lpBuffer=0x12872e68, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12872e68*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0080.979] CloseHandle (hObject=0x18c) returned 1 [0080.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0080.981] SetErrorMode (uMode=0x1) returned 0x0 [0080.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0080.981] SetErrorMode (uMode=0x0) returned 0x1 [0081.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0081.083] SetErrorMode (uMode=0x1) returned 0x0 [0081.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.085] GetFileType (hFile=0x18c) returned 0x1 [0081.085] SetErrorMode (uMode=0x0) returned 0x1 [0081.085] GetFileType (hFile=0x18c) returned 0x1 [0081.085] WriteFile (in: hFile=0x18c, lpBuffer=0x1291d208*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1291d208*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0081.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0081.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\VI9iK05hTNpBk9Vz_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\VI9iK05hTNpBk9Vz_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0081.088] SetErrorMode (uMode=0x1) returned 0x0 [0081.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x103f510, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0081.088] SetErrorMode (uMode=0x0) returned 0x1 [0081.088] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\VI9iK05hTNpBk9Vz_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\vi9ik05htnpbk9vz_encrypted_by.whiterose")) returned 1 [0081.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0081.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0081.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0081.192] SetErrorMode (uMode=0x1) returned 0x0 [0081.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.193] GetFileType (hFile=0x18c) returned 0x1 [0081.193] SetErrorMode (uMode=0x0) returned 0x1 [0081.193] GetFileType (hFile=0x18c) returned 0x1 [0081.193] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1ac4e [0081.194] ReadFile (in: hFile=0x18c, lpBuffer=0x12939838, nNumberOfBytesToRead=0x1ac4e, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12939838*, lpNumberOfBytesRead=0x27e508*=0x1ac4e, lpOverlapped=0x0) returned 1 [0081.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0081.197] SetErrorMode (uMode=0x1) returned 0x0 [0081.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e)) returned 1 [0081.197] SetErrorMode (uMode=0x0) returned 0x1 [0081.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0081.275] SetErrorMode (uMode=0x1) returned 0x0 [0081.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.277] GetFileType (hFile=0x18c) returned 0x1 [0081.277] SetErrorMode (uMode=0x0) returned 0x1 [0081.277] GetFileType (hFile=0x18c) returned 0x1 [0081.277] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x1ad50, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x1ad50, lpOverlapped=0x0) returned 1 [0081.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0081.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\OGvPaEJERa2ObxwJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\OGvPaEJERa2ObxwJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0081.279] SetErrorMode (uMode=0x1) returned 0x0 [0081.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1208590, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad50)) returned 1 [0081.279] SetErrorMode (uMode=0x0) returned 0x1 [0081.279] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\OGvPaEJERa2ObxwJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\ogvpaejera2obxwj_encrypted_by.whiterose")) returned 1 [0081.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0081.379] SetErrorMode (uMode=0x1) returned 0x0 [0081.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0081.379] GetFileType (hFile=0x18c) returned 0x1 [0081.379] SetErrorMode (uMode=0x0) returned 0x1 [0081.379] GetFileType (hFile=0x18c) returned 0x1 [0081.381] WriteFile (in: hFile=0x18c, lpBuffer=0x2709580*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2709580*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0081.382] WriteFile (in: hFile=0x18c, lpBuffer=0x2709580*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2709580*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0081.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", lpFilePart=0x0) returned 0x4f [0081.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", lpFilePart=0x0) returned 0x4f [0081.383] SetErrorMode (uMode=0x1) returned 0x0 [0081.383] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0081.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0081.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0081.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0081.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0081.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0081.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0081.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0081.386] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0081.387] SetErrorMode (uMode=0x0) returned 0x1 [0081.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", lpFilePart=0x0) returned 0x4f [0081.387] SetErrorMode (uMode=0x1) returned 0x0 [0081.387] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0081.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0081.388] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0081.389] SetErrorMode (uMode=0x0) returned 0x1 [0081.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0081.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0081.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0081.389] SetErrorMode (uMode=0x1) returned 0x0 [0081.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.391] GetFileType (hFile=0x18c) returned 0x1 [0081.391] SetErrorMode (uMode=0x0) returned 0x1 [0081.391] GetFileType (hFile=0x18c) returned 0x1 [0081.391] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xa85d [0081.391] ReadFile (in: hFile=0x18c, lpBuffer=0x2711c38, nNumberOfBytesToRead=0xa85d, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2711c38*, lpNumberOfBytesRead=0x27e508*=0xa85d, lpOverlapped=0x0) returned 1 [0081.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0081.393] SetErrorMode (uMode=0x1) returned 0x0 [0081.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d)) returned 1 [0081.394] SetErrorMode (uMode=0x0) returned 0x1 [0081.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0081.464] SetErrorMode (uMode=0x1) returned 0x0 [0081.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.465] GetFileType (hFile=0x18c) returned 0x1 [0081.465] SetErrorMode (uMode=0x0) returned 0x1 [0081.465] GetFileType (hFile=0x18c) returned 0x1 [0081.465] WriteFile (in: hFile=0x18c, lpBuffer=0x27a3078*, nNumberOfBytesToWrite=0xa960, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a3078*, lpNumberOfBytesWritten=0x27e588*=0xa960, lpOverlapped=0x0) returned 1 [0081.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0081.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\2QUX4WYY8vwzrl89_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\2QUX4WYY8vwzrl89_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0081.467] SetErrorMode (uMode=0x1) returned 0x0 [0081.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x13d1610, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xa960)) returned 1 [0081.467] SetErrorMode (uMode=0x0) returned 0x1 [0081.467] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\2QUX4WYY8vwzrl89_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\2qux4wyy8vwzrl89_encrypted_by.whiterose")) returned 1 [0081.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0081.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0081.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0081.567] SetErrorMode (uMode=0x1) returned 0x0 [0081.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.567] GetFileType (hFile=0x18c) returned 0x1 [0081.567] SetErrorMode (uMode=0x0) returned 0x1 [0081.567] GetFileType (hFile=0x18c) returned 0x1 [0081.567] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0081.567] ReadFile (in: hFile=0x18c, lpBuffer=0x27af450, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27af450*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0081.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0081.569] SetErrorMode (uMode=0x1) returned 0x0 [0081.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0081.569] SetErrorMode (uMode=0x0) returned 0x1 [0081.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0081.629] SetErrorMode (uMode=0x1) returned 0x0 [0081.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.630] GetFileType (hFile=0x18c) returned 0x1 [0081.630] SetErrorMode (uMode=0x0) returned 0x1 [0081.630] GetFileType (hFile=0x18c) returned 0x1 [0081.631] WriteFile (in: hFile=0x18c, lpBuffer=0x2843478*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2843478*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0081.632] CloseHandle (hObject=0x18c) returned 1 [0081.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0081.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\IICStlLMfshzZD2V_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\IICStlLMfshzZD2V_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0081.633] SetErrorMode (uMode=0x1) returned 0x0 [0081.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1574530, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0081.633] SetErrorMode (uMode=0x0) returned 0x1 [0081.633] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\IICStlLMfshzZD2V_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\iicstllmfshzzd2v_encrypted_by.whiterose")) returned 1 [0081.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0081.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0081.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0081.739] SetErrorMode (uMode=0x1) returned 0x0 [0081.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.739] GetFileType (hFile=0x18c) returned 0x1 [0081.739] SetErrorMode (uMode=0x0) returned 0x1 [0081.739] GetFileType (hFile=0x18c) returned 0x1 [0081.739] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0081.739] ReadFile (in: hFile=0x18c, lpBuffer=0x284d120, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x284d120*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0081.741] CloseHandle (hObject=0x18c) returned 1 [0081.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0081.743] SetErrorMode (uMode=0x1) returned 0x0 [0081.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0081.743] SetErrorMode (uMode=0x0) returned 0x1 [0081.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0081.827] SetErrorMode (uMode=0x1) returned 0x0 [0081.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.829] GetFileType (hFile=0x18c) returned 0x1 [0081.829] SetErrorMode (uMode=0x0) returned 0x1 [0081.829] GetFileType (hFile=0x18c) returned 0x1 [0081.829] WriteFile (in: hFile=0x18c, lpBuffer=0x28f2020*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28f2020*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0081.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0081.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\4T0mGNnzpwg6xBII_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\4T0mGNnzpwg6xBII_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0081.831] SetErrorMode (uMode=0x1) returned 0x0 [0081.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x173d5b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0081.831] SetErrorMode (uMode=0x0) returned 0x1 [0081.831] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\4T0mGNnzpwg6xBII_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\4t0mgnnzpwg6xbii_encrypted_by.whiterose")) returned 1 [0081.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0081.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0081.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0081.926] SetErrorMode (uMode=0x1) returned 0x0 [0081.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0081.926] GetFileType (hFile=0x18c) returned 0x1 [0081.926] SetErrorMode (uMode=0x0) returned 0x1 [0081.926] GetFileType (hFile=0x18c) returned 0x1 [0081.926] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb9dd [0081.926] ReadFile (in: hFile=0x18c, lpBuffer=0x28ff328, nNumberOfBytesToRead=0xb9dd, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28ff328*, lpNumberOfBytesRead=0x27e508*=0xb9dd, lpOverlapped=0x0) returned 1 [0081.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0081.928] SetErrorMode (uMode=0x1) returned 0x0 [0081.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd)) returned 1 [0081.929] SetErrorMode (uMode=0x0) returned 0x1 [0082.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0082.020] SetErrorMode (uMode=0x1) returned 0x0 [0082.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.021] GetFileType (hFile=0x18c) returned 0x1 [0082.021] SetErrorMode (uMode=0x0) returned 0x1 [0082.021] GetFileType (hFile=0x18c) returned 0x1 [0082.021] WriteFile (in: hFile=0x18c, lpBuffer=0x27949a0*, nNumberOfBytesToWrite=0xbae0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27949a0*, lpNumberOfBytesWritten=0x27e588*=0xbae0, lpOverlapped=0x0) returned 1 [0082.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0082.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\g4yuy6BTFQMQNpi9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\g4yuy6BTFQMQNpi9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0082.023] SetErrorMode (uMode=0x1) returned 0x0 [0082.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x192c790, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xbae0)) returned 1 [0082.023] SetErrorMode (uMode=0x0) returned 0x1 [0082.024] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\g4yuy6BTFQMQNpi9_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\g4yuy6btfqmqnpi9_encrypted_by.whiterose")) returned 1 [0082.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0082.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0082.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0082.128] SetErrorMode (uMode=0x1) returned 0x0 [0082.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.129] GetFileType (hFile=0x18c) returned 0x1 [0082.129] SetErrorMode (uMode=0x0) returned 0x1 [0082.129] GetFileType (hFile=0x18c) returned 0x1 [0082.129] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0082.130] ReadFile (in: hFile=0x18c, lpBuffer=0x12730ac8, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12730ac8*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0082.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0082.133] SetErrorMode (uMode=0x1) returned 0x0 [0082.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0082.133] SetErrorMode (uMode=0x0) returned 0x1 [0082.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0082.201] SetErrorMode (uMode=0x1) returned 0x0 [0082.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.202] GetFileType (hFile=0x18c) returned 0x1 [0082.202] SetErrorMode (uMode=0x0) returned 0x1 [0082.203] GetFileType (hFile=0x18c) returned 0x1 [0082.203] WriteFile (in: hFile=0x18c, lpBuffer=0x127dae68*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127dae68*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0082.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\NjLCLC8dEkAyEvHg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\NjLCLC8dEkAyEvHg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0082.205] SetErrorMode (uMode=0x1) returned 0x0 [0082.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1acf6b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0082.205] SetErrorMode (uMode=0x0) returned 0x1 [0082.206] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\NjLCLC8dEkAyEvHg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\njlclc8dekayevhg_encrypted_by.whiterose")) returned 1 [0082.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.316] SetErrorMode (uMode=0x1) returned 0x0 [0082.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.316] GetFileType (hFile=0x18c) returned 0x1 [0082.316] SetErrorMode (uMode=0x0) returned 0x1 [0082.316] GetFileType (hFile=0x18c) returned 0x1 [0082.316] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x14758 [0082.316] ReadFile (in: hFile=0x18c, lpBuffer=0x27f2a80, nNumberOfBytesToRead=0x14758, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27f2a80*, lpNumberOfBytesRead=0x27e508*=0x14758, lpOverlapped=0x0) returned 1 [0082.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.319] SetErrorMode (uMode=0x1) returned 0x0 [0082.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758)) returned 1 [0082.319] SetErrorMode (uMode=0x0) returned 0x1 [0082.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.384] SetErrorMode (uMode=0x1) returned 0x0 [0082.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.386] GetFileType (hFile=0x18c) returned 0x1 [0082.386] SetErrorMode (uMode=0x0) returned 0x1 [0082.386] GetFileType (hFile=0x18c) returned 0x1 [0082.386] WriteFile (in: hFile=0x18c, lpBuffer=0x28b3f18*, nNumberOfBytesToWrite=0x14860, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28b3f18*, lpNumberOfBytesWritten=0x27e588*=0x14860, lpOverlapped=0x0) returned 1 [0082.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\2t*KDUlxVE7kTjhG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\2t*KDUlxVE7kTjhG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0082.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0082.394] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 1 [0082.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0082.398] SetErrorMode (uMode=0x1) returned 0x0 [0082.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0082.399] GetFileType (hFile=0x18c) returned 0x1 [0082.399] SetErrorMode (uMode=0x0) returned 0x1 [0082.399] GetFileType (hFile=0x18c) returned 0x1 [0082.401] WriteFile (in: hFile=0x18c, lpBuffer=0x28db4f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x28db4f0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0082.402] WriteFile (in: hFile=0x18c, lpBuffer=0x28db4f0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x28db4f0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0082.402] CloseHandle (hObject=0x18c) returned 1 [0082.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", lpFilePart=0x0) returned 0x4f [0082.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", lpFilePart=0x0) returned 0x4f [0082.403] SetErrorMode (uMode=0x1) returned 0x0 [0082.403] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0082.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0082.406] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0082.407] SetErrorMode (uMode=0x0) returned 0x1 [0082.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", lpFilePart=0x0) returned 0x4f [0082.407] SetErrorMode (uMode=0x1) returned 0x0 [0082.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0082.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0082.409] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0082.410] SetErrorMode (uMode=0x0) returned 0x1 [0082.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0082.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0082.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0082.410] SetErrorMode (uMode=0x1) returned 0x0 [0082.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.411] GetFileType (hFile=0x18c) returned 0x1 [0082.411] SetErrorMode (uMode=0x0) returned 0x1 [0082.411] GetFileType (hFile=0x18c) returned 0x1 [0082.411] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1e146 [0082.413] ReadFile (in: hFile=0x18c, lpBuffer=0x12820568, nNumberOfBytesToRead=0x1e146, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12820568*, lpNumberOfBytesRead=0x27e508*=0x1e146, lpOverlapped=0x0) returned 1 [0082.415] CloseHandle (hObject=0x18c) returned 1 [0082.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0082.417] SetErrorMode (uMode=0x1) returned 0x0 [0082.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146)) returned 1 [0082.417] SetErrorMode (uMode=0x0) returned 0x1 [0082.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0082.528] SetErrorMode (uMode=0x1) returned 0x0 [0082.528] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.530] GetFileType (hFile=0x18c) returned 0x1 [0082.530] SetErrorMode (uMode=0x0) returned 0x1 [0082.530] GetFileType (hFile=0x18c) returned 0x1 [0082.530] WriteFile (in: hFile=0x18c, lpBuffer=0x128d52e8*, nNumberOfBytesToWrite=0x1e250, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128d52e8*, lpNumberOfBytesWritten=0x27e588*=0x1e250, lpOverlapped=0x0) returned 1 [0082.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0082.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\ALaADa2cpXCWPHnL_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\ALaADa2cpXCWPHnL_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0082.533] SetErrorMode (uMode=0x1) returned 0x0 [0082.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1def390, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1e250)) returned 1 [0082.533] SetErrorMode (uMode=0x0) returned 0x1 [0082.533] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\ALaADa2cpXCWPHnL_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\alaada2cpxcwphnl_encrypted_by.whiterose")) returned 1 [0082.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0082.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0082.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0082.643] SetErrorMode (uMode=0x1) returned 0x0 [0082.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.644] GetFileType (hFile=0x18c) returned 0x1 [0082.644] SetErrorMode (uMode=0x0) returned 0x1 [0082.644] GetFileType (hFile=0x18c) returned 0x1 [0082.644] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0082.644] ReadFile (in: hFile=0x18c, lpBuffer=0x272cde8, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x272cde8*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0082.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0082.646] SetErrorMode (uMode=0x1) returned 0x0 [0082.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0082.646] SetErrorMode (uMode=0x0) returned 0x1 [0082.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0082.712] SetErrorMode (uMode=0x1) returned 0x0 [0082.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.713] GetFileType (hFile=0x18c) returned 0x1 [0082.713] SetErrorMode (uMode=0x0) returned 0x1 [0082.713] GetFileType (hFile=0x18c) returned 0x1 [0082.713] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0630*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27c0630*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0082.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0082.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\QqJxhFRBme2CGqaU_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\QqJxhFRBme2CGqaU_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0082.715] SetErrorMode (uMode=0x1) returned 0x0 [0082.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1fb8410, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0082.715] SetErrorMode (uMode=0x0) returned 0x1 [0082.715] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\QqJxhFRBme2CGqaU_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\qqjxhfrbme2cgqau_encrypted_by.whiterose")) returned 1 [0082.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0082.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0082.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0082.814] SetErrorMode (uMode=0x1) returned 0x0 [0082.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0082.815] GetFileType (hFile=0x18c) returned 0x1 [0082.815] SetErrorMode (uMode=0x0) returned 0x1 [0082.815] GetFileType (hFile=0x18c) returned 0x1 [0082.815] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0082.815] ReadFile (in: hFile=0x18c, lpBuffer=0x27ca2d8, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27ca2d8*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0083.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0083.238] SetErrorMode (uMode=0x1) returned 0x0 [0083.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0083.238] SetErrorMode (uMode=0x0) returned 0x1 [0083.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0083.306] SetErrorMode (uMode=0x1) returned 0x0 [0083.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.308] GetFileType (hFile=0x18c) returned 0x1 [0083.308] SetErrorMode (uMode=0x0) returned 0x1 [0083.308] GetFileType (hFile=0x18c) returned 0x1 [0083.308] WriteFile (in: hFile=0x18c, lpBuffer=0x28564b8*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28564b8*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0083.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0083.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HTXfWZWTEFJUWVzj_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HTXfWZWTEFJUWVzj_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0083.310] SetErrorMode (uMode=0x1) returned 0x0 [0083.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x255f850, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0083.310] SetErrorMode (uMode=0x0) returned 0x1 [0083.310] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HTXfWZWTEFJUWVzj_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\htxfwzwtefjuwvzj_encrypted_by.whiterose")) returned 1 [0083.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0083.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0083.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0083.408] SetErrorMode (uMode=0x1) returned 0x0 [0083.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.408] GetFileType (hFile=0x18c) returned 0x1 [0083.408] SetErrorMode (uMode=0x0) returned 0x1 [0083.408] GetFileType (hFile=0x18c) returned 0x1 [0083.408] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x12fb3 [0083.408] ReadFile (in: hFile=0x18c, lpBuffer=0x28637c0, nNumberOfBytesToRead=0x12fb3, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28637c0*, lpNumberOfBytesRead=0x27e508*=0x12fb3, lpOverlapped=0x0) returned 1 [0083.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0083.412] SetErrorMode (uMode=0x1) returned 0x0 [0083.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3)) returned 1 [0083.412] SetErrorMode (uMode=0x0) returned 0x1 [0083.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0083.479] SetErrorMode (uMode=0x1) returned 0x0 [0083.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.480] GetFileType (hFile=0x18c) returned 0x1 [0083.480] SetErrorMode (uMode=0x0) returned 0x1 [0083.481] GetFileType (hFile=0x18c) returned 0x1 [0083.481] WriteFile (in: hFile=0x18c, lpBuffer=0x2911d98*, nNumberOfBytesToWrite=0x130c0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2911d98*, lpNumberOfBytesWritten=0x27e588*=0x130c0, lpOverlapped=0x0) returned 1 [0083.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0083.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\uTsPFcDn2kBSAqFF_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\uTsPFcDn2kBSAqFF_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0083.483] SetErrorMode (uMode=0x1) returned 0x0 [0083.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2702770, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x130c0)) returned 1 [0083.483] SetErrorMode (uMode=0x0) returned 0x1 [0083.483] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\uTsPFcDn2kBSAqFF_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\utspfcdn2kbsaqff_encrypted_by.whiterose")) returned 1 [0083.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0083.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0083.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0083.579] SetErrorMode (uMode=0x1) returned 0x0 [0083.579] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.579] GetFileType (hFile=0x18c) returned 0x1 [0083.579] SetErrorMode (uMode=0x0) returned 0x1 [0083.579] GetFileType (hFile=0x18c) returned 0x1 [0083.579] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0083.580] ReadFile (in: hFile=0x18c, lpBuffer=0x12930788, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12930788*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0083.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0083.584] SetErrorMode (uMode=0x1) returned 0x0 [0083.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0083.584] SetErrorMode (uMode=0x0) returned 0x1 [0083.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0083.666] SetErrorMode (uMode=0x1) returned 0x0 [0083.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.667] GetFileType (hFile=0x18c) returned 0x1 [0083.667] SetErrorMode (uMode=0x0) returned 0x1 [0083.667] GetFileType (hFile=0x18c) returned 0x1 [0083.667] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0083.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0083.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\P5ZjSDeaaoAm0ols_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\P5ZjSDeaaoAm0ols_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0083.670] SetErrorMode (uMode=0x1) returned 0x0 [0083.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x28cb7f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0083.670] SetErrorMode (uMode=0x0) returned 0x1 [0083.670] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\P5ZjSDeaaoAm0ols_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\p5zjsdeaaoam0ols_encrypted_by.whiterose")) returned 1 [0083.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0083.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0083.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0083.766] SetErrorMode (uMode=0x1) returned 0x0 [0083.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.767] GetFileType (hFile=0x18c) returned 0x1 [0083.767] SetErrorMode (uMode=0x0) returned 0x1 [0083.767] GetFileType (hFile=0x18c) returned 0x1 [0083.767] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x26254 [0083.768] ReadFile (in: hFile=0x18c, lpBuffer=0x126eea48, nNumberOfBytesToRead=0x26254, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x126eea48*, lpNumberOfBytesRead=0x27e508*=0x26254, lpOverlapped=0x0) returned 1 [0083.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0083.772] SetErrorMode (uMode=0x1) returned 0x0 [0083.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254)) returned 1 [0083.772] SetErrorMode (uMode=0x0) returned 0x1 [0083.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0083.840] SetErrorMode (uMode=0x1) returned 0x0 [0083.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.842] GetFileType (hFile=0x18c) returned 0x1 [0083.842] SetErrorMode (uMode=0x0) returned 0x1 [0083.842] GetFileType (hFile=0x18c) returned 0x1 [0083.842] WriteFile (in: hFile=0x18c, lpBuffer=0x127d3e28*, nNumberOfBytesToWrite=0x26360, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127d3e28*, lpNumberOfBytesWritten=0x27e588*=0x26360, lpOverlapped=0x0) returned 1 [0083.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0083.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\wWHei53ZillmHGfe_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\wWHei53ZillmHGfe_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0083.845] SetErrorMode (uMode=0x1) returned 0x0 [0083.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2a94870, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x26360)) returned 1 [0083.845] SetErrorMode (uMode=0x0) returned 0x1 [0083.845] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\wWHei53ZillmHGfe_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\wwhei53zillmhgfe_encrypted_by.whiterose")) returned 1 [0083.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0083.953] SetErrorMode (uMode=0x1) returned 0x0 [0083.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0083.954] GetFileType (hFile=0x18c) returned 0x1 [0083.954] SetErrorMode (uMode=0x0) returned 0x1 [0083.954] GetFileType (hFile=0x18c) returned 0x1 [0083.956] WriteFile (in: hFile=0x18c, lpBuffer=0x27662a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27662a0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0083.957] WriteFile (in: hFile=0x18c, lpBuffer=0x27662a0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27662a0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0083.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", lpFilePart=0x0) returned 0x4f [0083.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", lpFilePart=0x0) returned 0x4f [0083.958] SetErrorMode (uMode=0x1) returned 0x0 [0083.958] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0083.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0083.958] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0083.958] SetErrorMode (uMode=0x0) returned 0x1 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", lpFilePart=0x0) returned 0x4f [0083.959] SetErrorMode (uMode=0x1) returned 0x0 [0083.959] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0083.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0083.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0083.960] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0083.960] SetErrorMode (uMode=0x0) returned 0x1 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0083.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0083.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0083.960] SetErrorMode (uMode=0x1) returned 0x0 [0083.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0083.975] GetFileType (hFile=0x18c) returned 0x1 [0083.975] SetErrorMode (uMode=0x0) returned 0x1 [0083.975] GetFileType (hFile=0x18c) returned 0x1 [0083.975] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xe7e1 [0083.975] ReadFile (in: hFile=0x18c, lpBuffer=0x276e4d8, nNumberOfBytesToRead=0xe7e1, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x276e4d8*, lpNumberOfBytesRead=0x27e508*=0xe7e1, lpOverlapped=0x0) returned 1 [0083.977] CloseHandle (hObject=0x18c) returned 1 [0083.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0083.978] SetErrorMode (uMode=0x1) returned 0x0 [0083.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1)) returned 1 [0083.978] SetErrorMode (uMode=0x0) returned 0x1 [0084.039] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.039] SetErrorMode (uMode=0x1) returned 0x0 [0084.039] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.040] GetFileType (hFile=0x18c) returned 0x1 [0084.040] SetErrorMode (uMode=0x0) returned 0x1 [0084.040] GetFileType (hFile=0x18c) returned 0x1 [0084.041] WriteFile (in: hFile=0x18c, lpBuffer=0x28134f0*, nNumberOfBytesToWrite=0xe8f0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28134f0*, lpNumberOfBytesWritten=0x27e588*=0xe8f0, lpOverlapped=0x0) returned 1 [0084.042] CloseHandle (hObject=0x18c) returned 1 [0084.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\K78malgiyFR0WuQE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\K78malgiyFR0WuQE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0084.044] SetErrorMode (uMode=0x1) returned 0x0 [0084.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2c5d8f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xe8f0)) returned 1 [0084.044] SetErrorMode (uMode=0x0) returned 0x1 [0084.044] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\K78malgiyFR0WuQE_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\k78malgiyfr0wuqe_encrypted_by.whiterose")) returned 1 [0084.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.140] SetErrorMode (uMode=0x1) returned 0x0 [0084.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.141] GetFileType (hFile=0x18c) returned 0x1 [0084.141] SetErrorMode (uMode=0x0) returned 0x1 [0084.141] GetFileType (hFile=0x18c) returned 0x1 [0084.141] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x9cbb [0084.141] ReadFile (in: hFile=0x18c, lpBuffer=0x2823888, nNumberOfBytesToRead=0x9cbb, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2823888*, lpNumberOfBytesRead=0x27e508*=0x9cbb, lpOverlapped=0x0) returned 1 [0084.143] CloseHandle (hObject=0x18c) returned 1 [0084.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.144] SetErrorMode (uMode=0x1) returned 0x0 [0084.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb)) returned 1 [0084.144] SetErrorMode (uMode=0x0) returned 0x1 [0084.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.204] SetErrorMode (uMode=0x1) returned 0x0 [0084.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.205] GetFileType (hFile=0x18c) returned 0x1 [0084.205] SetErrorMode (uMode=0x0) returned 0x1 [0084.205] GetFileType (hFile=0x18c) returned 0x1 [0084.205] WriteFile (in: hFile=0x18c, lpBuffer=0x28c3a88*, nNumberOfBytesToWrite=0x9dc0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28c3a88*, lpNumberOfBytesWritten=0x27e588*=0x9dc0, lpOverlapped=0x0) returned 1 [0084.207] CloseHandle (hObject=0x18c) returned 1 [0084.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\qYPgBM49HDD9uMKq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\qYPgBM49HDD9uMKq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0084.208] SetErrorMode (uMode=0x1) returned 0x0 [0084.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2e00810, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc0)) returned 1 [0084.208] SetErrorMode (uMode=0x0) returned 0x1 [0084.208] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\qYPgBM49HDD9uMKq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\qypgbm49hdd9umkq_encrypted_by.whiterose")) returned 1 [0084.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.312] SetErrorMode (uMode=0x1) returned 0x0 [0084.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.312] GetFileType (hFile=0x18c) returned 0x1 [0084.312] SetErrorMode (uMode=0x0) returned 0x1 [0084.312] GetFileType (hFile=0x18c) returned 0x1 [0084.313] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x16f99 [0084.313] ReadFile (in: hFile=0x18c, lpBuffer=0x128173a8, nNumberOfBytesToRead=0x16f99, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128173a8*, lpNumberOfBytesRead=0x27e508*=0x16f99, lpOverlapped=0x0) returned 1 [0084.316] CloseHandle (hObject=0x18c) returned 1 [0084.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.317] SetErrorMode (uMode=0x1) returned 0x0 [0084.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99)) returned 1 [0084.317] SetErrorMode (uMode=0x0) returned 0x1 [0084.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.417] SetErrorMode (uMode=0x1) returned 0x0 [0084.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.419] GetFileType (hFile=0x18c) returned 0x1 [0084.419] SetErrorMode (uMode=0x0) returned 0x1 [0084.419] GetFileType (hFile=0x18c) returned 0x1 [0084.419] WriteFile (in: hFile=0x18c, lpBuffer=0x128a1718*, nNumberOfBytesToWrite=0x170a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128a1718*, lpNumberOfBytesWritten=0x27e588*=0x170a0, lpOverlapped=0x0) returned 1 [0084.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\M0lMOcFURGCD4Kqd_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\M0lMOcFURGCD4Kqd_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0084.422] SetErrorMode (uMode=0x1) returned 0x0 [0084.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3015b50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x170a0)) returned 1 [0084.422] SetErrorMode (uMode=0x0) returned 0x1 [0084.422] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\M0lMOcFURGCD4Kqd_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\m0lmocfurgcd4kqd_encrypted_by.whiterose")) returned 1 [0084.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0084.530] SetErrorMode (uMode=0x1) returned 0x0 [0084.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0084.532] GetFileType (hFile=0x18c) returned 0x1 [0084.532] SetErrorMode (uMode=0x0) returned 0x1 [0084.532] GetFileType (hFile=0x18c) returned 0x1 [0084.534] WriteFile (in: hFile=0x18c, lpBuffer=0x2750ab8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2750ab8*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0084.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", lpFilePart=0x0) returned 0x4f [0084.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", lpFilePart=0x0) returned 0x4f [0084.535] SetErrorMode (uMode=0x1) returned 0x0 [0084.535] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0084.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0084.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0084.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0084.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0084.536] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0084.537] SetErrorMode (uMode=0x0) returned 0x1 [0084.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", lpFilePart=0x0) returned 0x4f [0084.537] SetErrorMode (uMode=0x1) returned 0x0 [0084.537] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0084.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0084.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0084.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0084.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0084.538] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0084.538] SetErrorMode (uMode=0x0) returned 0x1 [0084.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.538] SetErrorMode (uMode=0x1) returned 0x0 [0084.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.538] GetFileType (hFile=0x18c) returned 0x1 [0084.539] SetErrorMode (uMode=0x0) returned 0x1 [0084.539] GetFileType (hFile=0x18c) returned 0x1 [0084.539] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xe5af [0084.539] ReadFile (in: hFile=0x18c, lpBuffer=0x2758cf0, nNumberOfBytesToRead=0xe5af, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2758cf0*, lpNumberOfBytesRead=0x27e508*=0xe5af, lpOverlapped=0x0) returned 1 [0084.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.541] SetErrorMode (uMode=0x1) returned 0x0 [0084.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af)) returned 1 [0084.541] SetErrorMode (uMode=0x0) returned 0x1 [0084.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.617] SetErrorMode (uMode=0x1) returned 0x0 [0084.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.618] GetFileType (hFile=0x18c) returned 0x1 [0084.618] SetErrorMode (uMode=0x0) returned 0x1 [0084.618] GetFileType (hFile=0x18c) returned 0x1 [0084.618] WriteFile (in: hFile=0x18c, lpBuffer=0x27fcfa0*, nNumberOfBytesToWrite=0xe6b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27fcfa0*, lpNumberOfBytesWritten=0x27e588*=0xe6b0, lpOverlapped=0x0) returned 1 [0084.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0084.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\aoqvGANMXrXBBGJ1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\aoqvGANMXrXBBGJ1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0084.620] SetErrorMode (uMode=0x1) returned 0x0 [0084.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x31debd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xe6b0)) returned 1 [0084.620] SetErrorMode (uMode=0x0) returned 0x1 [0084.620] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\aoqvGANMXrXBBGJ1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\aoqvganmxrxbbgj1_encrypted_by.whiterose")) returned 1 [0084.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.718] SetErrorMode (uMode=0x1) returned 0x0 [0084.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.718] GetFileType (hFile=0x18c) returned 0x1 [0084.718] SetErrorMode (uMode=0x0) returned 0x1 [0084.718] GetFileType (hFile=0x18c) returned 0x1 [0084.718] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xa6a0 [0084.718] ReadFile (in: hFile=0x18c, lpBuffer=0x280d0f8, nNumberOfBytesToRead=0xa6a0, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x280d0f8*, lpNumberOfBytesRead=0x27e508*=0xa6a0, lpOverlapped=0x0) returned 1 [0084.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.720] SetErrorMode (uMode=0x1) returned 0x0 [0084.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0)) returned 1 [0084.720] SetErrorMode (uMode=0x0) returned 0x1 [0084.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.784] SetErrorMode (uMode=0x1) returned 0x0 [0084.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.793] GetFileType (hFile=0x18c) returned 0x1 [0084.793] SetErrorMode (uMode=0x0) returned 0x1 [0084.793] GetFileType (hFile=0x18c) returned 0x1 [0084.793] WriteFile (in: hFile=0x18c, lpBuffer=0x288dac8*, nNumberOfBytesToWrite=0xa7b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x288dac8*, lpNumberOfBytesWritten=0x27e588*=0xa7b0, lpOverlapped=0x0) returned 1 [0084.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0084.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Sg9q82AA6oJB0YCM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Sg9q82AA6oJB0YCM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0084.795] SetErrorMode (uMode=0x1) returned 0x0 [0084.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3381af0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xa7b0)) returned 1 [0084.795] SetErrorMode (uMode=0x0) returned 0x1 [0084.796] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Sg9q82AA6oJB0YCM_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\sg9q82aa6ojb0ycm_encrypted_by.whiterose")) returned 1 [0084.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.905] SetErrorMode (uMode=0x1) returned 0x0 [0084.905] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.906] GetFileType (hFile=0x18c) returned 0x1 [0084.906] SetErrorMode (uMode=0x0) returned 0x1 [0084.906] GetFileType (hFile=0x18c) returned 0x1 [0084.906] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x18efb [0084.907] ReadFile (in: hFile=0x18c, lpBuffer=0x128ea4c8, nNumberOfBytesToRead=0x18efb, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128ea4c8*, lpNumberOfBytesRead=0x27e508*=0x18efb, lpOverlapped=0x0) returned 1 [0084.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.910] SetErrorMode (uMode=0x1) returned 0x0 [0084.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb)) returned 1 [0084.910] SetErrorMode (uMode=0x0) returned 0x1 [0084.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.975] SetErrorMode (uMode=0x1) returned 0x0 [0084.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0084.976] GetFileType (hFile=0x18c) returned 0x1 [0084.976] SetErrorMode (uMode=0x0) returned 0x1 [0084.976] GetFileType (hFile=0x18c) returned 0x1 [0084.976] WriteFile (in: hFile=0x18c, lpBuffer=0x129fed78*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x129fed78*, lpNumberOfBytesWritten=0x27e588*=0x19000, lpOverlapped=0x0) returned 1 [0084.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0084.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\z0QlxqmpdluBHfwz_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\z0QlxqmpdluBHfwz_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0084.979] SetErrorMode (uMode=0x1) returned 0x0 [0084.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x354ab70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0084.979] SetErrorMode (uMode=0x0) returned 0x1 [0084.979] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\z0QlxqmpdluBHfwz_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\z0qlxqmpdlubhfwz_encrypted_by.whiterose")) returned 1 [0085.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0085.076] SetErrorMode (uMode=0x1) returned 0x0 [0085.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0085.077] GetFileType (hFile=0x18c) returned 0x1 [0085.077] SetErrorMode (uMode=0x0) returned 0x1 [0085.077] GetFileType (hFile=0x18c) returned 0x1 [0085.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", lpFilePart=0x0) returned 0x4f [0085.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", lpFilePart=0x0) returned 0x4f [0085.078] SetErrorMode (uMode=0x1) returned 0x0 [0085.078] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0085.080] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0085.081] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0085.081] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0085.082] SetErrorMode (uMode=0x0) returned 0x1 [0085.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", lpFilePart=0x0) returned 0x4f [0085.082] SetErrorMode (uMode=0x1) returned 0x0 [0085.082] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0085.084] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0085.084] SetErrorMode (uMode=0x0) returned 0x1 [0085.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0085.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0085.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0085.085] SetErrorMode (uMode=0x1) returned 0x0 [0085.085] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.086] GetFileType (hFile=0x18c) returned 0x1 [0085.086] SetErrorMode (uMode=0x0) returned 0x1 [0085.086] GetFileType (hFile=0x18c) returned 0x1 [0085.086] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xe27c [0085.086] ReadFile (in: hFile=0x18c, lpBuffer=0x29050e0, nNumberOfBytesToRead=0xe27c, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x29050e0*, lpNumberOfBytesRead=0x27e508*=0xe27c, lpOverlapped=0x0) returned 1 [0085.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0085.089] SetErrorMode (uMode=0x1) returned 0x0 [0085.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c)) returned 1 [0085.089] SetErrorMode (uMode=0x0) returned 0x1 [0085.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0085.154] SetErrorMode (uMode=0x1) returned 0x0 [0085.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.155] GetFileType (hFile=0x18c) returned 0x1 [0085.155] SetErrorMode (uMode=0x0) returned 0x1 [0085.155] GetFileType (hFile=0x18c) returned 0x1 [0085.155] WriteFile (in: hFile=0x18c, lpBuffer=0x27a6f28*, nNumberOfBytesToWrite=0xe380, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a6f28*, lpNumberOfBytesWritten=0x27e588*=0xe380, lpOverlapped=0x0) returned 1 [0085.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0085.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\qB54bKqHuMcSWJVZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\qB54bKqHuMcSWJVZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0085.158] SetErrorMode (uMode=0x1) returned 0x0 [0085.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3713bf0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xe380)) returned 1 [0085.158] SetErrorMode (uMode=0x0) returned 0x1 [0085.158] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\qB54bKqHuMcSWJVZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\qb54bkqhumcswjvz_encrypted_by.whiterose")) returned 1 [0085.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.264] SetErrorMode (uMode=0x1) returned 0x0 [0085.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.264] GetFileType (hFile=0x18c) returned 0x1 [0085.264] SetErrorMode (uMode=0x0) returned 0x1 [0085.264] GetFileType (hFile=0x18c) returned 0x1 [0085.264] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0085.264] ReadFile (in: hFile=0x18c, lpBuffer=0x27b6d20, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27b6d20*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0085.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.273] SetErrorMode (uMode=0x1) returned 0x0 [0085.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0085.273] SetErrorMode (uMode=0x0) returned 0x1 [0085.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.338] SetErrorMode (uMode=0x1) returned 0x0 [0085.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.340] GetFileType (hFile=0x18c) returned 0x1 [0085.340] SetErrorMode (uMode=0x0) returned 0x1 [0085.340] GetFileType (hFile=0x18c) returned 0x1 [0085.340] WriteFile (in: hFile=0x18c, lpBuffer=0x283c1e0*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x283c1e0*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0085.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\8tMYC*dvDJZSu3OM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\8tMYC*dvDJZSu3OM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0085.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0085.351] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 1 [0085.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0085.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0085.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0085.354] SetErrorMode (uMode=0x1) returned 0x0 [0085.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.354] GetFileType (hFile=0x18c) returned 0x1 [0085.354] SetErrorMode (uMode=0x0) returned 0x1 [0085.354] GetFileType (hFile=0x18c) returned 0x1 [0085.354] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0085.355] ReadFile (in: hFile=0x18c, lpBuffer=0x28462e0, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28462e0*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0085.357] CloseHandle (hObject=0x18c) returned 1 [0085.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0085.358] SetErrorMode (uMode=0x1) returned 0x0 [0085.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0085.358] SetErrorMode (uMode=0x0) returned 0x1 [0085.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0085.458] SetErrorMode (uMode=0x1) returned 0x0 [0085.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.459] GetFileType (hFile=0x18c) returned 0x1 [0085.459] SetErrorMode (uMode=0x0) returned 0x1 [0085.459] GetFileType (hFile=0x18c) returned 0x1 [0085.459] WriteFile (in: hFile=0x18c, lpBuffer=0x28d2580*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28d2580*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0085.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0085.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SmiCQjaEhurL8Bpt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SmiCQjaEhurL8Bpt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0085.461] SetErrorMode (uMode=0x1) returned 0x0 [0085.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x39e7610, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb840)) returned 1 [0085.461] SetErrorMode (uMode=0x0) returned 0x1 [0085.461] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SmiCQjaEhurL8Bpt_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\smicqjaehurl8bpt_encrypted_by.whiterose")) returned 1 [0085.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0085.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0085.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0085.567] SetErrorMode (uMode=0x1) returned 0x0 [0085.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.567] GetFileType (hFile=0x18c) returned 0x1 [0085.567] SetErrorMode (uMode=0x0) returned 0x1 [0085.567] GetFileType (hFile=0x18c) returned 0x1 [0085.567] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x992b [0085.568] ReadFile (in: hFile=0x18c, lpBuffer=0x28df888, nNumberOfBytesToRead=0x992b, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28df888*, lpNumberOfBytesRead=0x27e508*=0x992b, lpOverlapped=0x0) returned 1 [0085.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0085.570] SetErrorMode (uMode=0x1) returned 0x0 [0085.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b)) returned 1 [0085.570] SetErrorMode (uMode=0x0) returned 0x1 [0085.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0085.636] SetErrorMode (uMode=0x1) returned 0x0 [0085.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.637] GetFileType (hFile=0x18c) returned 0x1 [0085.637] SetErrorMode (uMode=0x0) returned 0x1 [0085.637] GetFileType (hFile=0x18c) returned 0x1 [0085.638] WriteFile (in: hFile=0x18c, lpBuffer=0x2772218*, nNumberOfBytesToWrite=0x9a30, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2772218*, lpNumberOfBytesWritten=0x27e588*=0x9a30, lpOverlapped=0x0) returned 1 [0085.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0085.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\LkG0gPQ2fT4YZ21D_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\LkG0gPQ2fT4YZ21D_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0085.639] SetErrorMode (uMode=0x1) returned 0x0 [0085.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3bb0690, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x9a30)) returned 1 [0085.639] SetErrorMode (uMode=0x0) returned 0x1 [0085.640] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\LkG0gPQ2fT4YZ21D_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\lkg0gpq2ft4yz21d_encrypted_by.whiterose")) returned 1 [0085.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0085.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0085.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0085.747] SetErrorMode (uMode=0x1) returned 0x0 [0085.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.748] GetFileType (hFile=0x18c) returned 0x1 [0085.748] SetErrorMode (uMode=0x0) returned 0x1 [0085.748] GetFileType (hFile=0x18c) returned 0x1 [0085.748] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0085.748] ReadFile (in: hFile=0x18c, lpBuffer=0x12a4b548, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12a4b548*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0085.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0085.764] SetErrorMode (uMode=0x1) returned 0x0 [0085.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0085.764] SetErrorMode (uMode=0x0) returned 0x1 [0085.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0085.826] SetErrorMode (uMode=0x1) returned 0x0 [0085.826] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.827] GetFileType (hFile=0x18c) returned 0x1 [0085.827] SetErrorMode (uMode=0x0) returned 0x1 [0085.827] GetFileType (hFile=0x18c) returned 0x1 [0085.827] WriteFile (in: hFile=0x18c, lpBuffer=0x12760290*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12760290*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0085.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0085.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Yu7g096kvcyKdPA3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Yu7g096kvcyKdPA3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0085.830] SetErrorMode (uMode=0x1) returned 0x0 [0085.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3d79710, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1c600)) returned 1 [0085.830] SetErrorMode (uMode=0x0) returned 0x1 [0085.830] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Yu7g096kvcyKdPA3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\yu7g096kvcykdpa3_encrypted_by.whiterose")) returned 1 [0085.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0085.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0085.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0085.935] SetErrorMode (uMode=0x1) returned 0x0 [0085.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0085.935] GetFileType (hFile=0x18c) returned 0x1 [0085.935] SetErrorMode (uMode=0x0) returned 0x1 [0085.935] GetFileType (hFile=0x18c) returned 0x1 [0085.935] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1804a [0085.936] ReadFile (in: hFile=0x18c, lpBuffer=0x1277c8c0, nNumberOfBytesToRead=0x1804a, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1277c8c0*, lpNumberOfBytesRead=0x27e508*=0x1804a, lpOverlapped=0x0) returned 1 [0085.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0085.941] SetErrorMode (uMode=0x1) returned 0x0 [0085.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a)) returned 1 [0085.941] SetErrorMode (uMode=0x0) returned 0x1 [0086.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0086.024] SetErrorMode (uMode=0x1) returned 0x0 [0086.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.024] GetFileType (hFile=0x18c) returned 0x1 [0086.025] SetErrorMode (uMode=0x0) returned 0x1 [0086.025] GetFileType (hFile=0x18c) returned 0x1 [0086.025] WriteFile (in: hFile=0x18c, lpBuffer=0x1280d050*, nNumberOfBytesToWrite=0x18150, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1280d050*, lpNumberOfBytesWritten=0x27e588*=0x18150, lpOverlapped=0x0) returned 1 [0086.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0086.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\FmObzxS0EajJM8uP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\FmObzxS0EajJM8uP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0086.027] SetErrorMode (uMode=0x1) returned 0x0 [0086.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3f42790, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x18150)) returned 1 [0086.027] SetErrorMode (uMode=0x0) returned 0x1 [0086.027] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\FmObzxS0EajJM8uP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\fmobzxs0eajjm8up_encrypted_by.whiterose")) returned 1 [0086.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0086.137] SetErrorMode (uMode=0x1) returned 0x0 [0086.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0086.138] GetFileType (hFile=0x18c) returned 0x1 [0086.138] SetErrorMode (uMode=0x0) returned 0x1 [0086.138] GetFileType (hFile=0x18c) returned 0x1 [0086.139] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0a80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27c0a80*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0086.141] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0a80*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27c0a80*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0086.141] CloseHandle (hObject=0x18c) returned 1 [0086.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", lpFilePart=0x0) returned 0x4f [0086.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", lpFilePart=0x0) returned 0x4f [0086.141] SetErrorMode (uMode=0x1) returned 0x0 [0086.142] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0086.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0086.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0086.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0086.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0086.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0086.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0086.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0086.144] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0086.145] SetErrorMode (uMode=0x0) returned 0x1 [0086.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", lpFilePart=0x0) returned 0x4f [0086.145] SetErrorMode (uMode=0x1) returned 0x0 [0086.145] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0086.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0086.147] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0086.147] SetErrorMode (uMode=0x0) returned 0x1 [0086.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0086.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0086.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0086.148] SetErrorMode (uMode=0x1) returned 0x0 [0086.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.149] GetFileType (hFile=0x18c) returned 0x1 [0086.149] SetErrorMode (uMode=0x0) returned 0x1 [0086.149] GetFileType (hFile=0x18c) returned 0x1 [0086.149] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x18b15 [0086.150] ReadFile (in: hFile=0x18c, lpBuffer=0x128251d0, nNumberOfBytesToRead=0x18b15, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128251d0*, lpNumberOfBytesRead=0x27e508*=0x18b15, lpOverlapped=0x0) returned 1 [0086.153] CloseHandle (hObject=0x18c) returned 1 [0086.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0086.154] SetErrorMode (uMode=0x1) returned 0x0 [0086.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15)) returned 1 [0086.155] SetErrorMode (uMode=0x0) returned 0x1 [0086.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0086.257] SetErrorMode (uMode=0x1) returned 0x0 [0086.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.258] GetFileType (hFile=0x18c) returned 0x1 [0086.258] SetErrorMode (uMode=0x0) returned 0x1 [0086.258] GetFileType (hFile=0x18c) returned 0x1 [0086.258] WriteFile (in: hFile=0x18c, lpBuffer=0x128b9a30*, nNumberOfBytesToWrite=0x18c20, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128b9a30*, lpNumberOfBytesWritten=0x27e588*=0x18c20, lpOverlapped=0x0) returned 1 [0086.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0086.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\IVHwdWPZL2TdkJAB_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\IVHwdWPZL2TdkJAB_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0086.261] SetErrorMode (uMode=0x1) returned 0x0 [0086.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x417dc30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x18c20)) returned 1 [0086.261] SetErrorMode (uMode=0x0) returned 0x1 [0086.261] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\IVHwdWPZL2TdkJAB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\ivhwdwpzl2tdkjab_encrypted_by.whiterose")) returned 1 [0086.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0086.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0086.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0086.371] SetErrorMode (uMode=0x1) returned 0x0 [0086.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.371] GetFileType (hFile=0x18c) returned 0x1 [0086.371] SetErrorMode (uMode=0x0) returned 0x1 [0086.371] GetFileType (hFile=0x18c) returned 0x1 [0086.371] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x80f5 [0086.372] ReadFile (in: hFile=0x18c, lpBuffer=0x2827280, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2827280*, lpNumberOfBytesRead=0x27e508*=0x80f5, lpOverlapped=0x0) returned 1 [0086.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0086.374] SetErrorMode (uMode=0x1) returned 0x0 [0086.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1 [0086.374] SetErrorMode (uMode=0x0) returned 0x1 [0086.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0086.437] SetErrorMode (uMode=0x1) returned 0x0 [0086.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.438] GetFileType (hFile=0x18c) returned 0x1 [0086.438] SetErrorMode (uMode=0x0) returned 0x1 [0086.438] GetFileType (hFile=0x18c) returned 0x1 [0086.438] WriteFile (in: hFile=0x18c, lpBuffer=0x28bb1e0*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28bb1e0*, lpNumberOfBytesWritten=0x27e588*=0x8200, lpOverlapped=0x0) returned 1 [0086.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0086.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\YAfsSqFnIjgUbsnK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\YAfsSqFnIjgUbsnK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0086.439] SetErrorMode (uMode=0x1) returned 0x0 [0086.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4346cb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0086.440] SetErrorMode (uMode=0x0) returned 0x1 [0086.440] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\YAfsSqFnIjgUbsnK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\yafssqfnijgubsnk_encrypted_by.whiterose")) returned 1 [0086.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.543] SetErrorMode (uMode=0x1) returned 0x0 [0086.543] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.543] GetFileType (hFile=0x18c) returned 0x1 [0086.543] SetErrorMode (uMode=0x0) returned 0x1 [0086.543] GetFileType (hFile=0x18c) returned 0x1 [0086.543] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb731 [0086.543] ReadFile (in: hFile=0x18c, lpBuffer=0x28c4e88, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28c4e88*, lpNumberOfBytesRead=0x27e508*=0xb731, lpOverlapped=0x0) returned 1 [0086.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.546] SetErrorMode (uMode=0x1) returned 0x0 [0086.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1 [0086.546] SetErrorMode (uMode=0x0) returned 0x1 [0086.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.627] SetErrorMode (uMode=0x1) returned 0x0 [0086.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.628] GetFileType (hFile=0x18c) returned 0x1 [0086.628] SetErrorMode (uMode=0x0) returned 0x1 [0086.628] GetFileType (hFile=0x18c) returned 0x1 [0086.628] WriteFile (in: hFile=0x18c, lpBuffer=0x2769d98*, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2769d98*, lpNumberOfBytesWritten=0x27e588*=0xb840, lpOverlapped=0x0) returned 1 [0086.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\iLNY6Sh*RmfpKq6x_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\iLNY6Sh*RmfpKq6x_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0086.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0086.632] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 1 [0086.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0086.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0086.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0086.634] SetErrorMode (uMode=0x1) returned 0x0 [0086.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.634] GetFileType (hFile=0x18c) returned 0x1 [0086.634] SetErrorMode (uMode=0x0) returned 0x1 [0086.634] GetFileType (hFile=0x18c) returned 0x1 [0086.634] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb189 [0086.634] ReadFile (in: hFile=0x18c, lpBuffer=0x2777500, nNumberOfBytesToRead=0xb189, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2777500*, lpNumberOfBytesRead=0x27e508*=0xb189, lpOverlapped=0x0) returned 1 [0086.636] CloseHandle (hObject=0x18c) returned 1 [0086.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0086.637] SetErrorMode (uMode=0x1) returned 0x0 [0086.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189)) returned 1 [0086.637] SetErrorMode (uMode=0x0) returned 0x1 [0086.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0086.734] SetErrorMode (uMode=0x1) returned 0x0 [0086.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.735] GetFileType (hFile=0x18c) returned 0x1 [0086.735] SetErrorMode (uMode=0x0) returned 0x1 [0086.735] GetFileType (hFile=0x18c) returned 0x1 [0086.735] WriteFile (in: hFile=0x18c, lpBuffer=0x280a2e8*, nNumberOfBytesToWrite=0xb290, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x280a2e8*, lpNumberOfBytesWritten=0x27e588*=0xb290, lpOverlapped=0x0) returned 1 [0086.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0086.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\4EiBh3eiv9Jim2Ff_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\4EiBh3eiv9Jim2Ff_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0086.737] SetErrorMode (uMode=0x1) returned 0x0 [0086.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x461a6d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb290)) returned 1 [0086.737] SetErrorMode (uMode=0x0) returned 0x1 [0086.737] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\4EiBh3eiv9Jim2Ff_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\4eibh3eiv9jim2ff_encrypted_by.whiterose")) returned 1 [0086.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.839] SetErrorMode (uMode=0x1) returned 0x0 [0086.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.840] GetFileType (hFile=0x18c) returned 0x1 [0086.840] SetErrorMode (uMode=0x0) returned 0x1 [0086.840] GetFileType (hFile=0x18c) returned 0x1 [0086.840] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x1c4f5 [0086.841] ReadFile (in: hFile=0x18c, lpBuffer=0x128ffc40, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128ffc40*, lpNumberOfBytesRead=0x27e508*=0x1c4f5, lpOverlapped=0x0) returned 1 [0086.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.844] SetErrorMode (uMode=0x1) returned 0x0 [0086.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1 [0086.844] SetErrorMode (uMode=0x0) returned 0x1 [0086.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.908] SetErrorMode (uMode=0x1) returned 0x0 [0086.908] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.910] GetFileType (hFile=0x18c) returned 0x1 [0086.910] SetErrorMode (uMode=0x0) returned 0x1 [0086.910] GetFileType (hFile=0x18c) returned 0x1 [0086.910] WriteFile (in: hFile=0x18c, lpBuffer=0x129a9fe0*, nNumberOfBytesToWrite=0x1c600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x129a9fe0*, lpNumberOfBytesWritten=0x27e588*=0x1c600, lpOverlapped=0x0) returned 1 [0086.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\sUnl*pmaBT5hVXY2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\sUnl*pmaBT5hVXY2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0086.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0086.922] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 1 [0086.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0086.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0086.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0086.925] SetErrorMode (uMode=0x1) returned 0x0 [0086.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0086.925] GetFileType (hFile=0x18c) returned 0x1 [0086.926] SetErrorMode (uMode=0x0) returned 0x1 [0086.926] GetFileType (hFile=0x18c) returned 0x1 [0086.926] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x58891 [0086.929] ReadFile (in: hFile=0x18c, lpBuffer=0x129c6610, nNumberOfBytesToRead=0x58891, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x129c6610*, lpNumberOfBytesRead=0x27e508*=0x58891, lpOverlapped=0x0) returned 1 [0086.933] CloseHandle (hObject=0x18c) returned 1 [0086.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0086.949] SetErrorMode (uMode=0x1) returned 0x0 [0086.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891)) returned 1 [0086.949] SetErrorMode (uMode=0x0) returned 0x1 [0087.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0087.052] SetErrorMode (uMode=0x1) returned 0x0 [0087.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.055] GetFileType (hFile=0x18c) returned 0x1 [0087.055] SetErrorMode (uMode=0x0) returned 0x1 [0087.055] GetFileType (hFile=0x18c) returned 0x1 [0087.055] WriteFile (in: hFile=0x18c, lpBuffer=0x1288d4b0*, nNumberOfBytesToWrite=0x589a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1288d4b0*, lpNumberOfBytesWritten=0x27e588*=0x589a0, lpOverlapped=0x0) returned 1 [0087.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0087.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\cNU1nAiifEwaxwyJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\cNU1nAiifEwaxwyJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x77 [0087.061] SetErrorMode (uMode=0x1) returned 0x0 [0087.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x493a3b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x589a0)) returned 1 [0087.062] SetErrorMode (uMode=0x0) returned 0x1 [0087.062] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\cNU1nAiifEwaxwyJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\cnu1naiifewaxwyj_encrypted_by.whiterose")) returned 1 [0087.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0087.167] SetErrorMode (uMode=0x1) returned 0x0 [0087.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.167] GetFileType (hFile=0x18c) returned 0x1 [0087.167] SetErrorMode (uMode=0x0) returned 0x1 [0087.167] GetFileType (hFile=0x18c) returned 0x1 [0087.169] WriteFile (in: hFile=0x18c, lpBuffer=0x2763d18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2763d18*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0087.170] WriteFile (in: hFile=0x18c, lpBuffer=0x2763d18*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2763d18*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0087.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.171] SetErrorMode (uMode=0x1) returned 0x0 [0087.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.171] GetFileType (hFile=0x18c) returned 0x1 [0087.171] SetErrorMode (uMode=0x0) returned 0x1 [0087.172] GetFileType (hFile=0x18c) returned 0x1 [0087.173] WriteFile (in: hFile=0x18c, lpBuffer=0x2779e68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x2779e68*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0087.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0087.175] SetErrorMode (uMode=0x1) returned 0x0 [0087.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.175] GetFileType (hFile=0x18c) returned 0x1 [0087.175] SetErrorMode (uMode=0x0) returned 0x1 [0087.175] GetFileType (hFile=0x18c) returned 0x1 [0087.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x43 [0087.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x43 [0087.176] SetErrorMode (uMode=0x1) returned 0x0 [0087.176] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.178] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.178] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0087.178] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0087.178] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0087.178] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0087.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0087.179] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.180] SetErrorMode (uMode=0x0) returned 0x1 [0087.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x43 [0087.180] SetErrorMode (uMode=0x1) returned 0x0 [0087.180] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0087.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0087.182] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0087.182] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0087.182] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0087.182] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.183] SetErrorMode (uMode=0x0) returned 0x1 [0087.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x47 [0087.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x47 [0087.183] SetErrorMode (uMode=0x1) returned 0x0 [0087.183] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0087.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0087.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0087.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0087.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0087.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0087.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0087.189] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0087.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0 [0087.192] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.192] SetErrorMode (uMode=0x0) returned 0x1 [0087.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x47 [0087.193] SetErrorMode (uMode=0x1) returned 0x0 [0087.193] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0087.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0087.195] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0087.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0 [0087.198] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.199] SetErrorMode (uMode=0x0) returned 0x1 [0087.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", lpFilePart=0x0) returned 0x51 [0087.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", lpFilePart=0x0) returned 0x51 [0087.199] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.199] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.200] CoTaskMemFree (pv=0xffa70) [0087.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", lpFilePart=0x0) returned 0x51 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", lpFilePart=0x0) returned 0x51 [0087.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.200] CoTaskMemFree (pv=0xffa70) [0087.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", lpFilePart=0x0) returned 0x51 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", lpFilePart=0x0) returned 0x51 [0087.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.200] CoTaskMemFree (pv=0xffa70) [0087.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", lpFilePart=0x0) returned 0x51 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", lpFilePart=0x0) returned 0x51 [0087.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.200] CoTaskMemFree (pv=0xffa70) [0087.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", lpFilePart=0x0) returned 0x51 [0087.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", lpFilePart=0x0) returned 0x51 [0087.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.200] CoTaskMemFree (pv=0xffa70) [0087.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", lpFilePart=0x0) returned 0x51 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", lpFilePart=0x0) returned 0x51 [0087.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.201] CoTaskMemFree (pv=0xffa70) [0087.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", lpFilePart=0x0) returned 0x51 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", lpFilePart=0x0) returned 0x51 [0087.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.201] CoTaskMemFree (pv=0xffa70) [0087.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", lpFilePart=0x0) returned 0x51 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", lpFilePart=0x0) returned 0x51 [0087.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.201] CoTaskMemFree (pv=0xffa70) [0087.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", lpFilePart=0x0) returned 0x51 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", lpFilePart=0x0) returned 0x51 [0087.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.201] CoTaskMemFree (pv=0xffa70) [0087.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", lpFilePart=0x0) returned 0x51 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", lpFilePart=0x0) returned 0x51 [0087.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.202] CoTaskMemFree (pv=0xffa70) [0087.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", lpFilePart=0x0) returned 0x51 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", lpFilePart=0x0) returned 0x51 [0087.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.202] CoTaskMemFree (pv=0xffa70) [0087.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", lpFilePart=0x0) returned 0x51 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", lpFilePart=0x0) returned 0x51 [0087.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.202] CoTaskMemFree (pv=0xffa70) [0087.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", lpFilePart=0x0) returned 0x51 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", lpFilePart=0x0) returned 0x51 [0087.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.202] CoTaskMemFree (pv=0xffa70) [0087.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", lpFilePart=0x0) returned 0x51 [0087.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", lpFilePart=0x0) returned 0x51 [0087.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.203] CoTaskMemFree (pv=0xffa70) [0087.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", lpFilePart=0x0) returned 0x51 [0087.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", lpFilePart=0x0) returned 0x51 [0087.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.203] CoTaskMemFree (pv=0xffa70) [0087.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", lpFilePart=0x0) returned 0x51 [0087.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", nBufferLength=0x105, lpBuffer=0x27e350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", lpFilePart=0x0) returned 0x51 [0087.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", lpFilePart=0x0) returned 0x51 [0087.203] SetErrorMode (uMode=0x1) returned 0x0 [0087.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.205] SetErrorMode (uMode=0x0) returned 0x1 [0087.205] GetFileType (hFile=0x18c) returned 0x1 [0087.205] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0xa00 [0087.205] ReadFile (in: hFile=0x18c, lpBuffer=0x27ad338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e5a8, lpOverlapped=0x0 | out: lpBuffer=0x27ad338*, lpNumberOfBytesRead=0x27e5a8*=0xa00, lpOverlapped=0x0) returned 1 [0087.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", nBufferLength=0x105, lpBuffer=0x27e340, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", lpFilePart=0x0) returned 0x51 [0087.206] SetErrorMode (uMode=0x1) returned 0x0 [0087.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0087.207] SetErrorMode (uMode=0x0) returned 0x1 [0087.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", nBufferLength=0x105, lpBuffer=0x27e070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", lpFilePart=0x0) returned 0x51 [0087.269] SetErrorMode (uMode=0x1) returned 0x0 [0087.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.270] SetErrorMode (uMode=0x0) returned 0x1 [0087.270] GetFileType (hFile=0x18c) returned 0x1 [0087.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", lpFilePart=0x0) returned 0x51 [0087.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\2ejZf0cg2gyyIIfd_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\2ejZf0cg2gyyIIfd_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0087.271] SetErrorMode (uMode=0x1) returned 0x0 [0087.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4b29590, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0087.271] SetErrorMode (uMode=0x0) returned 0x1 [0087.271] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\2ejZf0cg2gyyIIfd_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\2ejzf0cg2gyyiifd_encrypted_by.whiterose")) returned 1 [0087.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", lpFilePart=0x0) returned 0x51 [0087.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", lpFilePart=0x0) returned 0x51 [0087.369] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.369] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.369] CoTaskMemFree (pv=0xffa70) [0087.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", lpFilePart=0x0) returned 0x52 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", lpFilePart=0x0) returned 0x52 [0087.370] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.370] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.370] CoTaskMemFree (pv=0xffa70) [0087.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", lpFilePart=0x0) returned 0x52 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", lpFilePart=0x0) returned 0x52 [0087.370] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.370] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.370] CoTaskMemFree (pv=0xffa70) [0087.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", lpFilePart=0x0) returned 0x52 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", lpFilePart=0x0) returned 0x52 [0087.370] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.370] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.370] CoTaskMemFree (pv=0xffa70) [0087.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", lpFilePart=0x0) returned 0x52 [0087.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", lpFilePart=0x0) returned 0x52 [0087.370] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.370] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.370] CoTaskMemFree (pv=0xffa70) [0087.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", lpFilePart=0x0) returned 0x52 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", lpFilePart=0x0) returned 0x52 [0087.371] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.371] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.371] CoTaskMemFree (pv=0xffa70) [0087.371] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", lpFilePart=0x0) returned 0x52 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", lpFilePart=0x0) returned 0x52 [0087.371] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.371] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.371] CoTaskMemFree (pv=0xffa70) [0087.371] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", lpFilePart=0x0) returned 0x52 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", lpFilePart=0x0) returned 0x52 [0087.371] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.371] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.371] CoTaskMemFree (pv=0xffa70) [0087.371] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", lpFilePart=0x0) returned 0x52 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", lpFilePart=0x0) returned 0x52 [0087.371] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.371] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.371] CoTaskMemFree (pv=0xffa70) [0087.371] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", lpFilePart=0x0) returned 0x52 [0087.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", lpFilePart=0x0) returned 0x52 [0087.372] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.372] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.372] CoTaskMemFree (pv=0xffa70) [0087.372] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", lpFilePart=0x0) returned 0x52 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", lpFilePart=0x0) returned 0x52 [0087.372] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.372] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.372] CoTaskMemFree (pv=0xffa70) [0087.372] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", lpFilePart=0x0) returned 0x52 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", lpFilePart=0x0) returned 0x52 [0087.372] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.372] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.372] CoTaskMemFree (pv=0xffa70) [0087.372] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", lpFilePart=0x0) returned 0x52 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", lpFilePart=0x0) returned 0x52 [0087.372] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.372] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.372] CoTaskMemFree (pv=0xffa70) [0087.372] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", lpFilePart=0x0) returned 0x52 [0087.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", lpFilePart=0x0) returned 0x52 [0087.372] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.372] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.373] CoTaskMemFree (pv=0xffa70) [0087.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", lpFilePart=0x0) returned 0x52 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", lpFilePart=0x0) returned 0x52 [0087.373] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.373] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.373] CoTaskMemFree (pv=0xffa70) [0087.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", lpFilePart=0x0) returned 0x52 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", lpFilePart=0x0) returned 0x52 [0087.373] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.373] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.373] CoTaskMemFree (pv=0xffa70) [0087.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", lpFilePart=0x0) returned 0x52 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", nBufferLength=0x105, lpBuffer=0x27e350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", lpFilePart=0x0) returned 0x52 [0087.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", lpFilePart=0x0) returned 0x52 [0087.373] SetErrorMode (uMode=0x1) returned 0x0 [0087.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.374] SetErrorMode (uMode=0x0) returned 0x1 [0087.374] GetFileType (hFile=0x18c) returned 0x1 [0087.374] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0x1e00 [0087.374] ReadFile (in: hFile=0x18c, lpBuffer=0x2821560, nNumberOfBytesToRead=0x1e00, lpNumberOfBytesRead=0x27e5a8, lpOverlapped=0x0 | out: lpBuffer=0x2821560*, lpNumberOfBytesRead=0x27e5a8*=0x1e00, lpOverlapped=0x0) returned 1 [0087.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", nBufferLength=0x105, lpBuffer=0x27e340, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", lpFilePart=0x0) returned 0x52 [0087.376] SetErrorMode (uMode=0x1) returned 0x0 [0087.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0087.376] SetErrorMode (uMode=0x0) returned 0x1 [0087.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", nBufferLength=0x105, lpBuffer=0x27e070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", lpFilePart=0x0) returned 0x52 [0087.438] SetErrorMode (uMode=0x1) returned 0x0 [0087.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.439] SetErrorMode (uMode=0x0) returned 0x1 [0087.439] GetFileType (hFile=0x18c) returned 0x1 [0087.439] WriteFile (in: hFile=0x18c, lpBuffer=0x288b600*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x27e628, lpOverlapped=0x0 | out: lpBuffer=0x288b600*, lpNumberOfBytesWritten=0x27e628*=0x1f10, lpOverlapped=0x0) returned 1 [0087.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", lpFilePart=0x0) returned 0x52 [0087.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\lpRtrAP5ajx5gGX2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\lpRtrAP5ajx5gGX2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0087.440] SetErrorMode (uMode=0x1) returned 0x0 [0087.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4ccc4b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1f10)) returned 1 [0087.440] SetErrorMode (uMode=0x0) returned 0x1 [0087.441] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\lpRtrAP5ajx5gGX2_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\lprtrap5ajx5ggx2_encrypted_by.whiterose")) returned 1 [0087.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", lpFilePart=0x0) returned 0x52 [0087.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", lpFilePart=0x0) returned 0x52 [0087.541] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.541] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.541] CoTaskMemFree (pv=0xffa70) [0087.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", lpFilePart=0x0) returned 0x55 [0087.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", lpFilePart=0x0) returned 0x55 [0087.541] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.541] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.541] CoTaskMemFree (pv=0xffa70) [0087.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", lpFilePart=0x0) returned 0x55 [0087.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", lpFilePart=0x0) returned 0x55 [0087.542] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.542] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.542] CoTaskMemFree (pv=0xffa70) [0087.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", lpFilePart=0x0) returned 0x55 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", lpFilePart=0x0) returned 0x55 [0087.542] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.542] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.542] CoTaskMemFree (pv=0xffa70) [0087.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", lpFilePart=0x0) returned 0x55 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", lpFilePart=0x0) returned 0x55 [0087.542] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.542] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.542] CoTaskMemFree (pv=0xffa70) [0087.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", lpFilePart=0x0) returned 0x55 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", lpFilePart=0x0) returned 0x55 [0087.542] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.542] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.542] CoTaskMemFree (pv=0xffa70) [0087.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", lpFilePart=0x0) returned 0x55 [0087.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", lpFilePart=0x0) returned 0x55 [0087.542] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.542] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.543] CoTaskMemFree (pv=0xffa70) [0087.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", lpFilePart=0x0) returned 0x55 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", lpFilePart=0x0) returned 0x55 [0087.543] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.543] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.543] CoTaskMemFree (pv=0xffa70) [0087.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", lpFilePart=0x0) returned 0x55 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", lpFilePart=0x0) returned 0x55 [0087.543] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.543] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.543] CoTaskMemFree (pv=0xffa70) [0087.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", lpFilePart=0x0) returned 0x55 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", lpFilePart=0x0) returned 0x55 [0087.543] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.543] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.543] CoTaskMemFree (pv=0xffa70) [0087.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", lpFilePart=0x0) returned 0x55 [0087.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", lpFilePart=0x0) returned 0x55 [0087.543] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.543] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.543] CoTaskMemFree (pv=0xffa70) [0087.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", lpFilePart=0x0) returned 0x55 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", lpFilePart=0x0) returned 0x55 [0087.544] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.544] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.544] CoTaskMemFree (pv=0xffa70) [0087.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", lpFilePart=0x0) returned 0x55 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", lpFilePart=0x0) returned 0x55 [0087.544] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.544] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.544] CoTaskMemFree (pv=0xffa70) [0087.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", lpFilePart=0x0) returned 0x55 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", lpFilePart=0x0) returned 0x55 [0087.544] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.544] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.544] CoTaskMemFree (pv=0xffa70) [0087.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", lpFilePart=0x0) returned 0x55 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", lpFilePart=0x0) returned 0x55 [0087.544] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.544] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.544] CoTaskMemFree (pv=0xffa70) [0087.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", lpFilePart=0x0) returned 0x55 [0087.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", lpFilePart=0x0) returned 0x55 [0087.545] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.545] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.545] CoTaskMemFree (pv=0xffa70) [0087.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27e350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.545] SetErrorMode (uMode=0x1) returned 0x0 [0087.545] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.545] SetErrorMode (uMode=0x0) returned 0x1 [0087.545] GetFileType (hFile=0x18c) returned 0x1 [0087.545] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0xa00 [0087.545] ReadFile (in: hFile=0x18c, lpBuffer=0x289a6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e5a8, lpOverlapped=0x0 | out: lpBuffer=0x289a6a8*, lpNumberOfBytesRead=0x27e5a8*=0xa00, lpOverlapped=0x0) returned 1 [0087.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27e340, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.547] SetErrorMode (uMode=0x1) returned 0x0 [0087.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0087.547] SetErrorMode (uMode=0x0) returned 0x1 [0087.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27e070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.614] SetErrorMode (uMode=0x1) returned 0x0 [0087.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.615] SetErrorMode (uMode=0x0) returned 0x1 [0087.615] GetFileType (hFile=0x18c) returned 0x1 [0087.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\cT6b8TTlsKfkv*lq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\cT6b8TTlsKfkv*lq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0087.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", nBufferLength=0x105, lpBuffer=0x27be10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", lpFilePart=0x0) returned 0x55 [0087.618] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo")) returned 1 [0087.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", lpFilePart=0x0) returned 0x55 [0087.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", lpFilePart=0x0) returned 0x55 [0087.619] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.619] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.619] CoTaskMemFree (pv=0xffa70) [0087.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", lpFilePart=0x0) returned 0x58 [0087.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", lpFilePart=0x0) returned 0x58 [0087.619] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.619] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.619] CoTaskMemFree (pv=0xffa70) [0087.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", lpFilePart=0x0) returned 0x58 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", lpFilePart=0x0) returned 0x58 [0087.620] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.620] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.620] CoTaskMemFree (pv=0xffa70) [0087.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", lpFilePart=0x0) returned 0x58 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", lpFilePart=0x0) returned 0x58 [0087.620] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.620] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.620] CoTaskMemFree (pv=0xffa70) [0087.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", lpFilePart=0x0) returned 0x58 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", lpFilePart=0x0) returned 0x58 [0087.620] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.620] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.620] CoTaskMemFree (pv=0xffa70) [0087.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", lpFilePart=0x0) returned 0x58 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", lpFilePart=0x0) returned 0x58 [0087.620] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.620] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.620] CoTaskMemFree (pv=0xffa70) [0087.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", lpFilePart=0x0) returned 0x58 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", lpFilePart=0x0) returned 0x58 [0087.621] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.621] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.621] CoTaskMemFree (pv=0xffa70) [0087.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", lpFilePart=0x0) returned 0x58 [0087.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", lpFilePart=0x0) returned 0x58 [0087.621] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.621] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.621] CoTaskMemFree (pv=0xffa70) [0087.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", lpFilePart=0x0) returned 0x58 [0087.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", lpFilePart=0x0) returned 0x58 [0087.623] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.623] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.623] CoTaskMemFree (pv=0xffa70) [0087.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", lpFilePart=0x0) returned 0x58 [0087.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", lpFilePart=0x0) returned 0x58 [0087.623] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.623] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.623] CoTaskMemFree (pv=0xffa70) [0087.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", lpFilePart=0x0) returned 0x58 [0087.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", lpFilePart=0x0) returned 0x58 [0087.623] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.623] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.623] CoTaskMemFree (pv=0xffa70) [0087.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", lpFilePart=0x0) returned 0x58 [0087.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", lpFilePart=0x0) returned 0x58 [0087.624] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.624] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.624] CoTaskMemFree (pv=0xffa70) [0087.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", lpFilePart=0x0) returned 0x58 [0087.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", lpFilePart=0x0) returned 0x58 [0087.624] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.624] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.624] CoTaskMemFree (pv=0xffa70) [0087.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", lpFilePart=0x0) returned 0x58 [0087.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", lpFilePart=0x0) returned 0x58 [0087.625] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.625] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.625] CoTaskMemFree (pv=0xffa70) [0087.625] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", lpFilePart=0x0) returned 0x58 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", lpFilePart=0x0) returned 0x58 [0087.625] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.625] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.625] CoTaskMemFree (pv=0xffa70) [0087.625] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", lpFilePart=0x0) returned 0x58 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", lpFilePart=0x0) returned 0x58 [0087.625] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.625] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.625] CoTaskMemFree (pv=0xffa70) [0087.625] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", lpFilePart=0x0) returned 0x58 [0087.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", nBufferLength=0x105, lpBuffer=0x27e350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", lpFilePart=0x0) returned 0x58 [0087.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", lpFilePart=0x0) returned 0x58 [0087.626] SetErrorMode (uMode=0x1) returned 0x0 [0087.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.626] GetFileType (hFile=0x18c) returned 0x1 [0087.626] SetErrorMode (uMode=0x0) returned 0x1 [0087.626] GetFileType (hFile=0x18c) returned 0x1 [0087.626] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0xa00 [0087.626] ReadFile (in: hFile=0x18c, lpBuffer=0x270f528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e5a8, lpOverlapped=0x0 | out: lpBuffer=0x270f528*, lpNumberOfBytesRead=0x27e5a8*=0xa00, lpOverlapped=0x0) returned 1 [0087.628] CloseHandle (hObject=0x18c) returned 1 [0087.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", nBufferLength=0x105, lpBuffer=0x27e340, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", lpFilePart=0x0) returned 0x58 [0087.628] SetErrorMode (uMode=0x1) returned 0x0 [0087.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0087.629] SetErrorMode (uMode=0x0) returned 0x1 [0087.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", nBufferLength=0x105, lpBuffer=0x27e070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", lpFilePart=0x0) returned 0x58 [0087.732] SetErrorMode (uMode=0x1) returned 0x0 [0087.732] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.733] GetFileType (hFile=0x18c) returned 0x1 [0087.733] SetErrorMode (uMode=0x0) returned 0x1 [0087.733] GetFileType (hFile=0x18c) returned 0x1 [0087.733] WriteFile (in: hFile=0x18c, lpBuffer=0x27708c8*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x27e548, lpOverlapped=0x0 | out: lpBuffer=0x27708c8*, lpNumberOfBytesWritten=0x27e548*=0xb10, lpOverlapped=0x0) returned 1 [0087.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", lpFilePart=0x0) returned 0x58 [0087.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\XMBQj5Qt8vIe9KW0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\XMBQj5Qt8vIe9KW0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6f [0087.735] SetErrorMode (uMode=0x1) returned 0x0 [0087.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4f9fed0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0087.735] SetErrorMode (uMode=0x0) returned 0x1 [0087.735] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\XMBQj5Qt8vIe9KW0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\xmbqj5qt8vie9kw0_encrypted_by.whiterose")) returned 1 [0087.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", lpFilePart=0x0) returned 0x58 [0087.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", lpFilePart=0x0) returned 0x58 [0087.838] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.838] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.838] CoTaskMemFree (pv=0xffa70) [0087.838] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0087.838] SetErrorMode (uMode=0x1) returned 0x0 [0087.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.839] GetFileType (hFile=0x18c) returned 0x1 [0087.839] SetErrorMode (uMode=0x0) returned 0x1 [0087.839] GetFileType (hFile=0x18c) returned 0x1 [0087.840] WriteFile (in: hFile=0x18c, lpBuffer=0x2784898*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x2784898*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0087.842] WriteFile (in: hFile=0x18c, lpBuffer=0x2784898*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2784898*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0087.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", lpFilePart=0x0) returned 0x4b [0087.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", lpFilePart=0x0) returned 0x4b [0087.842] SetErrorMode (uMode=0x1) returned 0x0 [0087.842] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0087.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0087.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0087.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0087.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0 [0087.844] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.844] SetErrorMode (uMode=0x0) returned 0x1 [0087.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", lpFilePart=0x0) returned 0x4b [0087.844] SetErrorMode (uMode=0x1) returned 0x0 [0087.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0087.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0087.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0087.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0087.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0 [0087.845] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.845] SetErrorMode (uMode=0x0) returned 0x1 [0087.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", lpFilePart=0x0) returned 0x55 [0087.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", lpFilePart=0x0) returned 0x55 [0087.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.846] CoTaskMemFree (pv=0xffa70) [0087.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", lpFilePart=0x0) returned 0x56 [0087.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", lpFilePart=0x0) returned 0x56 [0087.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.846] CoTaskMemFree (pv=0xffa70) [0087.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", lpFilePart=0x0) returned 0x59 [0087.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", lpFilePart=0x0) returned 0x59 [0087.846] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.846] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.847] CoTaskMemFree (pv=0xffa70) [0087.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", lpFilePart=0x0) returned 0x5c [0087.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", lpFilePart=0x0) returned 0x5c [0087.847] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.847] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.847] CoTaskMemFree (pv=0xffa70) [0087.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.847] SetErrorMode (uMode=0x1) returned 0x0 [0087.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.849] GetFileType (hFile=0x18c) returned 0x1 [0087.849] SetErrorMode (uMode=0x0) returned 0x1 [0087.849] GetFileType (hFile=0x18c) returned 0x1 [0087.851] WriteFile (in: hFile=0x18c, lpBuffer=0x27a05b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x27a05b8*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0087.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", lpFilePart=0x0) returned 0x4b [0087.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", lpFilePart=0x0) returned 0x4b [0087.852] SetErrorMode (uMode=0x1) returned 0x0 [0087.852] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0087.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0087.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0087.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0087.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0 [0087.854] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.854] SetErrorMode (uMode=0x0) returned 0x1 [0087.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", lpFilePart=0x0) returned 0x4b [0087.854] SetErrorMode (uMode=0x1) returned 0x0 [0087.854] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0087.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0087.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0087.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0087.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0 [0087.855] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.855] SetErrorMode (uMode=0x0) returned 0x1 [0087.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", lpFilePart=0x0) returned 0x55 [0087.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", lpFilePart=0x0) returned 0x55 [0087.855] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.855] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.855] CoTaskMemFree (pv=0xffa70) [0087.855] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", lpFilePart=0x0) returned 0x56 [0087.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", lpFilePart=0x0) returned 0x56 [0087.856] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.856] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.856] CoTaskMemFree (pv=0xffa70) [0087.856] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", lpFilePart=0x0) returned 0x59 [0087.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", lpFilePart=0x0) returned 0x59 [0087.856] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.856] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.857] CoTaskMemFree (pv=0xffa70) [0087.857] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", lpFilePart=0x0) returned 0x5c [0087.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", lpFilePart=0x0) returned 0x5c [0087.857] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.857] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.857] CoTaskMemFree (pv=0xffa70) [0087.857] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.857] SetErrorMode (uMode=0x1) returned 0x0 [0087.857] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.859] GetFileType (hFile=0x18c) returned 0x1 [0087.859] SetErrorMode (uMode=0x0) returned 0x1 [0087.859] GetFileType (hFile=0x18c) returned 0x1 [0087.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", lpFilePart=0x0) returned 0x4b [0087.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", lpFilePart=0x0) returned 0x4b [0087.861] SetErrorMode (uMode=0x1) returned 0x0 [0087.861] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0087.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0087.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0087.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0087.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0 [0087.862] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.862] SetErrorMode (uMode=0x0) returned 0x1 [0087.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", lpFilePart=0x0) returned 0x4b [0087.863] SetErrorMode (uMode=0x1) returned 0x0 [0087.863] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0087.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0087.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0087.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0087.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0 [0087.863] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.863] SetErrorMode (uMode=0x0) returned 0x1 [0087.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", lpFilePart=0x0) returned 0x55 [0087.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", lpFilePart=0x0) returned 0x55 [0087.864] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.864] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.864] CoTaskMemFree (pv=0xffa70) [0087.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", lpFilePart=0x0) returned 0x56 [0087.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", lpFilePart=0x0) returned 0x56 [0087.864] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.864] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.865] CoTaskMemFree (pv=0xffa70) [0087.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", lpFilePart=0x0) returned 0x59 [0087.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", lpFilePart=0x0) returned 0x59 [0087.865] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.865] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.865] CoTaskMemFree (pv=0xffa70) [0087.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", lpFilePart=0x0) returned 0x5c [0087.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", lpFilePart=0x0) returned 0x5c [0087.865] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.865] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.866] CoTaskMemFree (pv=0xffa70) [0087.866] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.866] SetErrorMode (uMode=0x1) returned 0x0 [0087.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.868] GetFileType (hFile=0x18c) returned 0x1 [0087.868] SetErrorMode (uMode=0x0) returned 0x1 [0087.868] GetFileType (hFile=0x18c) returned 0x1 [0087.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", lpFilePart=0x0) returned 0x4b [0087.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", lpFilePart=0x0) returned 0x4b [0087.869] SetErrorMode (uMode=0x1) returned 0x0 [0087.869] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0087.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0087.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0087.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0087.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0 [0087.870] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.870] SetErrorMode (uMode=0x0) returned 0x1 [0087.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", lpFilePart=0x0) returned 0x4b [0087.871] SetErrorMode (uMode=0x1) returned 0x0 [0087.871] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0087.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0087.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0087.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0087.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0 [0087.871] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.872] SetErrorMode (uMode=0x0) returned 0x1 [0087.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", lpFilePart=0x0) returned 0x55 [0087.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", lpFilePart=0x0) returned 0x55 [0087.872] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.872] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.872] CoTaskMemFree (pv=0xffa70) [0087.872] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", lpFilePart=0x0) returned 0x56 [0087.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", lpFilePart=0x0) returned 0x56 [0087.872] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.872] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.872] CoTaskMemFree (pv=0xffa70) [0087.872] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", lpFilePart=0x0) returned 0x59 [0087.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", lpFilePart=0x0) returned 0x59 [0087.873] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.873] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.873] CoTaskMemFree (pv=0xffa70) [0087.873] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", lpFilePart=0x0) returned 0x5c [0087.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", lpFilePart=0x0) returned 0x5c [0087.873] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.873] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.873] CoTaskMemFree (pv=0xffa70) [0087.873] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.873] SetErrorMode (uMode=0x1) returned 0x0 [0087.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.875] GetFileType (hFile=0x18c) returned 0x1 [0087.876] SetErrorMode (uMode=0x0) returned 0x1 [0087.876] GetFileType (hFile=0x18c) returned 0x1 [0087.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", lpFilePart=0x0) returned 0x4b [0087.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", lpFilePart=0x0) returned 0x4b [0087.877] SetErrorMode (uMode=0x1) returned 0x0 [0087.877] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0087.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0087.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0087.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0087.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0 [0087.878] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.878] SetErrorMode (uMode=0x0) returned 0x1 [0087.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", lpFilePart=0x0) returned 0x4b [0087.878] SetErrorMode (uMode=0x1) returned 0x0 [0087.878] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0087.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0087.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0087.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0087.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0 [0087.879] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.879] SetErrorMode (uMode=0x0) returned 0x1 [0087.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", lpFilePart=0x0) returned 0x55 [0087.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", lpFilePart=0x0) returned 0x55 [0087.879] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.879] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.879] CoTaskMemFree (pv=0xffa70) [0087.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", lpFilePart=0x0) returned 0x56 [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", lpFilePart=0x0) returned 0x56 [0087.880] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.880] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.880] CoTaskMemFree (pv=0xffa70) [0087.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", lpFilePart=0x0) returned 0x59 [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", lpFilePart=0x0) returned 0x59 [0087.880] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.880] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.880] CoTaskMemFree (pv=0xffa70) [0087.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", lpFilePart=0x0) returned 0x5c [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", lpFilePart=0x0) returned 0x5c [0087.880] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.880] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.880] CoTaskMemFree (pv=0xffa70) [0087.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.881] SetErrorMode (uMode=0x1) returned 0x0 [0087.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.882] GetFileType (hFile=0x18c) returned 0x1 [0087.882] SetErrorMode (uMode=0x0) returned 0x1 [0087.882] GetFileType (hFile=0x18c) returned 0x1 [0087.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", lpFilePart=0x0) returned 0x4b [0087.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", lpFilePart=0x0) returned 0x4b [0087.884] SetErrorMode (uMode=0x1) returned 0x0 [0087.884] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0 [0087.885] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.885] SetErrorMode (uMode=0x0) returned 0x1 [0087.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", lpFilePart=0x0) returned 0x4b [0087.885] SetErrorMode (uMode=0x1) returned 0x0 [0087.885] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0 [0087.886] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.886] SetErrorMode (uMode=0x0) returned 0x1 [0087.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", lpFilePart=0x0) returned 0x55 [0087.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", lpFilePart=0x0) returned 0x55 [0087.886] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.886] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.886] CoTaskMemFree (pv=0xffa70) [0087.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", lpFilePart=0x0) returned 0x56 [0087.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", lpFilePart=0x0) returned 0x56 [0087.887] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.887] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.887] CoTaskMemFree (pv=0xffa70) [0087.887] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", lpFilePart=0x0) returned 0x59 [0087.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", lpFilePart=0x0) returned 0x59 [0087.887] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.887] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.887] CoTaskMemFree (pv=0xffa70) [0087.887] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", lpFilePart=0x0) returned 0x5c [0087.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", lpFilePart=0x0) returned 0x5c [0087.887] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.887] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.887] CoTaskMemFree (pv=0xffa70) [0087.887] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0087.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0087.887] SetErrorMode (uMode=0x1) returned 0x0 [0087.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.889] SetErrorMode (uMode=0x0) returned 0x1 [0087.889] GetFileType (hFile=0x18c) returned 0x1 [0087.890] SetErrorMode (uMode=0x1) returned 0x0 [0087.891] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.892] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 0 [0087.892] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.892] SetErrorMode (uMode=0x0) returned 0x1 [0087.893] SetErrorMode (uMode=0x1) returned 0x0 [0087.893] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.893] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.893] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0087.893] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0087.893] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0087.893] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0087.893] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 0 [0087.893] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.893] SetErrorMode (uMode=0x0) returned 0x1 [0087.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.893] CoTaskMemFree (pv=0xffa70) [0087.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.893] CoTaskMemFree (pv=0xffa70) [0087.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.894] CoTaskMemFree (pv=0xffa70) [0087.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.894] CoTaskMemFree (pv=0xffa70) [0087.894] SetErrorMode (uMode=0x1) returned 0x0 [0087.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.896] SetErrorMode (uMode=0x0) returned 0x1 [0087.896] GetFileType (hFile=0x18c) returned 0x1 [0087.897] SetErrorMode (uMode=0x1) returned 0x0 [0087.897] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0087.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0087.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1 [0087.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1 [0087.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 0 [0087.898] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.898] SetErrorMode (uMode=0x0) returned 0x1 [0087.898] SetErrorMode (uMode=0x1) returned 0x0 [0087.898] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0087.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0087.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1 [0087.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1 [0087.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 0 [0087.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.899] SetErrorMode (uMode=0x0) returned 0x1 [0087.899] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.899] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.899] CoTaskMemFree (pv=0xffa70) [0087.899] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.899] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.899] CoTaskMemFree (pv=0xffa70) [0087.899] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.900] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.900] CoTaskMemFree (pv=0xffa70) [0087.900] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.900] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.900] CoTaskMemFree (pv=0xffa70) [0087.900] SetErrorMode (uMode=0x1) returned 0x0 [0087.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.902] SetErrorMode (uMode=0x0) returned 0x1 [0087.902] GetFileType (hFile=0x18c) returned 0x1 [0087.903] SetErrorMode (uMode=0x1) returned 0x0 [0087.903] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0087.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0087.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1 [0087.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1 [0087.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 0 [0087.904] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.904] SetErrorMode (uMode=0x0) returned 0x1 [0087.904] SetErrorMode (uMode=0x1) returned 0x0 [0087.904] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0087.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0087.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1 [0087.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1 [0087.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 0 [0087.905] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.905] SetErrorMode (uMode=0x0) returned 0x1 [0087.905] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.905] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.905] CoTaskMemFree (pv=0xffa70) [0087.905] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.905] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.905] CoTaskMemFree (pv=0xffa70) [0087.905] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.905] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.905] CoTaskMemFree (pv=0xffa70) [0087.905] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.905] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.905] CoTaskMemFree (pv=0xffa70) [0087.906] SetErrorMode (uMode=0x1) returned 0x0 [0087.906] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.908] SetErrorMode (uMode=0x0) returned 0x1 [0087.908] GetFileType (hFile=0x18c) returned 0x1 [0087.909] SetErrorMode (uMode=0x1) returned 0x0 [0087.909] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 0 [0087.910] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.910] SetErrorMode (uMode=0x0) returned 0x1 [0087.910] SetErrorMode (uMode=0x1) returned 0x0 [0087.910] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0087.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0087.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1 [0087.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1 [0087.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 0 [0087.911] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.911] SetErrorMode (uMode=0x0) returned 0x1 [0087.911] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.911] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.911] CoTaskMemFree (pv=0xffa70) [0087.911] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.911] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.911] CoTaskMemFree (pv=0xffa70) [0087.911] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.911] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.911] CoTaskMemFree (pv=0xffa70) [0087.911] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.911] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.911] CoTaskMemFree (pv=0xffa70) [0087.911] SetErrorMode (uMode=0x1) returned 0x0 [0087.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.913] SetErrorMode (uMode=0x0) returned 0x1 [0087.913] GetFileType (hFile=0x18c) returned 0x1 [0087.914] SetErrorMode (uMode=0x1) returned 0x0 [0087.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.917] SetErrorMode (uMode=0x0) returned 0x1 [0087.917] GetFileType (hFile=0x18c) returned 0x1 [0087.918] SetErrorMode (uMode=0x1) returned 0x0 [0087.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.919] SetErrorMode (uMode=0x0) returned 0x1 [0087.919] GetFileType (hFile=0x18c) returned 0x1 [0087.920] SetErrorMode (uMode=0x1) returned 0x0 [0087.921] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc58440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0087.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0087.923] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.924] SetErrorMode (uMode=0x0) returned 0x1 [0087.924] SetErrorMode (uMode=0x1) returned 0x0 [0087.924] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc58440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0087.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0087.925] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.926] SetErrorMode (uMode=0x0) returned 0x1 [0087.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.926] CoTaskMemFree (pv=0xffa70) [0087.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.926] CoTaskMemFree (pv=0xffa70) [0087.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.926] CoTaskMemFree (pv=0xffa70) [0087.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.927] CoTaskMemFree (pv=0xffa70) [0087.927] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.927] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.927] CoTaskMemFree (pv=0xffa70) [0087.927] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.927] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.927] CoTaskMemFree (pv=0xffa70) [0087.927] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.927] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.927] CoTaskMemFree (pv=0xffa70) [0087.927] SetErrorMode (uMode=0x1) returned 0x0 [0087.927] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0087.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0087.929] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.929] SetErrorMode (uMode=0x0) returned 0x1 [0087.929] SetErrorMode (uMode=0x1) returned 0x0 [0087.929] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0087.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0087.929] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.929] SetErrorMode (uMode=0x0) returned 0x1 [0087.929] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.929] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.929] CoTaskMemFree (pv=0xffa70) [0087.930] SetErrorMode (uMode=0x1) returned 0x0 [0087.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.930] SetErrorMode (uMode=0x0) returned 0x1 [0087.930] GetFileType (hFile=0x18c) returned 0x1 [0087.931] SetErrorMode (uMode=0x1) returned 0x0 [0087.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0087.932] SetErrorMode (uMode=0x0) returned 0x1 [0087.932] GetFileType (hFile=0x18c) returned 0x1 [0087.933] SetErrorMode (uMode=0x1) returned 0x0 [0087.933] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0087.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0087.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0087.934] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.934] SetErrorMode (uMode=0x0) returned 0x1 [0087.934] SetErrorMode (uMode=0x1) returned 0x0 [0087.934] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0087.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0087.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0087.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0087.935] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0087.935] SetErrorMode (uMode=0x0) returned 0x1 [0087.935] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0087.935] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0087.935] CoTaskMemFree (pv=0xffa70) [0087.935] SetErrorMode (uMode=0x1) returned 0x0 [0087.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0087.935] SetErrorMode (uMode=0x0) returned 0x1 [0087.935] GetFileType (hFile=0x18c) returned 0x1 [0087.935] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7f79 [0087.936] ReadFile (in: hFile=0x18c, lpBuffer=0x2906ad0, nNumberOfBytesToRead=0x7f79, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2906ad0*, lpNumberOfBytesRead=0x27e6e8*=0x7f79, lpOverlapped=0x0) returned 1 [0087.940] SetErrorMode (uMode=0x1) returned 0x0 [0087.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79)) returned 1 [0087.940] SetErrorMode (uMode=0x0) returned 0x1 [0088.022] SetErrorMode (uMode=0x1) returned 0x0 [0088.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.023] SetErrorMode (uMode=0x0) returned 0x1 [0088.023] GetFileType (hFile=0x18c) returned 0x1 [0088.023] WriteFile (in: hFile=0x18c, lpBuffer=0x279eab0*, nNumberOfBytesToWrite=0x8080, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x279eab0*, lpNumberOfBytesWritten=0x27e768*=0x8080, lpOverlapped=0x0) returned 1 [0088.024] SetErrorMode (uMode=0x1) returned 0x0 [0088.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x52738f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8080)) returned 1 [0088.025] SetErrorMode (uMode=0x0) returned 0x1 [0088.025] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\XjGqbID1IyzPC5k1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\xjgqbid1iyzpc5k1_encrypted_by.whiterose")) returned 1 [0088.134] SetErrorMode (uMode=0x1) returned 0x0 [0088.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0088.134] SetErrorMode (uMode=0x0) returned 0x1 [0088.135] GetFileType (hFile=0x18c) returned 0x1 [0088.136] SetErrorMode (uMode=0x1) returned 0x0 [0088.136] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0088.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 1 [0088.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 0 [0088.136] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0088.136] SetErrorMode (uMode=0x0) returned 0x1 [0088.137] SetErrorMode (uMode=0x1) returned 0x0 [0088.137] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0088.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 1 [0088.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 0 [0088.137] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0088.137] SetErrorMode (uMode=0x0) returned 0x1 [0088.137] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0088.137] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0088.137] CoTaskMemFree (pv=0xffa70) [0088.137] SetErrorMode (uMode=0x1) returned 0x0 [0088.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0088.138] SetErrorMode (uMode=0x0) returned 0x1 [0088.139] GetFileType (hFile=0x18c) returned 0x1 [0088.140] SetErrorMode (uMode=0x1) returned 0x0 [0088.140] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0088.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0088.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="RE78D9~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0088.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0088.145] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0088.145] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0088.145] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0088.145] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0088.145] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0088.145] SetErrorMode (uMode=0x0) returned 0x1 [0088.146] SetErrorMode (uMode=0x1) returned 0x0 [0088.146] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0088.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0088.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0088.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="RE78D9~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0088.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0088.148] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0088.149] SetErrorMode (uMode=0x0) returned 0x1 [0088.149] SetErrorMode (uMode=0x1) returned 0x0 [0088.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.151] SetErrorMode (uMode=0x0) returned 0x1 [0088.151] GetFileType (hFile=0x18c) returned 0x1 [0088.151] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x53a [0088.151] ReadFile (in: hFile=0x18c, lpBuffer=0x27dec18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27dec18*, lpNumberOfBytesRead=0x27e6e8*=0x53a, lpOverlapped=0x0) returned 1 [0088.153] SetErrorMode (uMode=0x1) returned 0x0 [0088.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53a)) returned 1 [0088.153] SetErrorMode (uMode=0x0) returned 0x1 [0088.213] SetErrorMode (uMode=0x1) returned 0x0 [0088.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.214] SetErrorMode (uMode=0x0) returned 0x1 [0088.214] GetFileType (hFile=0x18c) returned 0x1 [0088.215] SetErrorMode (uMode=0x1) returned 0x0 [0088.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x543c970, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0088.215] SetErrorMode (uMode=0x0) returned 0x1 [0088.215] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\Qh5YBdjnGXb2ttV0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\qh5ybdjngxb2ttv0_encrypted_by.whiterose")) returned 1 [0088.321] SetErrorMode (uMode=0x1) returned 0x0 [0088.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.322] SetErrorMode (uMode=0x0) returned 0x1 [0088.322] GetFileType (hFile=0x18c) returned 0x1 [0088.322] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x53 [0088.322] ReadFile (in: hFile=0x18c, lpBuffer=0x2852d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2852d08*, lpNumberOfBytesRead=0x27e6e8*=0x53, lpOverlapped=0x0) returned 1 [0088.323] SetErrorMode (uMode=0x1) returned 0x0 [0088.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53)) returned 1 [0088.323] SetErrorMode (uMode=0x0) returned 0x1 [0088.386] SetErrorMode (uMode=0x1) returned 0x0 [0088.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.387] SetErrorMode (uMode=0x0) returned 0x1 [0088.387] GetFileType (hFile=0x18c) returned 0x1 [0088.388] SetErrorMode (uMode=0x1) returned 0x0 [0088.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x55df890, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0088.388] SetErrorMode (uMode=0x0) returned 0x1 [0088.388] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\HKhGgxnFXnUiJYjy_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\hkhggxnfxnuijyjy_encrypted_by.whiterose")) returned 1 [0088.492] SetErrorMode (uMode=0x1) returned 0x0 [0088.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.494] SetErrorMode (uMode=0x0) returned 0x1 [0088.494] GetFileType (hFile=0x18c) returned 0x1 [0088.494] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x52 [0088.494] ReadFile (in: hFile=0x18c, lpBuffer=0x28b1428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b1428*, lpNumberOfBytesRead=0x27e6e8*=0x52, lpOverlapped=0x0) returned 1 [0088.495] SetErrorMode (uMode=0x1) returned 0x0 [0088.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52)) returned 1 [0088.495] SetErrorMode (uMode=0x0) returned 0x1 [0088.567] SetErrorMode (uMode=0x1) returned 0x0 [0088.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.569] SetErrorMode (uMode=0x0) returned 0x1 [0088.569] GetFileType (hFile=0x18c) returned 0x1 [0088.569] SetErrorMode (uMode=0x1) returned 0x0 [0088.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x57827b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0088.570] SetErrorMode (uMode=0x0) returned 0x1 [0088.570] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\3VOatY1r8qTNgV2l_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\3voaty1r8qtngv2l_encrypted_by.whiterose")) returned 1 [0088.680] SetErrorMode (uMode=0x1) returned 0x0 [0088.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.680] SetErrorMode (uMode=0x0) returned 0x1 [0088.680] GetFileType (hFile=0x18c) returned 0x1 [0088.680] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4aa [0088.680] ReadFile (in: hFile=0x18c, lpBuffer=0x2910550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2910550*, lpNumberOfBytesRead=0x27e6e8*=0x4aa, lpOverlapped=0x0) returned 1 [0088.682] SetErrorMode (uMode=0x1) returned 0x0 [0088.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4aa)) returned 1 [0088.682] SetErrorMode (uMode=0x0) returned 0x1 [0088.742] SetErrorMode (uMode=0x1) returned 0x0 [0088.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.743] SetErrorMode (uMode=0x0) returned 0x1 [0088.743] GetFileType (hFile=0x18c) returned 0x1 [0088.744] SetErrorMode (uMode=0x1) returned 0x0 [0088.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x594b830, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0088.744] SetErrorMode (uMode=0x0) returned 0x1 [0088.744] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\f7dilgeLmLnzwJCL_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\f7dilgelmlnzwjcl_encrypted_by.whiterose")) returned 1 [0088.851] SetErrorMode (uMode=0x1) returned 0x0 [0088.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.852] SetErrorMode (uMode=0x0) returned 0x1 [0088.852] GetFileType (hFile=0x18c) returned 0x1 [0088.852] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x335 [0088.852] ReadFile (in: hFile=0x18c, lpBuffer=0x27713b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27713b8*, lpNumberOfBytesRead=0x27e6e8*=0x335, lpOverlapped=0x0) returned 1 [0088.854] SetErrorMode (uMode=0x1) returned 0x0 [0088.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x335)) returned 1 [0088.854] SetErrorMode (uMode=0x0) returned 0x1 [0088.912] SetErrorMode (uMode=0x1) returned 0x0 [0088.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0088.914] SetErrorMode (uMode=0x0) returned 0x1 [0088.914] GetFileType (hFile=0x18c) returned 0x1 [0088.914] SetErrorMode (uMode=0x1) returned 0x0 [0088.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5aee750, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0088.915] SetErrorMode (uMode=0x0) returned 0x1 [0088.915] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\AgKOyHQywOm66Hiy_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\agkoyhqywom66hiy_encrypted_by.whiterose")) returned 1 [0089.023] SetErrorMode (uMode=0x1) returned 0x0 [0089.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.023] SetErrorMode (uMode=0x0) returned 0x1 [0089.023] GetFileType (hFile=0x18c) returned 0x1 [0089.023] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5a3 [0089.023] ReadFile (in: hFile=0x18c, lpBuffer=0x27d1678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d1678*, lpNumberOfBytesRead=0x27e6e8*=0x5a3, lpOverlapped=0x0) returned 1 [0089.025] SetErrorMode (uMode=0x1) returned 0x0 [0089.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a3)) returned 1 [0089.025] SetErrorMode (uMode=0x0) returned 0x1 [0089.084] SetErrorMode (uMode=0x1) returned 0x0 [0089.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.085] SetErrorMode (uMode=0x0) returned 0x1 [0089.086] GetFileType (hFile=0x18c) returned 0x1 [0089.086] SetErrorMode (uMode=0x1) returned 0x0 [0089.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5c91670, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0089.087] SetErrorMode (uMode=0x0) returned 0x1 [0089.087] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rJZvc2VQOe6mjbHY_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rjzvc2vqoe6mjbhy_encrypted_by.whiterose")) returned 1 [0089.195] SetErrorMode (uMode=0x1) returned 0x0 [0089.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.195] SetErrorMode (uMode=0x0) returned 0x1 [0089.195] GetFileType (hFile=0x18c) returned 0x1 [0089.195] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x550 [0089.195] ReadFile (in: hFile=0x18c, lpBuffer=0x2832af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2832af0*, lpNumberOfBytesRead=0x27e6e8*=0x550, lpOverlapped=0x0) returned 1 [0089.197] SetErrorMode (uMode=0x1) returned 0x0 [0089.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0089.197] SetErrorMode (uMode=0x0) returned 0x1 [0089.257] SetErrorMode (uMode=0x1) returned 0x0 [0089.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.258] SetErrorMode (uMode=0x0) returned 0x1 [0089.258] GetFileType (hFile=0x18c) returned 0x1 [0089.259] SetErrorMode (uMode=0x1) returned 0x0 [0089.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5e34590, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0089.259] SetErrorMode (uMode=0x0) returned 0x1 [0089.259] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\MUv2prxDYi5RS0oL_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\muv2prxdyi5rs0ol_encrypted_by.whiterose")) returned 1 [0089.366] SetErrorMode (uMode=0x1) returned 0x0 [0089.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.366] SetErrorMode (uMode=0x0) returned 0x1 [0089.367] GetFileType (hFile=0x18c) returned 0x1 [0089.367] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x327 [0089.367] ReadFile (in: hFile=0x18c, lpBuffer=0x2893970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2893970*, lpNumberOfBytesRead=0x27e6e8*=0x327, lpOverlapped=0x0) returned 1 [0089.368] SetErrorMode (uMode=0x1) returned 0x0 [0089.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x327)) returned 1 [0089.369] SetErrorMode (uMode=0x0) returned 0x1 [0089.430] SetErrorMode (uMode=0x1) returned 0x0 [0089.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.431] SetErrorMode (uMode=0x0) returned 0x1 [0089.431] GetFileType (hFile=0x18c) returned 0x1 [0089.432] SetErrorMode (uMode=0x1) returned 0x0 [0089.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5fd74b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0089.432] SetErrorMode (uMode=0x0) returned 0x1 [0089.432] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\DnJJ5LBVeIM08DNa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\dnjj5lbveim08dna_encrypted_by.whiterose")) returned 1 [0089.544] SetErrorMode (uMode=0x1) returned 0x0 [0089.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.545] SetErrorMode (uMode=0x0) returned 0x1 [0089.545] GetFileType (hFile=0x18c) returned 0x1 [0089.545] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x384 [0089.545] ReadFile (in: hFile=0x18c, lpBuffer=0x28f3908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f3908*, lpNumberOfBytesRead=0x27e6e8*=0x384, lpOverlapped=0x0) returned 1 [0089.547] SetErrorMode (uMode=0x1) returned 0x0 [0089.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0089.547] SetErrorMode (uMode=0x0) returned 0x1 [0089.613] SetErrorMode (uMode=0x1) returned 0x0 [0089.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.615] SetErrorMode (uMode=0x0) returned 0x1 [0089.615] GetFileType (hFile=0x18c) returned 0x1 [0089.616] SetErrorMode (uMode=0x1) returned 0x0 [0089.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x61a0530, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0089.616] SetErrorMode (uMode=0x0) returned 0x1 [0089.616] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\uQXrJ5Fcw0vql8bB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\uqxrj5fcw0vql8bb_encrypted_by.whiterose")) returned 1 [0089.725] SetErrorMode (uMode=0x1) returned 0x0 [0089.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.725] SetErrorMode (uMode=0x0) returned 0x1 [0089.725] GetFileType (hFile=0x18c) returned 0x1 [0089.725] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x265 [0089.725] ReadFile (in: hFile=0x18c, lpBuffer=0x2753c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2753c08*, lpNumberOfBytesRead=0x27e6e8*=0x265, lpOverlapped=0x0) returned 1 [0089.727] SetErrorMode (uMode=0x1) returned 0x0 [0089.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x265)) returned 1 [0089.727] SetErrorMode (uMode=0x0) returned 0x1 [0089.788] SetErrorMode (uMode=0x1) returned 0x0 [0089.788] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.789] SetErrorMode (uMode=0x0) returned 0x1 [0089.789] GetFileType (hFile=0x18c) returned 0x1 [0089.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", lpFilePart=0x0) returned 0x4d [0089.799] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif")) returned 1 [0089.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x4a [0089.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x4a [0089.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x4a [0089.801] SetErrorMode (uMode=0x1) returned 0x0 [0089.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.801] GetFileType (hFile=0x18c) returned 0x1 [0089.801] SetErrorMode (uMode=0x0) returned 0x1 [0089.801] GetFileType (hFile=0x18c) returned 0x1 [0089.801] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x267 [0089.801] ReadFile (in: hFile=0x18c, lpBuffer=0x27b3b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27b3b88*, lpNumberOfBytesRead=0x27e6e8*=0x267, lpOverlapped=0x0) returned 1 [0089.803] CloseHandle (hObject=0x18c) returned 1 [0089.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x4a [0089.804] SetErrorMode (uMode=0x1) returned 0x0 [0089.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x267)) returned 1 [0089.804] SetErrorMode (uMode=0x0) returned 0x1 [0089.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x4a [0089.901] SetErrorMode (uMode=0x1) returned 0x0 [0089.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0089.902] GetFileType (hFile=0x18c) returned 0x1 [0089.902] SetErrorMode (uMode=0x0) returned 0x1 [0089.902] GetFileType (hFile=0x18c) returned 0x1 [0089.902] WriteFile (in: hFile=0x18c, lpBuffer=0x2811040*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2811040*, lpNumberOfBytesWritten=0x27e688*=0x370, lpOverlapped=0x0) returned 1 [0089.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x4a [0089.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\zU1A0Fd9kYXPwFt8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\zU1A0Fd9kYXPwFt8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0089.903] SetErrorMode (uMode=0x1) returned 0x0 [0089.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x644ddf0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0089.903] SetErrorMode (uMode=0x0) returned 0x1 [0089.903] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\zU1A0Fd9kYXPwFt8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\zu1a0fd9kyxpwft8_encrypted_by.whiterose")) returned 1 [0090.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.006] SetErrorMode (uMode=0x1) returned 0x0 [0090.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.006] GetFileType (hFile=0x18c) returned 0x1 [0090.006] SetErrorMode (uMode=0x0) returned 0x1 [0090.007] GetFileType (hFile=0x18c) returned 0x1 [0090.007] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x228 [0090.007] ReadFile (in: hFile=0x18c, lpBuffer=0x2813850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2813850*, lpNumberOfBytesRead=0x27e6e8*=0x228, lpOverlapped=0x0) returned 1 [0090.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.008] SetErrorMode (uMode=0x1) returned 0x0 [0090.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0090.008] SetErrorMode (uMode=0x0) returned 0x1 [0090.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.069] SetErrorMode (uMode=0x1) returned 0x0 [0090.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.070] GetFileType (hFile=0x18c) returned 0x1 [0090.070] SetErrorMode (uMode=0x0) returned 0x1 [0090.070] GetFileType (hFile=0x18c) returned 0x1 [0090.070] WriteFile (in: hFile=0x18c, lpBuffer=0x2870a08*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2870a08*, lpNumberOfBytesWritten=0x27e688*=0x330, lpOverlapped=0x0) returned 1 [0090.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\Z*6k24l1pIhN6AMS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\Z*6k24l1pIhN6AMS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x47 [0090.077] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif")) returned 1 [0090.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x4a [0090.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x4a [0090.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x4a [0090.080] SetErrorMode (uMode=0x1) returned 0x0 [0090.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.080] GetFileType (hFile=0x18c) returned 0x1 [0090.080] SetErrorMode (uMode=0x0) returned 0x1 [0090.080] GetFileType (hFile=0x18c) returned 0x1 [0090.080] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3c9 [0090.080] ReadFile (in: hFile=0x18c, lpBuffer=0x2873810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2873810*, lpNumberOfBytesRead=0x27e6e8*=0x3c9, lpOverlapped=0x0) returned 1 [0090.082] CloseHandle (hObject=0x18c) returned 1 [0090.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x4a [0090.083] SetErrorMode (uMode=0x1) returned 0x0 [0090.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c9)) returned 1 [0090.083] SetErrorMode (uMode=0x0) returned 0x1 [0090.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x4a [0090.172] SetErrorMode (uMode=0x1) returned 0x0 [0090.172] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.173] GetFileType (hFile=0x18c) returned 0x1 [0090.173] SetErrorMode (uMode=0x0) returned 0x1 [0090.173] GetFileType (hFile=0x18c) returned 0x1 [0090.174] WriteFile (in: hFile=0x18c, lpBuffer=0x28d1550*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28d1550*, lpNumberOfBytesWritten=0x27e688*=0x4d0, lpOverlapped=0x0) returned 1 [0090.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x4a [0090.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\mlpy2e987AYcHRaA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\mlpy2e987AYcHRaA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.175] SetErrorMode (uMode=0x1) returned 0x0 [0090.175] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x66d5550, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0090.175] SetErrorMode (uMode=0x0) returned 0x1 [0090.175] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\mlpy2e987AYcHRaA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\mlpy2e987aychraa_encrypted_by.whiterose")) returned 1 [0090.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x40 [0090.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x40 [0090.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x40 [0090.271] SetErrorMode (uMode=0x1) returned 0x0 [0090.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.272] GetFileType (hFile=0x18c) returned 0x1 [0090.272] SetErrorMode (uMode=0x0) returned 0x1 [0090.272] GetFileType (hFile=0x18c) returned 0x1 [0090.272] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x242 [0090.272] ReadFile (in: hFile=0x18c, lpBuffer=0x28d3d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d3d50*, lpNumberOfBytesRead=0x27e6e8*=0x242, lpOverlapped=0x0) returned 1 [0090.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x40 [0090.273] SetErrorMode (uMode=0x1) returned 0x0 [0090.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x242)) returned 1 [0090.273] SetErrorMode (uMode=0x0) returned 0x1 [0090.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x40 [0090.338] SetErrorMode (uMode=0x1) returned 0x0 [0090.338] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.339] GetFileType (hFile=0x18c) returned 0x1 [0090.339] SetErrorMode (uMode=0x0) returned 0x1 [0090.339] GetFileType (hFile=0x18c) returned 0x1 [0090.339] WriteFile (in: hFile=0x18c, lpBuffer=0x27310a8*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x27310a8*, lpNumberOfBytesWritten=0x27e688*=0x350, lpOverlapped=0x0) returned 1 [0090.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x40 [0090.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\qVjTFD7XcrwHfsgm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\qVjTFD7XcrwHfsgm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.340] SetErrorMode (uMode=0x1) returned 0x0 [0090.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6878470, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0090.340] SetErrorMode (uMode=0x0) returned 0x1 [0090.340] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\qVjTFD7XcrwHfsgm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\qvjtfd7xcrwhfsgm_encrypted_by.whiterose")) returned 1 [0090.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.443] SetErrorMode (uMode=0x1) returned 0x0 [0090.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.443] GetFileType (hFile=0x18c) returned 0x1 [0090.443] SetErrorMode (uMode=0x0) returned 0x1 [0090.444] GetFileType (hFile=0x18c) returned 0x1 [0090.444] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2e9a [0090.444] ReadFile (in: hFile=0x18c, lpBuffer=0x2733628, nNumberOfBytesToRead=0x2e9a, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2733628*, lpNumberOfBytesRead=0x27e6e8*=0x2e9a, lpOverlapped=0x0) returned 1 [0090.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.447] SetErrorMode (uMode=0x1) returned 0x0 [0090.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a)) returned 1 [0090.447] SetErrorMode (uMode=0x0) returned 0x1 [0090.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.517] SetErrorMode (uMode=0x1) returned 0x0 [0090.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.521] GetFileType (hFile=0x18c) returned 0x1 [0090.521] SetErrorMode (uMode=0x0) returned 0x1 [0090.521] GetFileType (hFile=0x18c) returned 0x1 [0090.521] WriteFile (in: hFile=0x18c, lpBuffer=0x27a25b0*, nNumberOfBytesToWrite=0x2fa0, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x27a25b0*, lpNumberOfBytesWritten=0x27e768*=0x2fa0, lpOverlapped=0x0) returned 1 [0090.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\L7QoS6IJmuvbOqY*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\L7QoS6IJmuvbOqY*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0090.525] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 1 [0090.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x4e [0090.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x4e [0090.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x4e [0090.529] SetErrorMode (uMode=0x1) returned 0x0 [0090.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.532] GetFileType (hFile=0x18c) returned 0x1 [0090.532] SetErrorMode (uMode=0x0) returned 0x1 [0090.532] GetFileType (hFile=0x18c) returned 0x1 [0090.532] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x326 [0090.532] ReadFile (in: hFile=0x18c, lpBuffer=0x27a7610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a7610*, lpNumberOfBytesRead=0x27e6e8*=0x326, lpOverlapped=0x0) returned 1 [0090.534] CloseHandle (hObject=0x18c) returned 1 [0090.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x4e [0090.534] SetErrorMode (uMode=0x1) returned 0x0 [0090.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x326)) returned 1 [0090.535] SetErrorMode (uMode=0x0) returned 0x1 [0090.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x4e [0090.640] SetErrorMode (uMode=0x1) returned 0x0 [0090.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.641] GetFileType (hFile=0x18c) returned 0x1 [0090.641] SetErrorMode (uMode=0x0) returned 0x1 [0090.641] GetFileType (hFile=0x18c) returned 0x1 [0090.641] WriteFile (in: hFile=0x18c, lpBuffer=0x28022a0*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28022a0*, lpNumberOfBytesWritten=0x27e688*=0x430, lpOverlapped=0x0) returned 1 [0090.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x4e [0090.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\vZm36eES2fY7q1yS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\vZm36eES2fY7q1yS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.643] SetErrorMode (uMode=0x1) returned 0x0 [0090.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6b4be90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0090.643] SetErrorMode (uMode=0x0) returned 0x1 [0090.643] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\vZm36eES2fY7q1yS_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\vzm36ees2fy7q1ys_encrypted_by.whiterose")) returned 1 [0090.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x3f [0090.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x3f [0090.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x3f [0090.739] SetErrorMode (uMode=0x1) returned 0x0 [0090.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.740] GetFileType (hFile=0x18c) returned 0x1 [0090.740] SetErrorMode (uMode=0x0) returned 0x1 [0090.740] GetFileType (hFile=0x18c) returned 0x1 [0090.740] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1e0 [0090.740] ReadFile (in: hFile=0x18c, lpBuffer=0x2804a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2804a18*, lpNumberOfBytesRead=0x27e6e8*=0x1e0, lpOverlapped=0x0) returned 1 [0090.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x3f [0090.742] SetErrorMode (uMode=0x1) returned 0x0 [0090.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0090.742] SetErrorMode (uMode=0x0) returned 0x1 [0090.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x3f [0090.804] SetErrorMode (uMode=0x1) returned 0x0 [0090.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.805] GetFileType (hFile=0x18c) returned 0x1 [0090.805] SetErrorMode (uMode=0x0) returned 0x1 [0090.805] GetFileType (hFile=0x18c) returned 0x1 [0090.805] WriteFile (in: hFile=0x18c, lpBuffer=0x2861868*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2861868*, lpNumberOfBytesWritten=0x27e688*=0x2f0, lpOverlapped=0x0) returned 1 [0090.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x3f [0090.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\VerMXCMJ82j5ZWRE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\VerMXCMJ82j5ZWRE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.806] SetErrorMode (uMode=0x1) returned 0x0 [0090.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6ceedb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0090.806] SetErrorMode (uMode=0x0) returned 0x1 [0090.806] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\VerMXCMJ82j5ZWRE_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\vermxcmj82j5zwre_encrypted_by.whiterose")) returned 1 [0090.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.911] SetErrorMode (uMode=0x1) returned 0x0 [0090.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.911] GetFileType (hFile=0x18c) returned 0x1 [0090.911] SetErrorMode (uMode=0x0) returned 0x1 [0090.911] GetFileType (hFile=0x18c) returned 0x1 [0090.911] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5ac [0090.911] ReadFile (in: hFile=0x18c, lpBuffer=0x28643d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28643d0*, lpNumberOfBytesRead=0x27e6e8*=0x5ac, lpOverlapped=0x0) returned 1 [0090.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.913] SetErrorMode (uMode=0x1) returned 0x0 [0090.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0090.913] SetErrorMode (uMode=0x0) returned 0x1 [0090.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.976] SetErrorMode (uMode=0x1) returned 0x0 [0090.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.977] GetFileType (hFile=0x18c) returned 0x1 [0090.977] SetErrorMode (uMode=0x0) returned 0x1 [0090.977] GetFileType (hFile=0x18c) returned 0x1 [0090.977] WriteFile (in: hFile=0x18c, lpBuffer=0x28c2e30*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28c2e30*, lpNumberOfBytesWritten=0x27e688*=0x6b0, lpOverlapped=0x0) returned 1 [0090.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\fpYh*5owf6izxUyr_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\fpYh*5owf6izxUyr_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0090.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x45 [0090.988] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif")) returned 1 [0090.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0090.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0090.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0090.990] SetErrorMode (uMode=0x1) returned 0x0 [0090.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0090.991] GetFileType (hFile=0x18c) returned 0x1 [0090.991] SetErrorMode (uMode=0x0) returned 0x1 [0090.991] GetFileType (hFile=0x18c) returned 0x1 [0090.991] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x392 [0090.991] ReadFile (in: hFile=0x18c, lpBuffer=0x28c5c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c5c00*, lpNumberOfBytesRead=0x27e6e8*=0x392, lpOverlapped=0x0) returned 1 [0090.992] CloseHandle (hObject=0x18c) returned 1 [0090.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0090.993] SetErrorMode (uMode=0x1) returned 0x0 [0090.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x392)) returned 1 [0090.993] SetErrorMode (uMode=0x0) returned 0x1 [0091.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0091.095] SetErrorMode (uMode=0x1) returned 0x0 [0091.095] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.096] GetFileType (hFile=0x18c) returned 0x1 [0091.096] SetErrorMode (uMode=0x0) returned 0x1 [0091.096] GetFileType (hFile=0x18c) returned 0x1 [0091.096] WriteFile (in: hFile=0x18c, lpBuffer=0x2923460*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2923460*, lpNumberOfBytesWritten=0x27e688*=0x4a0, lpOverlapped=0x0) returned 1 [0091.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0091.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\1iuWndlEUQLs*u0*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\1iuWndlEUQLs*u0*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0091.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x4a [0091.100] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif")) returned 1 [0091.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x48 [0091.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x48 [0091.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x48 [0091.103] SetErrorMode (uMode=0x1) returned 0x0 [0091.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.103] GetFileType (hFile=0x18c) returned 0x1 [0091.103] SetErrorMode (uMode=0x0) returned 0x1 [0091.103] GetFileType (hFile=0x18c) returned 0x1 [0091.103] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x38d [0091.103] ReadFile (in: hFile=0x18c, lpBuffer=0x2926240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2926240*, lpNumberOfBytesRead=0x27e6e8*=0x38d, lpOverlapped=0x0) returned 1 [0091.106] CloseHandle (hObject=0x18c) returned 1 [0091.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x48 [0091.107] SetErrorMode (uMode=0x1) returned 0x0 [0091.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38d)) returned 1 [0091.107] SetErrorMode (uMode=0x0) returned 0x1 [0091.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x48 [0091.194] SetErrorMode (uMode=0x1) returned 0x0 [0091.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.195] GetFileType (hFile=0x18c) returned 0x1 [0091.195] SetErrorMode (uMode=0x0) returned 0x1 [0091.195] GetFileType (hFile=0x18c) returned 0x1 [0091.195] WriteFile (in: hFile=0x18c, lpBuffer=0x2783c70*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2783c70*, lpNumberOfBytesWritten=0x27e688*=0x490, lpOverlapped=0x0) returned 1 [0091.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x48 [0091.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tznp4lDQwoOlMI0R_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tznp4lDQwoOlMI0R_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0091.197] SetErrorMode (uMode=0x1) returned 0x0 [0091.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x70a7010, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0091.197] SetErrorMode (uMode=0x0) returned 0x1 [0091.197] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tznp4lDQwoOlMI0R_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tznp4ldqwoolmi0r_encrypted_by.whiterose")) returned 1 [0091.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x49 [0091.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x49 [0091.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x49 [0091.301] SetErrorMode (uMode=0x1) returned 0x0 [0091.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.301] GetFileType (hFile=0x18c) returned 0x1 [0091.301] SetErrorMode (uMode=0x0) returned 0x1 [0091.301] GetFileType (hFile=0x18c) returned 0x1 [0091.301] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x32e [0091.301] ReadFile (in: hFile=0x18c, lpBuffer=0x27865b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27865b8*, lpNumberOfBytesRead=0x27e6e8*=0x32e, lpOverlapped=0x0) returned 1 [0091.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x49 [0091.303] SetErrorMode (uMode=0x1) returned 0x0 [0091.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32e)) returned 1 [0091.303] SetErrorMode (uMode=0x0) returned 0x1 [0091.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x49 [0091.363] SetErrorMode (uMode=0x1) returned 0x0 [0091.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.364] GetFileType (hFile=0x18c) returned 0x1 [0091.364] SetErrorMode (uMode=0x0) returned 0x1 [0091.364] GetFileType (hFile=0x18c) returned 0x1 [0091.364] WriteFile (in: hFile=0x18c, lpBuffer=0x27e3d30*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x27e3d30*, lpNumberOfBytesWritten=0x27e688*=0x430, lpOverlapped=0x0) returned 1 [0091.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x49 [0091.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\1QzweS0avTC4DOx1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\1QzweS0avTC4DOx1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0091.366] SetErrorMode (uMode=0x1) returned 0x0 [0091.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7249f30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0091.366] SetErrorMode (uMode=0x0) returned 0x1 [0091.366] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\1QzweS0avTC4DOx1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\1qzwes0avtc4dox1_encrypted_by.whiterose")) returned 1 [0091.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x4a [0091.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x4a [0091.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x4a [0091.473] SetErrorMode (uMode=0x1) returned 0x0 [0091.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.473] GetFileType (hFile=0x18c) returned 0x1 [0091.473] SetErrorMode (uMode=0x0) returned 0x1 [0091.473] GetFileType (hFile=0x18c) returned 0x1 [0091.473] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x47f [0091.474] ReadFile (in: hFile=0x18c, lpBuffer=0x27e67c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e67c8*, lpNumberOfBytesRead=0x27e6e8*=0x47f, lpOverlapped=0x0) returned 1 [0091.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x4a [0091.475] SetErrorMode (uMode=0x1) returned 0x0 [0091.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f)) returned 1 [0091.476] SetErrorMode (uMode=0x0) returned 0x1 [0091.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x4a [0091.535] SetErrorMode (uMode=0x1) returned 0x0 [0091.535] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.536] GetFileType (hFile=0x18c) returned 0x1 [0091.536] SetErrorMode (uMode=0x0) returned 0x1 [0091.536] GetFileType (hFile=0x18c) returned 0x1 [0091.536] WriteFile (in: hFile=0x18c, lpBuffer=0x28448e0*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28448e0*, lpNumberOfBytesWritten=0x27e688*=0x580, lpOverlapped=0x0) returned 1 [0091.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x4a [0091.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\RjNeUbctNjkkThWq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\RjNeUbctNjkkThWq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0091.538] SetErrorMode (uMode=0x1) returned 0x0 [0091.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x73ece50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0091.538] SetErrorMode (uMode=0x0) returned 0x1 [0091.538] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\RjNeUbctNjkkThWq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rjneubctnjkkthwq_encrypted_by.whiterose")) returned 1 [0091.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x48 [0091.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x48 [0091.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x48 [0091.644] SetErrorMode (uMode=0x1) returned 0x0 [0091.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.645] GetFileType (hFile=0x18c) returned 0x1 [0091.645] SetErrorMode (uMode=0x0) returned 0x1 [0091.645] GetFileType (hFile=0x18c) returned 0x1 [0091.645] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x57d [0091.645] ReadFile (in: hFile=0x18c, lpBuffer=0x2847478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2847478*, lpNumberOfBytesRead=0x27e6e8*=0x57d, lpOverlapped=0x0) returned 1 [0091.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x48 [0091.647] SetErrorMode (uMode=0x1) returned 0x0 [0091.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57d)) returned 1 [0091.647] SetErrorMode (uMode=0x0) returned 0x1 [0091.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x48 [0091.706] SetErrorMode (uMode=0x1) returned 0x0 [0091.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.707] GetFileType (hFile=0x18c) returned 0x1 [0091.707] SetErrorMode (uMode=0x0) returned 0x1 [0091.707] GetFileType (hFile=0x18c) returned 0x1 [0091.707] WriteFile (in: hFile=0x18c, lpBuffer=0x28a5af0*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28a5af0*, lpNumberOfBytesWritten=0x27e688*=0x680, lpOverlapped=0x0) returned 1 [0091.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x48 [0091.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\IM3XyugL5J5C9MkQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\IM3XyugL5J5C9MkQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0091.709] SetErrorMode (uMode=0x1) returned 0x0 [0091.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x758fd70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0091.709] SetErrorMode (uMode=0x0) returned 0x1 [0091.709] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\IM3XyugL5J5C9MkQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\im3xyugl5j5c9mkq_encrypted_by.whiterose")) returned 1 [0091.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x51 [0091.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x51 [0091.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x51 [0091.816] SetErrorMode (uMode=0x1) returned 0x0 [0091.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.816] GetFileType (hFile=0x18c) returned 0x1 [0091.816] SetErrorMode (uMode=0x0) returned 0x1 [0091.816] GetFileType (hFile=0x18c) returned 0x1 [0091.817] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3c2 [0091.817] ReadFile (in: hFile=0x18c, lpBuffer=0x28a8530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a8530*, lpNumberOfBytesRead=0x27e6e8*=0x3c2, lpOverlapped=0x0) returned 1 [0091.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x51 [0091.818] SetErrorMode (uMode=0x1) returned 0x0 [0091.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1 [0091.819] SetErrorMode (uMode=0x0) returned 0x1 [0091.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x51 [0091.877] SetErrorMode (uMode=0x1) returned 0x0 [0091.877] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.878] GetFileType (hFile=0x18c) returned 0x1 [0091.878] SetErrorMode (uMode=0x0) returned 0x1 [0091.878] GetFileType (hFile=0x18c) returned 0x1 [0091.878] WriteFile (in: hFile=0x18c, lpBuffer=0x2905f80*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2905f80*, lpNumberOfBytesWritten=0x27e688*=0x4d0, lpOverlapped=0x0) returned 1 [0091.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x51 [0091.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\4XyrLWTydN38GJ2D_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\4XyrLWTydN38GJ2D_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0091.880] SetErrorMode (uMode=0x1) returned 0x0 [0091.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7732c90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0091.880] SetErrorMode (uMode=0x0) returned 0x1 [0091.880] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\4XyrLWTydN38GJ2D_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\4xyrlwtydn38gj2d_encrypted_by.whiterose")) returned 1 [0091.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0091.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0091.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0091.987] SetErrorMode (uMode=0x1) returned 0x0 [0091.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0091.988] GetFileType (hFile=0x18c) returned 0x1 [0091.988] SetErrorMode (uMode=0x0) returned 0x1 [0091.988] GetFileType (hFile=0x18c) returned 0x1 [0091.988] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x555 [0091.988] ReadFile (in: hFile=0x18c, lpBuffer=0x2908b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2908b10*, lpNumberOfBytesRead=0x27e6e8*=0x555, lpOverlapped=0x0) returned 1 [0091.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0091.989] SetErrorMode (uMode=0x1) returned 0x0 [0091.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x555)) returned 1 [0091.989] SetErrorMode (uMode=0x0) returned 0x1 [0092.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0092.050] SetErrorMode (uMode=0x1) returned 0x0 [0092.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.051] GetFileType (hFile=0x18c) returned 0x1 [0092.051] SetErrorMode (uMode=0x0) returned 0x1 [0092.051] GetFileType (hFile=0x18c) returned 0x1 [0092.051] WriteFile (in: hFile=0x18c, lpBuffer=0x27671c0*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x27671c0*, lpNumberOfBytesWritten=0x27e688*=0x660, lpOverlapped=0x0) returned 1 [0092.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0092.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\UqM*peXQvdLoVdp4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\UqM*peXQvdLoVdp4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0092.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x49 [0092.058] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif")) returned 1 [0092.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x3f [0092.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x3f [0092.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x3f [0092.061] SetErrorMode (uMode=0x1) returned 0x0 [0092.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.061] GetFileType (hFile=0x18c) returned 0x1 [0092.061] SetErrorMode (uMode=0x0) returned 0x1 [0092.061] GetFileType (hFile=0x18c) returned 0x1 [0092.061] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xde [0092.061] ReadFile (in: hFile=0x18c, lpBuffer=0x2769c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2769c60*, lpNumberOfBytesRead=0x27e6e8*=0xde, lpOverlapped=0x0) returned 1 [0092.062] CloseHandle (hObject=0x18c) returned 1 [0092.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x3f [0092.063] SetErrorMode (uMode=0x1) returned 0x0 [0092.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0092.063] SetErrorMode (uMode=0x0) returned 0x1 [0092.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x3f [0092.164] SetErrorMode (uMode=0x1) returned 0x0 [0092.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.165] GetFileType (hFile=0x18c) returned 0x1 [0092.165] SetErrorMode (uMode=0x0) returned 0x1 [0092.165] GetFileType (hFile=0x18c) returned 0x1 [0092.165] WriteFile (in: hFile=0x18c, lpBuffer=0x27c6100*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x27c6100*, lpNumberOfBytesWritten=0x27e688*=0x1e0, lpOverlapped=0x0) returned 1 [0092.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x3f [0092.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\iC8ooqJWa6qNxtOM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\iC8ooqJWa6qNxtOM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0092.167] SetErrorMode (uMode=0x1) returned 0x0 [0092.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x79e0550, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0092.167] SetErrorMode (uMode=0x0) returned 0x1 [0092.167] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\iC8ooqJWa6qNxtOM_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ic8ooqjwa6qnxtom_encrypted_by.whiterose")) returned 1 [0092.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x48 [0092.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x48 [0092.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x48 [0092.268] SetErrorMode (uMode=0x1) returned 0x0 [0092.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.268] GetFileType (hFile=0x18c) returned 0x1 [0092.269] SetErrorMode (uMode=0x0) returned 0x1 [0092.269] GetFileType (hFile=0x18c) returned 0x1 [0092.269] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x240 [0092.269] ReadFile (in: hFile=0x18c, lpBuffer=0x27c8928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c8928*, lpNumberOfBytesRead=0x27e6e8*=0x240, lpOverlapped=0x0) returned 1 [0092.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x48 [0092.270] SetErrorMode (uMode=0x1) returned 0x0 [0092.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0092.270] SetErrorMode (uMode=0x0) returned 0x1 [0092.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x48 [0092.333] SetErrorMode (uMode=0x1) returned 0x0 [0092.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.334] GetFileType (hFile=0x18c) returned 0x1 [0092.334] SetErrorMode (uMode=0x0) returned 0x1 [0092.334] GetFileType (hFile=0x18c) returned 0x1 [0092.334] WriteFile (in: hFile=0x18c, lpBuffer=0x2825d88*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2825d88*, lpNumberOfBytesWritten=0x27e688*=0x350, lpOverlapped=0x0) returned 1 [0092.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x48 [0092.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ISb0hOROgQMM7p8x_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ISb0hOROgQMM7p8x_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0092.335] SetErrorMode (uMode=0x1) returned 0x0 [0092.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7b83470, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0092.335] SetErrorMode (uMode=0x0) returned 0x1 [0092.335] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ISb0hOROgQMM7p8x_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\isb0horogqmm7p8x_encrypted_by.whiterose")) returned 1 [0092.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x45 [0092.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x45 [0092.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x45 [0092.440] SetErrorMode (uMode=0x1) returned 0x0 [0092.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.440] GetFileType (hFile=0x18c) returned 0x1 [0092.440] SetErrorMode (uMode=0x0) returned 0x1 [0092.440] GetFileType (hFile=0x18c) returned 0x1 [0092.440] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4e7 [0092.440] ReadFile (in: hFile=0x18c, lpBuffer=0x2828858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2828858*, lpNumberOfBytesRead=0x27e6e8*=0x4e7, lpOverlapped=0x0) returned 1 [0092.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x45 [0092.443] SetErrorMode (uMode=0x1) returned 0x0 [0092.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e7)) returned 1 [0092.443] SetErrorMode (uMode=0x0) returned 0x1 [0092.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x45 [0092.514] SetErrorMode (uMode=0x1) returned 0x0 [0092.514] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.515] GetFileType (hFile=0x18c) returned 0x1 [0092.515] SetErrorMode (uMode=0x0) returned 0x1 [0092.515] GetFileType (hFile=0x18c) returned 0x1 [0092.515] WriteFile (in: hFile=0x18c, lpBuffer=0x2886d00*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2886d00*, lpNumberOfBytesWritten=0x27e688*=0x5f0, lpOverlapped=0x0) returned 1 [0092.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x45 [0092.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\44IDtftBqTLhEnOk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\44IDtftBqTLhEnOk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0092.516] SetErrorMode (uMode=0x1) returned 0x0 [0092.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d26390, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0092.516] SetErrorMode (uMode=0x0) returned 0x1 [0092.517] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\44IDtftBqTLhEnOk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\44idtftbqtlhenok_encrypted_by.whiterose")) returned 1 [0092.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x45 [0092.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x45 [0092.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x45 [0092.627] SetErrorMode (uMode=0x1) returned 0x0 [0092.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.628] GetFileType (hFile=0x18c) returned 0x1 [0092.628] SetErrorMode (uMode=0x0) returned 0x1 [0092.628] GetFileType (hFile=0x18c) returned 0x1 [0092.628] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xe1 [0092.628] ReadFile (in: hFile=0x18c, lpBuffer=0x28893c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28893c0*, lpNumberOfBytesRead=0x27e6e8*=0xe1, lpOverlapped=0x0) returned 1 [0092.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x45 [0092.629] SetErrorMode (uMode=0x1) returned 0x0 [0092.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0092.630] SetErrorMode (uMode=0x0) returned 0x1 [0092.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x45 [0092.697] SetErrorMode (uMode=0x1) returned 0x0 [0092.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.698] GetFileType (hFile=0x18c) returned 0x1 [0092.698] SetErrorMode (uMode=0x0) returned 0x1 [0092.698] GetFileType (hFile=0x18c) returned 0x1 [0092.698] WriteFile (in: hFile=0x18c, lpBuffer=0x28e59f0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28e59f0*, lpNumberOfBytesWritten=0x27e688*=0x1f0, lpOverlapped=0x0) returned 1 [0092.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x45 [0092.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\JVqyUFgpyQwgcFH8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\JVqyUFgpyQwgcFH8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0092.700] SetErrorMode (uMode=0x1) returned 0x0 [0092.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7eef410, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0092.700] SetErrorMode (uMode=0x0) returned 0x1 [0092.700] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\JVqyUFgpyQwgcFH8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\jvqyufgpyqwgcfh8_encrypted_by.whiterose")) returned 1 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x50 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x50 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x50 [0092.800] SetErrorMode (uMode=0x1) returned 0x0 [0092.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.801] GetFileType (hFile=0x18c) returned 0x1 [0092.801] SetErrorMode (uMode=0x0) returned 0x1 [0092.801] GetFileType (hFile=0x18c) returned 0x1 [0092.801] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x393 [0092.801] ReadFile (in: hFile=0x18c, lpBuffer=0x28e83f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e83f0*, lpNumberOfBytesRead=0x27e6e8*=0x393, lpOverlapped=0x0) returned 1 [0092.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x50 [0092.803] SetErrorMode (uMode=0x1) returned 0x0 [0092.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x393)) returned 1 [0092.803] SetErrorMode (uMode=0x0) returned 0x1 [0092.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x50 [0092.866] SetErrorMode (uMode=0x1) returned 0x0 [0092.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.867] GetFileType (hFile=0x18c) returned 0x1 [0092.867] SetErrorMode (uMode=0x0) returned 0x1 [0092.867] GetFileType (hFile=0x18c) returned 0x1 [0092.867] WriteFile (in: hFile=0x18c, lpBuffer=0x2746170*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2746170*, lpNumberOfBytesWritten=0x27e688*=0x4a0, lpOverlapped=0x0) returned 1 [0092.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x50 [0092.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\AnEfzZkHQgeyr07x_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\AnEfzZkHQgeyr07x_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0092.868] SetErrorMode (uMode=0x1) returned 0x0 [0092.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8092330, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0092.869] SetErrorMode (uMode=0x0) returned 0x1 [0092.869] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\AnEfzZkHQgeyr07x_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\anefzzkhqgeyr07x_encrypted_by.whiterose")) returned 1 [0092.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x4e [0092.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x4e [0092.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x4e [0092.970] SetErrorMode (uMode=0x1) returned 0x0 [0092.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0092.971] GetFileType (hFile=0x18c) returned 0x1 [0092.971] SetErrorMode (uMode=0x0) returned 0x1 [0092.971] GetFileType (hFile=0x18c) returned 0x1 [0092.971] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x38a [0092.971] ReadFile (in: hFile=0x18c, lpBuffer=0x2748b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2748b68*, lpNumberOfBytesRead=0x27e6e8*=0x38a, lpOverlapped=0x0) returned 1 [0092.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x4e [0092.972] SetErrorMode (uMode=0x1) returned 0x0 [0092.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38a)) returned 1 [0092.973] SetErrorMode (uMode=0x0) returned 0x1 [0093.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x4e [0093.033] SetErrorMode (uMode=0x1) returned 0x0 [0093.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.034] GetFileType (hFile=0x18c) returned 0x1 [0093.034] SetErrorMode (uMode=0x0) returned 0x1 [0093.034] GetFileType (hFile=0x18c) returned 0x1 [0093.034] WriteFile (in: hFile=0x18c, lpBuffer=0x27a6590*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x27a6590*, lpNumberOfBytesWritten=0x27e688*=0x490, lpOverlapped=0x0) returned 1 [0093.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x4e [0093.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rRTYdho18HYQGDuX_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rRTYdho18HYQGDuX_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.035] SetErrorMode (uMode=0x1) returned 0x0 [0093.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8235250, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0093.035] SetErrorMode (uMode=0x0) returned 0x1 [0093.035] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rRTYdho18HYQGDuX_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rrtydho18hyqgdux_encrypted_by.whiterose")) returned 1 [0093.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x3e [0093.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x3e [0093.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x3e [0093.142] SetErrorMode (uMode=0x1) returned 0x0 [0093.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.143] GetFileType (hFile=0x18c) returned 0x1 [0093.143] SetErrorMode (uMode=0x0) returned 0x1 [0093.143] GetFileType (hFile=0x18c) returned 0x1 [0093.143] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x55 [0093.143] ReadFile (in: hFile=0x18c, lpBuffer=0x27a8b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a8b80*, lpNumberOfBytesRead=0x27e6e8*=0x55, lpOverlapped=0x0) returned 1 [0093.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x3e [0093.144] SetErrorMode (uMode=0x1) returned 0x0 [0093.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55)) returned 1 [0093.144] SetErrorMode (uMode=0x0) returned 0x1 [0093.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x3e [0093.203] SetErrorMode (uMode=0x1) returned 0x0 [0093.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.204] GetFileType (hFile=0x18c) returned 0x1 [0093.204] SetErrorMode (uMode=0x0) returned 0x1 [0093.204] GetFileType (hFile=0x18c) returned 0x1 [0093.204] WriteFile (in: hFile=0x18c, lpBuffer=0x2804e90*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2804e90*, lpNumberOfBytesWritten=0x27e688*=0x160, lpOverlapped=0x0) returned 1 [0093.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x3e [0093.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\M3ptqJ2MgLWleAbK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\M3ptqJ2MgLWleAbK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.206] SetErrorMode (uMode=0x1) returned 0x0 [0093.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83d8170, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0093.206] SetErrorMode (uMode=0x0) returned 0x1 [0093.206] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\M3ptqJ2MgLWleAbK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\m3ptqj2mglwleabk_encrypted_by.whiterose")) returned 1 [0093.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.313] SetErrorMode (uMode=0x1) returned 0x0 [0093.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.314] GetFileType (hFile=0x18c) returned 0x1 [0093.314] SetErrorMode (uMode=0x0) returned 0x1 [0093.314] GetFileType (hFile=0x18c) returned 0x1 [0093.314] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x55 [0093.314] ReadFile (in: hFile=0x18c, lpBuffer=0x2807440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2807440*, lpNumberOfBytesRead=0x27e6e8*=0x55, lpOverlapped=0x0) returned 1 [0093.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.315] SetErrorMode (uMode=0x1) returned 0x0 [0093.315] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55)) returned 1 [0093.315] SetErrorMode (uMode=0x0) returned 0x1 [0093.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.376] SetErrorMode (uMode=0x1) returned 0x0 [0093.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.377] GetFileType (hFile=0x18c) returned 0x1 [0093.377] SetErrorMode (uMode=0x0) returned 0x1 [0093.377] GetFileType (hFile=0x18c) returned 0x1 [0093.378] WriteFile (in: hFile=0x18c, lpBuffer=0x2863b00*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2863b00*, lpNumberOfBytesWritten=0x27e688*=0x160, lpOverlapped=0x0) returned 1 [0093.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\DuDb6366yaFCt6A*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\DuDb6366yaFCt6A*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x3e [0093.385] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif")) returned 1 [0093.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x41 [0093.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x41 [0093.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x41 [0093.388] SetErrorMode (uMode=0x1) returned 0x0 [0093.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.388] GetFileType (hFile=0x18c) returned 0x1 [0093.388] SetErrorMode (uMode=0x0) returned 0x1 [0093.388] GetFileType (hFile=0x18c) returned 0x1 [0093.388] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x489 [0093.388] ReadFile (in: hFile=0x18c, lpBuffer=0x2866938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2866938*, lpNumberOfBytesRead=0x27e6e8*=0x489, lpOverlapped=0x0) returned 1 [0093.390] CloseHandle (hObject=0x18c) returned 1 [0093.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x41 [0093.391] SetErrorMode (uMode=0x1) returned 0x0 [0093.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x489)) returned 1 [0093.391] SetErrorMode (uMode=0x0) returned 0x1 [0093.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x41 [0093.489] SetErrorMode (uMode=0x1) returned 0x0 [0093.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.490] GetFileType (hFile=0x18c) returned 0x1 [0093.491] SetErrorMode (uMode=0x0) returned 0x1 [0093.491] GetFileType (hFile=0x18c) returned 0x1 [0093.491] WriteFile (in: hFile=0x18c, lpBuffer=0x28c4d50*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28c4d50*, lpNumberOfBytesWritten=0x27e688*=0x590, lpOverlapped=0x0) returned 1 [0093.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x41 [0093.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\3GYp6dRad4k37kZT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\3GYp6dRad4k37kZT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.492] SetErrorMode (uMode=0x1) returned 0x0 [0093.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8685a30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0093.492] SetErrorMode (uMode=0x0) returned 0x1 [0093.492] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\3GYp6dRad4k37kZT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\3gyp6drad4k37kzt_encrypted_by.whiterose")) returned 1 [0093.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.594] SetErrorMode (uMode=0x1) returned 0x0 [0093.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.595] GetFileType (hFile=0x18c) returned 0x1 [0093.595] SetErrorMode (uMode=0x0) returned 0x1 [0093.595] GetFileType (hFile=0x18c) returned 0x1 [0093.595] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x338 [0093.595] ReadFile (in: hFile=0x18c, lpBuffer=0x28c7740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c7740*, lpNumberOfBytesRead=0x27e6e8*=0x338, lpOverlapped=0x0) returned 1 [0093.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.597] SetErrorMode (uMode=0x1) returned 0x0 [0093.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x338)) returned 1 [0093.597] SetErrorMode (uMode=0x0) returned 0x1 [0093.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.665] SetErrorMode (uMode=0x1) returned 0x0 [0093.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.667] GetFileType (hFile=0x18c) returned 0x1 [0093.667] SetErrorMode (uMode=0x0) returned 0x1 [0093.667] GetFileType (hFile=0x18c) returned 0x1 [0093.667] WriteFile (in: hFile=0x18c, lpBuffer=0x2924f18*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2924f18*, lpNumberOfBytesWritten=0x27e688*=0x440, lpOverlapped=0x0) returned 1 [0093.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rX4*XBZ4jNG1EggE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rX4*XBZ4jNG1EggE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x58 [0093.674] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif")) returned 1 [0093.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.676] SetErrorMode (uMode=0x1) returned 0x0 [0093.676] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.676] GetFileType (hFile=0x18c) returned 0x1 [0093.677] SetErrorMode (uMode=0x0) returned 0x1 [0093.677] GetFileType (hFile=0x18c) returned 0x1 [0093.677] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3e3 [0093.677] ReadFile (in: hFile=0x18c, lpBuffer=0x2927e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2927e40*, lpNumberOfBytesRead=0x27e6e8*=0x3e3, lpOverlapped=0x0) returned 1 [0093.678] CloseHandle (hObject=0x18c) returned 1 [0093.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.679] SetErrorMode (uMode=0x1) returned 0x0 [0093.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e3)) returned 1 [0093.679] SetErrorMode (uMode=0x0) returned 0x1 [0093.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.773] SetErrorMode (uMode=0x1) returned 0x0 [0093.773] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.774] GetFileType (hFile=0x18c) returned 0x1 [0093.774] SetErrorMode (uMode=0x0) returned 0x1 [0093.774] GetFileType (hFile=0x18c) returned 0x1 [0093.774] WriteFile (in: hFile=0x18c, lpBuffer=0x2785b90*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2785b90*, lpNumberOfBytesWritten=0x27e688*=0x4f0, lpOverlapped=0x0) returned 1 [0093.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bQzO*LWaYy0UgRSm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bQzO*LWaYy0UgRSm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x55 [0093.777] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif")) returned 1 [0093.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.780] SetErrorMode (uMode=0x1) returned 0x0 [0093.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.780] GetFileType (hFile=0x18c) returned 0x1 [0093.780] SetErrorMode (uMode=0x0) returned 0x1 [0093.780] GetFileType (hFile=0x18c) returned 0x1 [0093.780] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x33f [0093.780] ReadFile (in: hFile=0x18c, lpBuffer=0x27889f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27889f8*, lpNumberOfBytesRead=0x27e6e8*=0x33f, lpOverlapped=0x0) returned 1 [0093.783] CloseHandle (hObject=0x18c) returned 1 [0093.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.784] SetErrorMode (uMode=0x1) returned 0x0 [0093.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33f)) returned 1 [0093.784] SetErrorMode (uMode=0x0) returned 0x1 [0093.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.881] SetErrorMode (uMode=0x1) returned 0x0 [0093.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.882] GetFileType (hFile=0x18c) returned 0x1 [0093.882] SetErrorMode (uMode=0x0) returned 0x1 [0093.882] GetFileType (hFile=0x18c) returned 0x1 [0093.882] WriteFile (in: hFile=0x18c, lpBuffer=0x27e61f0*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x27e61f0*, lpNumberOfBytesWritten=0x27e688*=0x440, lpOverlapped=0x0) returned 1 [0093.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\M9zF*3BPtRFvceYr_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\M9zF*3BPtRFvceYr_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x57 [0093.886] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif")) returned 1 [0093.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x54 [0093.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x54 [0093.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x54 [0093.888] SetErrorMode (uMode=0x1) returned 0x0 [0093.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.888] GetFileType (hFile=0x18c) returned 0x1 [0093.888] SetErrorMode (uMode=0x0) returned 0x1 [0093.888] GetFileType (hFile=0x18c) returned 0x1 [0093.888] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3ea [0093.888] ReadFile (in: hFile=0x18c, lpBuffer=0x27e9108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e9108*, lpNumberOfBytesRead=0x27e6e8*=0x3ea, lpOverlapped=0x0) returned 1 [0093.890] CloseHandle (hObject=0x18c) returned 1 [0093.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x54 [0093.891] SetErrorMode (uMode=0x1) returned 0x0 [0093.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ea)) returned 1 [0093.891] SetErrorMode (uMode=0x0) returned 0x1 [0093.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x54 [0093.987] SetErrorMode (uMode=0x1) returned 0x0 [0093.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0093.988] GetFileType (hFile=0x18c) returned 0x1 [0093.988] SetErrorMode (uMode=0x0) returned 0x1 [0093.988] GetFileType (hFile=0x18c) returned 0x1 [0093.988] WriteFile (in: hFile=0x18c, lpBuffer=0x2846ea0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x2846ea0*, lpNumberOfBytesWritten=0x27e688*=0x4f0, lpOverlapped=0x0) returned 1 [0093.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x54 [0093.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\J8LVmhrwX4YB0Wgw_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\J8LVmhrwX4YB0Wgw_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0093.989] SetErrorMode (uMode=0x1) returned 0x0 [0093.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8b48630, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0093.989] SetErrorMode (uMode=0x0) returned 0x1 [0093.989] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\J8LVmhrwX4YB0Wgw_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\j8lvmhrwx4yb0wgw_encrypted_by.whiterose")) returned 1 [0094.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x43 [0094.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x43 [0094.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x43 [0094.094] SetErrorMode (uMode=0x1) returned 0x0 [0094.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0094.094] GetFileType (hFile=0x18c) returned 0x1 [0094.095] SetErrorMode (uMode=0x0) returned 0x1 [0094.095] GetFileType (hFile=0x18c) returned 0x1 [0094.095] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x171 [0094.095] ReadFile (in: hFile=0x18c, lpBuffer=0x2849600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2849600*, lpNumberOfBytesRead=0x27e6e8*=0x171, lpOverlapped=0x0) returned 1 [0094.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x43 [0094.096] SetErrorMode (uMode=0x1) returned 0x0 [0094.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171)) returned 1 [0094.096] SetErrorMode (uMode=0x0) returned 0x1 [0094.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x43 [0094.168] SetErrorMode (uMode=0x1) returned 0x0 [0094.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0094.169] GetFileType (hFile=0x18c) returned 0x1 [0094.169] SetErrorMode (uMode=0x0) returned 0x1 [0094.169] GetFileType (hFile=0x18c) returned 0x1 [0094.169] WriteFile (in: hFile=0x18c, lpBuffer=0x28a6060*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28a6060*, lpNumberOfBytesWritten=0x27e688*=0x280, lpOverlapped=0x0) returned 1 [0094.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x43 [0094.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\9mQFeGyn4OjAHSyh_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\9mQFeGyn4OjAHSyh_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5f [0094.170] SetErrorMode (uMode=0x1) returned 0x0 [0094.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8ceb550, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0094.170] SetErrorMode (uMode=0x0) returned 0x1 [0094.170] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\9mQFeGyn4OjAHSyh_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\9mqfegyn4ojahsyh_encrypted_by.whiterose")) returned 1 [0094.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0094.280] SetErrorMode (uMode=0x1) returned 0x0 [0094.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0094.281] GetFileType (hFile=0x18c) returned 0x1 [0094.281] SetErrorMode (uMode=0x0) returned 0x1 [0094.281] GetFileType (hFile=0x18c) returned 0x1 [0094.283] WriteFile (in: hFile=0x18c, lpBuffer=0x28b9440*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28b9440*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0094.284] WriteFile (in: hFile=0x18c, lpBuffer=0x28b9440*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x28b9440*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0094.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0094.284] SetErrorMode (uMode=0x1) returned 0x0 [0094.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0094.285] GetFileType (hFile=0x18c) returned 0x1 [0094.285] SetErrorMode (uMode=0x0) returned 0x1 [0094.285] GetFileType (hFile=0x18c) returned 0x1 [0094.287] WriteFile (in: hFile=0x18c, lpBuffer=0x28cf520*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x28cf520*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0094.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", lpFilePart=0x0) returned 0x31 [0094.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", lpFilePart=0x0) returned 0x31 [0094.289] SetErrorMode (uMode=0x1) returned 0x0 [0094.289] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0094.291] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.291] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0094.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0094.292] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0094.293] SetErrorMode (uMode=0x0) returned 0x1 [0094.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", lpFilePart=0x0) returned 0x31 [0094.293] SetErrorMode (uMode=0x1) returned 0x0 [0094.293] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0094.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0094.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0094.295] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0094.295] SetErrorMode (uMode=0x0) returned 0x1 [0094.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0094.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0094.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0094.296] SetErrorMode (uMode=0x1) returned 0x0 [0094.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0094.297] GetFileType (hFile=0x18c) returned 0x1 [0094.297] SetErrorMode (uMode=0x0) returned 0x1 [0094.298] GetFileType (hFile=0x18c) returned 0x1 [0094.298] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1d9e [0094.298] ReadFile (in: hFile=0x18c, lpBuffer=0x28d79d8, nNumberOfBytesToRead=0x1d9e, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28d79d8*, lpNumberOfBytesRead=0x27e788*=0x1d9e, lpOverlapped=0x0) returned 1 [0095.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0095.006] SetErrorMode (uMode=0x1) returned 0x0 [0095.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e)) returned 1 [0095.006] SetErrorMode (uMode=0x0) returned 0x1 [0095.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0095.083] SetErrorMode (uMode=0x1) returned 0x0 [0095.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.085] GetFileType (hFile=0x18c) returned 0x1 [0095.085] SetErrorMode (uMode=0x0) returned 0x1 [0095.085] GetFileType (hFile=0x18c) returned 0x1 [0095.085] WriteFile (in: hFile=0x18c, lpBuffer=0x273e038*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x27e808, lpOverlapped=0x0 | out: lpBuffer=0x273e038*, lpNumberOfBytesWritten=0x27e808*=0x1ea0, lpOverlapped=0x0) returned 1 [0095.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0095.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\PeyAF7lcbL6ze*s6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\PeyAF7lcbL6ze*s6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x59 [0095.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x27bff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0095.096] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 1 [0095.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", lpFilePart=0x0) returned 0x39 [0095.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", lpFilePart=0x0) returned 0x39 [0095.098] SetErrorMode (uMode=0x1) returned 0x0 [0095.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1 [0095.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="ADOBEG~1.OTF")) returned 1 [0095.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fd132c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0095.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8013d940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="ADOBEM~2.OTF")) returned 1 [0095.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb4a240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="ADOBEM~1.OTF")) returned 1 [0095.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="ADOBES~1.OTF")) returned 1 [0095.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f9a7320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="KOZGOP~1.OTF")) returned 1 [0095.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 1 [0095.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 0 [0095.102] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.103] SetErrorMode (uMode=0x0) returned 0x1 [0095.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", lpFilePart=0x0) returned 0x39 [0095.103] SetErrorMode (uMode=0x1) returned 0x0 [0095.103] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1 [0095.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="ADOBEG~1.OTF")) returned 1 [0095.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fd132c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0095.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8013d940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="ADOBEM~2.OTF")) returned 1 [0095.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb4a240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="ADOBEM~1.OTF")) returned 1 [0095.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="ADOBES~1.OTF")) returned 1 [0095.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f9a7320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="KOZGOP~1.OTF")) returned 1 [0095.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 1 [0095.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 0 [0095.105] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.106] SetErrorMode (uMode=0x0) returned 0x1 [0095.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", lpFilePart=0x0) returned 0x53 [0095.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", lpFilePart=0x0) returned 0x53 [0095.106] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.106] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.106] CoTaskMemFree (pv=0xffa70) [0095.106] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", lpFilePart=0x0) returned 0x51 [0095.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", lpFilePart=0x0) returned 0x51 [0095.107] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.107] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.107] CoTaskMemFree (pv=0xffa70) [0095.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", lpFilePart=0x0) returned 0x53 [0095.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", lpFilePart=0x0) returned 0x53 [0095.107] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.107] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.107] CoTaskMemFree (pv=0xffa70) [0095.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", lpFilePart=0x0) returned 0x50 [0095.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", lpFilePart=0x0) returned 0x50 [0095.108] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.108] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.108] CoTaskMemFree (pv=0xffa70) [0095.108] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", lpFilePart=0x0) returned 0x54 [0095.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", lpFilePart=0x0) returned 0x54 [0095.108] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.108] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.108] CoTaskMemFree (pv=0xffa70) [0095.108] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", lpFilePart=0x0) returned 0x50 [0095.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", lpFilePart=0x0) returned 0x50 [0095.109] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.109] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.109] CoTaskMemFree (pv=0xffa70) [0095.109] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", lpFilePart=0x0) returned 0x4e [0095.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", lpFilePart=0x0) returned 0x4e [0095.109] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.109] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.109] CoTaskMemFree (pv=0xffa70) [0095.109] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", lpFilePart=0x0) returned 0x50 [0095.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", lpFilePart=0x0) returned 0x50 [0095.110] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.110] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.110] CoTaskMemFree (pv=0xffa70) [0095.110] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0095.110] SetErrorMode (uMode=0x1) returned 0x0 [0095.110] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0095.111] GetFileType (hFile=0x18c) returned 0x1 [0095.111] SetErrorMode (uMode=0x0) returned 0x1 [0095.111] GetFileType (hFile=0x18c) returned 0x1 [0095.113] WriteFile (in: hFile=0x18c, lpBuffer=0x275b858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x275b858*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0095.114] WriteFile (in: hFile=0x18c, lpBuffer=0x275b858*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x275b858*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0095.114] CloseHandle (hObject=0x18c) returned 1 [0095.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", lpFilePart=0x0) returned 0x36 [0095.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", lpFilePart=0x0) returned 0x36 [0095.115] SetErrorMode (uMode=0x1) returned 0x0 [0095.115] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1 [0095.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="90MS-R~1")) returned 1 [0095.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="90MS-R~2")) returned 1 [0095.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="90MS-R~3")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="90MSP-~1")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="90MSP-~2")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="90PV-R~1")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="90PV-R~2")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="90PV-R~3")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="ADD-RK~1")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="ADD-RK~2")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="ADFD7E~1")) returned 1 [0095.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="AD1410~1")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="ADC905~1")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="AD7FF9~1")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="ADEA01~1")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="AD351C~1")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="ADOBE-~1")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="ADOBE-~2")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="ADOBE-~3")) returned 1 [0095.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="ADOBE-~4")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="AD9A15~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="ADD444~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="ADD8F8~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="AD9B16~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="AD411B~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="ADF600~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="AD1D91~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="ADC296~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="ADFBCB~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="AD2E3A~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="AD43DF~1")) returned 1 [0095.123] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="AD3180~1")) returned 1 [0095.124] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="ADAB0B~1")) returned 1 [0095.124] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="AD0115~1")) returned 1 [0095.124] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="AD276E~1")) returned 1 [0095.124] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="AD4DFF~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="ADF2F4~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="ADA8E9~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="ADCE7B~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="AD7470~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="AD2A65~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="AD02A2~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="ADE5F6~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="AD8921~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="ADD587~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="ADF41D~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="AD1CC0~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="AD0C77~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="ADE5E5~1")) returned 1 [0095.125] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="AD30F0~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="AD15A3~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="ADCDCC~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="ADF8FD~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="ADF15E~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="AD662F~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="AD8F7C~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="B5PC-U~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="B5PC-U~2")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="CNS-EU~1")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="CNS-EU~2")) returned 1 [0095.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="ETEN-B~1")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="ETEN-B~2")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="ETEN-B~3")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="ETENMS~1")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="ETENMS~2")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="ETHK-B~1")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="ETHK-B~2")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="EXT-RK~1")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="EXT-RK~2")) returned 1 [0095.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="GBK-EU~1")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="GBK-EU~2")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="GBK-EU~3")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="GBKP-E~1")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="GBKP-E~2")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x125b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-H", cAlternateFileName="GBPC-E~1")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2", cAlternateFileName="GBPC-E~2")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24296, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2C", cAlternateFileName="GBPC-E~3")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-V", cAlternateFileName="GBPC-E~4")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc07a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-H", cAlternateFileName="GBT-EU~1")) returned 1 [0095.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-V", cAlternateFileName="GBT-EU~2")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="H", cAlternateFileName="")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-H", cAlternateFileName="HKDLA-~1")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-V", cAlternateFileName="HKDLA-~2")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-H", cAlternateFileName="HKDLB-~1")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-V", cAlternateFileName="HKDLB-~2")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x386a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-H", cAlternateFileName="HKGCCS~1")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-V", cAlternateFileName="HKGCCS~2")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-H", cAlternateFileName="HKM314~1")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-V", cAlternateFileName="HKM314~2")) returned 1 [0095.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-H", cAlternateFileName="HKM471~1")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-V", cAlternateFileName="HKM471~2")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x604d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-H", cAlternateFileName="HKSCS-~1")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-V", cAlternateFileName="HKSCS-~2")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3047, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-H", cAlternateFileName="KSC-EU~1")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-V", cAlternateFileName="KSC-EU~2")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4191, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-H", cAlternateFileName="KSCMS-~1")) returned 1 [0095.132] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-H", cAlternateFileName="KSCMS-~2")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-V", cAlternateFileName="KSCMS-~3")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e597, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-UCS2", cAlternateFileName="KSCMS-~4")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-V", cAlternateFileName="KS3FF3~1")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-H", cAlternateFileName="KSCPC-~1")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2", cAlternateFileName="KSCPC-~2")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26499, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2C", cAlternateFileName="KSCPC-~3")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90ms-RKSJ", cAlternateFileName="UCS2-9~1")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24373, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90pv-RKSJ", cAlternateFileName="UCS2-9~2")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45903, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-B5pc", cAlternateFileName="UCS2-B~1")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49113, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-ETen-B5", cAlternateFileName="UCS2-E~1")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3b87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBK-EUC", cAlternateFileName="UCS2-G~1")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3022b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBpc-EUC", cAlternateFileName="UCS2-G~2")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ff61, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCms-UHC", cAlternateFileName="UCS2-K~2")) returned 1 [0095.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25737, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCpc-EUC", cAlternateFileName="UCS2-K~1")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-H", cAlternateFileName="UNICNS~2")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-V", cAlternateFileName="UNICNS~1")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x425e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-H", cAlternateFileName="UNICNS~4")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc33, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-V", cAlternateFileName="UNICNS~3")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x46805, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-H", cAlternateFileName="UNIGB-~2")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-V", cAlternateFileName="UNIGB-~1")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-H", cAlternateFileName="UNIGB-~4")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-V", cAlternateFileName="UNIGB-~3")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-H", cAlternateFileName="UNIJIS~1")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-H", cAlternateFileName="UNIJIS~2")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-V", cAlternateFileName="UNIJIS~3")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-V", cAlternateFileName="UNIJIS~4")) returned 1 [0095.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x315bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-H", cAlternateFileName="UN87E6~1")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-V", cAlternateFileName="UN275C~1")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31610, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-H", cAlternateFileName="UN288D~1")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-V", cAlternateFileName="UNC565~1")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-H", cAlternateFileName="UNIKS-~4")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-V", cAlternateFileName="UNIKS-~3")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-H", cAlternateFileName="UNIKS-~2")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-V", cAlternateFileName="UNIKS-~1")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 1 [0095.135] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 0 [0095.135] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.136] SetErrorMode (uMode=0x0) returned 0x1 [0095.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", lpFilePart=0x0) returned 0x36 [0095.136] SetErrorMode (uMode=0x1) returned 0x0 [0095.136] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="90MS-R~1")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="90MS-R~2")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="90MS-R~3")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="90MSP-~1")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="90MSP-~2")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="90PV-R~1")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="90PV-R~2")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="90PV-R~3")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="ADD-RK~1")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="ADD-RK~2")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="ADFD7E~1")) returned 1 [0095.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="AD1410~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="ADC905~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="AD7FF9~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="ADEA01~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="AD351C~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="ADOBE-~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="ADOBE-~2")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="ADOBE-~3")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="ADOBE-~4")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="AD9A15~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="ADD444~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="ADD8F8~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="AD9B16~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="AD411B~1")) returned 1 [0095.139] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="ADF600~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="AD1D91~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="ADC296~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="ADFBCB~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="AD2E3A~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="AD43DF~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="AD3180~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="ADAB0B~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="AD0115~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="AD276E~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="AD4DFF~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="ADF2F4~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="ADA8E9~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="ADCE7B~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="AD7470~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="AD2A65~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="AD02A2~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="ADE5F6~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="AD8921~1")) returned 1 [0095.140] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="ADD587~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="ADF41D~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="AD1CC0~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="AD0C77~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="ADE5E5~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="AD30F0~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="AD15A3~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="ADCDCC~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="ADF8FD~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="ADF15E~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="AD662F~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="AD8F7C~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="B5PC-U~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="B5PC-U~2")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="CNS-EU~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="CNS-EU~2")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="ETEN-B~1")) returned 1 [0095.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="ETEN-B~2")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="ETEN-B~3")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="ETENMS~1")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="ETENMS~2")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="ETHK-B~1")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="ETHK-B~2")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="EXT-RK~1")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="EXT-RK~2")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="GBK-EU~1")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="GBK-EU~2")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="GBK-EU~3")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="GBKP-E~1")) returned 1 [0095.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="GBKP-E~2")) returned 1 [0095.143] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.144] SetErrorMode (uMode=0x0) returned 0x1 [0095.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", lpFilePart=0x0) returned 0x42 [0095.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", lpFilePart=0x0) returned 0x42 [0095.144] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.144] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.144] CoTaskMemFree (pv=0xffa70) [0095.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", lpFilePart=0x0) returned 0x42 [0095.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", lpFilePart=0x0) returned 0x42 [0095.144] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.144] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.144] CoTaskMemFree (pv=0xffa70) [0095.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", lpFilePart=0x0) returned 0x45 [0095.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", lpFilePart=0x0) returned 0x45 [0095.144] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.144] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.145] CoTaskMemFree (pv=0xffa70) [0095.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", lpFilePart=0x0) returned 0x42 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", lpFilePart=0x0) returned 0x42 [0095.145] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.145] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.145] CoTaskMemFree (pv=0xffa70) [0095.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", lpFilePart=0x0) returned 0x43 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", lpFilePart=0x0) returned 0x43 [0095.145] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.145] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.145] CoTaskMemFree (pv=0xffa70) [0095.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", lpFilePart=0x0) returned 0x43 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", lpFilePart=0x0) returned 0x43 [0095.145] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.145] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.145] CoTaskMemFree (pv=0xffa70) [0095.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", lpFilePart=0x0) returned 0x42 [0095.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", lpFilePart=0x0) returned 0x42 [0095.145] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.145] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.145] CoTaskMemFree (pv=0xffa70) [0095.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", lpFilePart=0x0) returned 0x45 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", lpFilePart=0x0) returned 0x45 [0095.146] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.146] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.146] CoTaskMemFree (pv=0xffa70) [0095.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", lpFilePart=0x0) returned 0x46 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", lpFilePart=0x0) returned 0x46 [0095.146] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.146] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.146] CoTaskMemFree (pv=0xffa70) [0095.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", lpFilePart=0x0) returned 0x41 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", lpFilePart=0x0) returned 0x41 [0095.146] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.146] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.146] CoTaskMemFree (pv=0xffa70) [0095.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", lpFilePart=0x0) returned 0x41 [0095.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", lpFilePart=0x0) returned 0x41 [0095.146] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.146] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.146] CoTaskMemFree (pv=0xffa70) [0095.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", lpFilePart=0x0) returned 0x43 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", lpFilePart=0x0) returned 0x43 [0095.147] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.147] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.147] CoTaskMemFree (pv=0xffa70) [0095.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", lpFilePart=0x0) returned 0x43 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", lpFilePart=0x0) returned 0x43 [0095.147] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.147] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.147] CoTaskMemFree (pv=0xffa70) [0095.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", lpFilePart=0x0) returned 0x43 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", lpFilePart=0x0) returned 0x43 [0095.147] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.147] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.147] CoTaskMemFree (pv=0xffa70) [0095.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", lpFilePart=0x0) returned 0x43 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", lpFilePart=0x0) returned 0x43 [0095.147] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.147] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.147] CoTaskMemFree (pv=0xffa70) [0095.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", lpFilePart=0x0) returned 0x43 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", lpFilePart=0x0) returned 0x43 [0095.148] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.148] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.148] CoTaskMemFree (pv=0xffa70) [0095.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", lpFilePart=0x0) returned 0x43 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", lpFilePart=0x0) returned 0x43 [0095.148] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.148] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.148] CoTaskMemFree (pv=0xffa70) [0095.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", lpFilePart=0x0) returned 0x46 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", lpFilePart=0x0) returned 0x46 [0095.148] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.148] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.148] CoTaskMemFree (pv=0xffa70) [0095.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", lpFilePart=0x0) returned 0x49 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", lpFilePart=0x0) returned 0x49 [0095.148] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.148] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.148] CoTaskMemFree (pv=0xffa70) [0095.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", lpFilePart=0x0) returned 0x47 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", lpFilePart=0x0) returned 0x47 [0095.149] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.149] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.149] CoTaskMemFree (pv=0xffa70) [0095.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", lpFilePart=0x0) returned 0x48 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", lpFilePart=0x0) returned 0x48 [0095.149] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.149] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.149] CoTaskMemFree (pv=0xffa70) [0095.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", lpFilePart=0x0) returned 0x47 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", lpFilePart=0x0) returned 0x47 [0095.149] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.149] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.149] CoTaskMemFree (pv=0xffa70) [0095.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", lpFilePart=0x0) returned 0x46 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", lpFilePart=0x0) returned 0x46 [0095.149] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.149] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.149] CoTaskMemFree (pv=0xffa70) [0095.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", lpFilePart=0x0) returned 0x42 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", lpFilePart=0x0) returned 0x42 [0095.149] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.150] CoTaskMemFree (pv=0xffa70) [0095.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", lpFilePart=0x0) returned 0x42 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", lpFilePart=0x0) returned 0x42 [0095.150] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.150] CoTaskMemFree (pv=0xffa70) [0095.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", lpFilePart=0x0) returned 0x42 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", lpFilePart=0x0) returned 0x42 [0095.150] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.150] CoTaskMemFree (pv=0xffa70) [0095.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", lpFilePart=0x0) returned 0x42 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", lpFilePart=0x0) returned 0x42 [0095.150] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.150] CoTaskMemFree (pv=0xffa70) [0095.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", lpFilePart=0x0) returned 0x42 [0095.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", lpFilePart=0x0) returned 0x42 [0095.150] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.151] CoTaskMemFree (pv=0xffa70) [0095.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", lpFilePart=0x0) returned 0x42 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", lpFilePart=0x0) returned 0x42 [0095.151] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.151] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.151] CoTaskMemFree (pv=0xffa70) [0095.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", lpFilePart=0x0) returned 0x48 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", lpFilePart=0x0) returned 0x48 [0095.151] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.151] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.151] CoTaskMemFree (pv=0xffa70) [0095.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", lpFilePart=0x0) returned 0x49 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", lpFilePart=0x0) returned 0x49 [0095.151] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.151] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.151] CoTaskMemFree (pv=0xffa70) [0095.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", lpFilePart=0x0) returned 0x46 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", lpFilePart=0x0) returned 0x46 [0095.151] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.151] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.151] CoTaskMemFree (pv=0xffa70) [0095.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", lpFilePart=0x0) returned 0x47 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", lpFilePart=0x0) returned 0x47 [0095.152] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.152] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.152] CoTaskMemFree (pv=0xffa70) [0095.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", lpFilePart=0x0) returned 0x46 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", lpFilePart=0x0) returned 0x46 [0095.152] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.152] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.152] CoTaskMemFree (pv=0xffa70) [0095.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", lpFilePart=0x0) returned 0x45 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", lpFilePart=0x0) returned 0x45 [0095.152] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.152] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.152] CoTaskMemFree (pv=0xffa70) [0095.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", lpFilePart=0x0) returned 0x45 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", lpFilePart=0x0) returned 0x45 [0095.152] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.152] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.152] CoTaskMemFree (pv=0xffa70) [0095.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", lpFilePart=0x0) returned 0x45 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", lpFilePart=0x0) returned 0x45 [0095.153] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.153] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.153] CoTaskMemFree (pv=0xffa70) [0095.153] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", lpFilePart=0x0) returned 0x45 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", lpFilePart=0x0) returned 0x45 [0095.153] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.153] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.153] CoTaskMemFree (pv=0xffa70) [0095.153] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", lpFilePart=0x0) returned 0x45 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", lpFilePart=0x0) returned 0x45 [0095.153] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.153] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.153] CoTaskMemFree (pv=0xffa70) [0095.153] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", lpFilePart=0x0) returned 0x45 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", lpFilePart=0x0) returned 0x45 [0095.153] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.154] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.154] CoTaskMemFree (pv=0xffa70) [0095.154] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", lpFilePart=0x0) returned 0x45 [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", lpFilePart=0x0) returned 0x45 [0095.154] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.154] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.154] CoTaskMemFree (pv=0xffa70) [0095.154] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", lpFilePart=0x0) returned 0x45 [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", lpFilePart=0x0) returned 0x45 [0095.154] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.154] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.154] CoTaskMemFree (pv=0xffa70) [0095.154] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", lpFilePart=0x0) returned 0x4d [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", lpFilePart=0x0) returned 0x4d [0095.154] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.154] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.154] CoTaskMemFree (pv=0xffa70) [0095.154] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", lpFilePart=0x0) returned 0x4d [0095.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", lpFilePart=0x0) returned 0x4d [0095.154] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.154] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.155] CoTaskMemFree (pv=0xffa70) [0095.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", lpFilePart=0x0) returned 0x49 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", lpFilePart=0x0) returned 0x49 [0095.155] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.155] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.155] CoTaskMemFree (pv=0xffa70) [0095.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", lpFilePart=0x0) returned 0x4a [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", lpFilePart=0x0) returned 0x4a [0095.155] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.155] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.155] CoTaskMemFree (pv=0xffa70) [0095.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", lpFilePart=0x0) returned 0x49 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", lpFilePart=0x0) returned 0x49 [0095.155] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.155] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.155] CoTaskMemFree (pv=0xffa70) [0095.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", lpFilePart=0x0) returned 0x48 [0095.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", lpFilePart=0x0) returned 0x48 [0095.155] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.155] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.155] CoTaskMemFree (pv=0xffa70) [0095.156] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", lpFilePart=0x0) returned 0x45 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", lpFilePart=0x0) returned 0x45 [0095.156] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.156] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.156] CoTaskMemFree (pv=0xffa70) [0095.156] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", lpFilePart=0x0) returned 0x45 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", lpFilePart=0x0) returned 0x45 [0095.156] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.156] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.156] CoTaskMemFree (pv=0xffa70) [0095.156] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", lpFilePart=0x0) returned 0x45 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", lpFilePart=0x0) returned 0x45 [0095.156] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.156] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.156] CoTaskMemFree (pv=0xffa70) [0095.156] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", lpFilePart=0x0) returned 0x49 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", lpFilePart=0x0) returned 0x49 [0095.156] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.156] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.156] CoTaskMemFree (pv=0xffa70) [0095.156] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", lpFilePart=0x0) returned 0x4a [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", lpFilePart=0x0) returned 0x4a [0095.157] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.157] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.157] CoTaskMemFree (pv=0xffa70) [0095.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", lpFilePart=0x0) returned 0x49 [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", lpFilePart=0x0) returned 0x49 [0095.157] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.157] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.157] CoTaskMemFree (pv=0xffa70) [0095.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", lpFilePart=0x0) returned 0x4d [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", lpFilePart=0x0) returned 0x4d [0095.157] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.157] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.157] CoTaskMemFree (pv=0xffa70) [0095.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", lpFilePart=0x0) returned 0x4d [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", lpFilePart=0x0) returned 0x4d [0095.157] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.157] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.157] CoTaskMemFree (pv=0xffa70) [0095.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", lpFilePart=0x0) returned 0x48 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", lpFilePart=0x0) returned 0x48 [0095.158] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.158] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.158] CoTaskMemFree (pv=0xffa70) [0095.158] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", lpFilePart=0x0) returned 0x3d [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", lpFilePart=0x0) returned 0x3d [0095.158] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.158] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.158] CoTaskMemFree (pv=0xffa70) [0095.158] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", lpFilePart=0x0) returned 0x40 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", lpFilePart=0x0) returned 0x40 [0095.158] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.158] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.158] CoTaskMemFree (pv=0xffa70) [0095.158] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", lpFilePart=0x0) returned 0x41 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", lpFilePart=0x0) returned 0x41 [0095.158] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.158] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.158] CoTaskMemFree (pv=0xffa70) [0095.158] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", lpFilePart=0x0) returned 0x3d [0095.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", lpFilePart=0x0) returned 0x3d [0095.159] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.159] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.159] CoTaskMemFree (pv=0xffa70) [0095.159] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", lpFilePart=0x0) returned 0x40 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", lpFilePart=0x0) returned 0x40 [0095.159] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.159] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.159] CoTaskMemFree (pv=0xffa70) [0095.159] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", lpFilePart=0x0) returned 0x40 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", lpFilePart=0x0) returned 0x40 [0095.159] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.159] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.159] CoTaskMemFree (pv=0xffa70) [0095.159] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", lpFilePart=0x0) returned 0x40 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", lpFilePart=0x0) returned 0x40 [0095.159] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.159] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.159] CoTaskMemFree (pv=0xffa70) [0095.159] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", lpFilePart=0x0) returned 0x43 [0095.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", lpFilePart=0x0) returned 0x43 [0095.160] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.160] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.160] CoTaskMemFree (pv=0xffa70) [0095.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", lpFilePart=0x0) returned 0x40 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", lpFilePart=0x0) returned 0x40 [0095.160] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.160] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.160] CoTaskMemFree (pv=0xffa70) [0095.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", lpFilePart=0x0) returned 0x42 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", lpFilePart=0x0) returned 0x42 [0095.160] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.160] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.160] CoTaskMemFree (pv=0xffa70) [0095.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", lpFilePart=0x0) returned 0x42 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", lpFilePart=0x0) returned 0x42 [0095.160] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.160] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.160] CoTaskMemFree (pv=0xffa70) [0095.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", lpFilePart=0x0) returned 0x40 [0095.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", lpFilePart=0x0) returned 0x40 [0095.160] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.160] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.161] CoTaskMemFree (pv=0xffa70) [0095.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", lpFilePart=0x0) returned 0x40 [0095.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", lpFilePart=0x0) returned 0x40 [0095.161] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.161] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.161] CoTaskMemFree (pv=0xffa70) [0095.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", lpFilePart=0x0) returned 0x3c [0095.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", lpFilePart=0x0) returned 0x3c [0095.161] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.161] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.161] CoTaskMemFree (pv=0xffa70) [0095.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0095.161] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.161] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.161] CoTaskMemFree (pv=0xffa70) [0095.161] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.161] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.161] CoTaskMemFree (pv=0xffa70) [0095.161] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.161] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.161] CoTaskMemFree (pv=0xffa70) [0095.161] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.161] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.162] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.162] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.162] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.163] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.163] CoTaskMemFree (pv=0xffa70) [0095.163] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.164] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.164] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.164] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.165] CoTaskMemFree (pv=0xffa70) [0095.165] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.165] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.166] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.166] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.166] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.167] CoTaskMemFree (pv=0xffa70) [0095.167] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.167] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.168] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.168] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.168] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.169] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.169] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.169] CoTaskMemFree (pv=0xffa70) [0095.170] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.170] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.170] CoTaskMemFree (pv=0xffa70) [0095.170] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.170] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.170] CoTaskMemFree (pv=0xffa70) [0095.170] SetErrorMode (uMode=0x1) returned 0x0 [0095.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.176] SetErrorMode (uMode=0x0) returned 0x1 [0095.178] SetErrorMode (uMode=0x1) returned 0x0 [0095.178] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.181] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.182] SetErrorMode (uMode=0x0) returned 0x1 [0095.182] SetErrorMode (uMode=0x1) returned 0x0 [0095.182] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.183] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.184] SetErrorMode (uMode=0x0) returned 0x1 [0095.184] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.184] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.184] CoTaskMemFree (pv=0xffa70) [0095.184] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.184] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.184] CoTaskMemFree (pv=0xffa70) [0095.184] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.184] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.184] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.185] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.185] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.185] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.186] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.186] CoTaskMemFree (pv=0xffa70) [0095.186] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.187] CoTaskMemFree (pv=0xffa70) [0095.187] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.187] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.188] CoTaskMemFree (pv=0xffa70) [0095.188] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.188] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.188] CoTaskMemFree (pv=0xffa70) [0095.188] SetErrorMode (uMode=0x1) returned 0x0 [0095.188] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.189] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.189] SetErrorMode (uMode=0x0) returned 0x1 [0095.189] SetErrorMode (uMode=0x1) returned 0x0 [0095.189] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.189] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.189] SetErrorMode (uMode=0x0) returned 0x1 [0095.189] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.189] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.189] CoTaskMemFree (pv=0xffa70) [0095.190] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.190] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.190] CoTaskMemFree (pv=0xffa70) [0095.190] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0095.190] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0095.190] CoTaskMemFree (pv=0xffa70) [0095.190] SetErrorMode (uMode=0x1) returned 0x0 [0095.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0095.190] SetErrorMode (uMode=0x0) returned 0x1 [0095.191] GetFileType (hFile=0x18c) returned 0x1 [0095.192] WriteFile (in: hFile=0x18c, lpBuffer=0x280cce0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x280cce0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0095.193] SetErrorMode (uMode=0x1) returned 0x0 [0095.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0095.194] SetErrorMode (uMode=0x0) returned 0x1 [0095.194] GetFileType (hFile=0x18c) returned 0x1 [0095.195] SetErrorMode (uMode=0x1) returned 0x0 [0095.196] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.196] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.196] SetErrorMode (uMode=0x0) returned 0x1 [0095.196] SetErrorMode (uMode=0x1) returned 0x0 [0095.196] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.196] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.196] SetErrorMode (uMode=0x0) returned 0x1 [0095.197] SetErrorMode (uMode=0x1) returned 0x0 [0095.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.205] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.206] SetErrorMode (uMode=0x0) returned 0x1 [0095.206] SetErrorMode (uMode=0x1) returned 0x0 [0095.206] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0095.208] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0095.209] SetErrorMode (uMode=0x0) returned 0x1 [0095.209] SetErrorMode (uMode=0x1) returned 0x0 [0095.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.211] SetErrorMode (uMode=0x0) returned 0x1 [0095.211] GetFileType (hFile=0x18c) returned 0x1 [0095.211] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c88 [0095.215] SetErrorMode (uMode=0x1) returned 0x0 [0095.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88)) returned 1 [0095.215] SetErrorMode (uMode=0x0) returned 0x1 [0095.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", lpFilePart=0x0) returned 0x68 [0095.321] SetErrorMode (uMode=0x1) returned 0x0 [0095.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.323] GetFileType (hFile=0x18c) returned 0x1 [0095.323] SetErrorMode (uMode=0x0) returned 0x1 [0095.323] GetFileType (hFile=0x18c) returned 0x1 [0095.323] WriteFile (in: hFile=0x18c, lpBuffer=0x282e400*, nNumberOfBytesToWrite=0x6d90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x282e400*, lpNumberOfBytesWritten=0x27e6c8*=0x6d90, lpOverlapped=0x0) returned 1 [0095.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", lpFilePart=0x0) returned 0x68 [0095.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\saCX36yK12SPHNqD_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\saCX36yK12SPHNqD_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0095.325] SetErrorMode (uMode=0x1) returned 0x0 [0095.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x97edb10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6d90)) returned 1 [0095.325] SetErrorMode (uMode=0x0) returned 0x1 [0095.325] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\saCX36yK12SPHNqD_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\sacx36yk12sphnqd_encrypted_by.whiterose")) returned 1 [0095.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0095.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0095.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0095.435] SetErrorMode (uMode=0x1) returned 0x0 [0095.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.436] GetFileType (hFile=0x18c) returned 0x1 [0095.436] SetErrorMode (uMode=0x0) returned 0x1 [0095.436] GetFileType (hFile=0x18c) returned 0x1 [0095.436] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c88 [0095.436] ReadFile (in: hFile=0x18c, lpBuffer=0x2836d60, nNumberOfBytesToRead=0x6c88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2836d60*, lpNumberOfBytesRead=0x27e648*=0x6c88, lpOverlapped=0x0) returned 1 [0095.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0095.439] SetErrorMode (uMode=0x1) returned 0x0 [0095.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88)) returned 1 [0095.439] SetErrorMode (uMode=0x0) returned 0x1 [0095.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0095.502] SetErrorMode (uMode=0x1) returned 0x0 [0095.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.503] GetFileType (hFile=0x18c) returned 0x1 [0095.503] SetErrorMode (uMode=0x0) returned 0x1 [0095.503] GetFileType (hFile=0x18c) returned 0x1 [0095.503] WriteFile (in: hFile=0x18c, lpBuffer=0x28cf778*, nNumberOfBytesToWrite=0x6d90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28cf778*, lpNumberOfBytesWritten=0x27e6c8*=0x6d90, lpOverlapped=0x0) returned 1 [0095.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0095.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\IQbUGzp0XigwyxdM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\IQbUGzp0XigwyxdM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0095.505] SetErrorMode (uMode=0x1) returned 0x0 [0095.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99b6b90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6d90)) returned 1 [0095.505] SetErrorMode (uMode=0x0) returned 0x1 [0095.505] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\IQbUGzp0XigwyxdM_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\iqbugzp0xigwyxdm_encrypted_by.whiterose")) returned 1 [0095.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0095.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0095.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0095.607] SetErrorMode (uMode=0x1) returned 0x0 [0095.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.608] GetFileType (hFile=0x18c) returned 0x1 [0095.608] SetErrorMode (uMode=0x0) returned 0x1 [0095.608] GetFileType (hFile=0x18c) returned 0x1 [0095.608] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0095.608] ReadFile (in: hFile=0x18c, lpBuffer=0x28d80e0, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d80e0*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0095.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0095.613] SetErrorMode (uMode=0x1) returned 0x0 [0095.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0095.613] SetErrorMode (uMode=0x0) returned 0x1 [0095.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0095.687] SetErrorMode (uMode=0x1) returned 0x0 [0095.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.688] GetFileType (hFile=0x18c) returned 0x1 [0095.688] SetErrorMode (uMode=0x0) returned 0x1 [0095.688] GetFileType (hFile=0x18c) returned 0x1 [0095.688] WriteFile (in: hFile=0x18c, lpBuffer=0x2760e38*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2760e38*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0095.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0095.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zipBkTtqeJZOO3Cb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zipBkTtqeJZOO3Cb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0095.690] SetErrorMode (uMode=0x1) returned 0x0 [0095.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b7fc10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0095.690] SetErrorMode (uMode=0x0) returned 0x1 [0095.690] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zipBkTtqeJZOO3Cb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\zipbkttqejzoo3cb_encrypted_by.whiterose")) returned 1 [0095.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0095.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0095.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0095.794] SetErrorMode (uMode=0x1) returned 0x0 [0095.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.794] GetFileType (hFile=0x18c) returned 0x1 [0095.794] SetErrorMode (uMode=0x0) returned 0x1 [0095.794] GetFileType (hFile=0x18c) returned 0x1 [0095.794] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0095.794] ReadFile (in: hFile=0x18c, lpBuffer=0x27697b0, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27697b0*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0095.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0095.802] SetErrorMode (uMode=0x1) returned 0x0 [0095.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0095.802] SetErrorMode (uMode=0x0) returned 0x1 [0095.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0095.864] SetErrorMode (uMode=0x1) returned 0x0 [0095.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.865] GetFileType (hFile=0x18c) returned 0x1 [0095.865] SetErrorMode (uMode=0x0) returned 0x1 [0095.866] GetFileType (hFile=0x18c) returned 0x1 [0095.866] WriteFile (in: hFile=0x18c, lpBuffer=0x28edcc8*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28edcc8*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0095.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0095.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fa9wLiffmGKNmjvZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fa9wLiffmGKNmjvZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0095.867] SetErrorMode (uMode=0x1) returned 0x0 [0095.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d22b30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0095.867] SetErrorMode (uMode=0x0) returned 0x1 [0095.867] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fa9wLiffmGKNmjvZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\fa9wliffmgknmjvz_encrypted_by.whiterose")) returned 1 [0095.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0095.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0095.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0095.965] SetErrorMode (uMode=0x1) returned 0x0 [0095.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0095.966] GetFileType (hFile=0x18c) returned 0x1 [0095.966] SetErrorMode (uMode=0x0) returned 0x1 [0095.966] GetFileType (hFile=0x18c) returned 0x1 [0095.966] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0095.966] ReadFile (in: hFile=0x18c, lpBuffer=0x28f6640, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f6640*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0095.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0095.995] SetErrorMode (uMode=0x1) returned 0x0 [0095.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0095.995] SetErrorMode (uMode=0x0) returned 0x1 [0096.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0096.057] SetErrorMode (uMode=0x1) returned 0x0 [0096.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.058] GetFileType (hFile=0x18c) returned 0x1 [0096.058] SetErrorMode (uMode=0x0) returned 0x1 [0096.058] GetFileType (hFile=0x18c) returned 0x1 [0096.058] WriteFile (in: hFile=0x18c, lpBuffer=0x277a4e0*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x277a4e0*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0096.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0096.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\8DleqCjxE8t6BNUo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\8DleqCjxE8t6BNUo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0096.060] SetErrorMode (uMode=0x1) returned 0x0 [0096.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9f11d10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0096.060] SetErrorMode (uMode=0x0) returned 0x1 [0096.060] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\8DleqCjxE8t6BNUo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\8dleqcjxe8t6bnuo_encrypted_by.whiterose")) returned 1 [0096.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.168] SetErrorMode (uMode=0x1) returned 0x0 [0096.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.169] GetFileType (hFile=0x18c) returned 0x1 [0096.169] SetErrorMode (uMode=0x0) returned 0x1 [0096.169] GetFileType (hFile=0x18c) returned 0x1 [0096.169] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0096.169] ReadFile (in: hFile=0x18c, lpBuffer=0x2782e58, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2782e58*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0096.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.171] SetErrorMode (uMode=0x1) returned 0x0 [0096.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0096.171] SetErrorMode (uMode=0x0) returned 0x1 [0096.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.230] SetErrorMode (uMode=0x1) returned 0x0 [0096.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.232] GetFileType (hFile=0x18c) returned 0x1 [0096.232] SetErrorMode (uMode=0x0) returned 0x1 [0096.232] GetFileType (hFile=0x18c) returned 0x1 [0096.232] WriteFile (in: hFile=0x18c, lpBuffer=0x281bb80*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x281bb80*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0096.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\acez62hnLY3z*p1a_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\acez62hnLY3z*p1a_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0096.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0096.235] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 1 [0096.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0096.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0096.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0096.238] SetErrorMode (uMode=0x1) returned 0x0 [0096.238] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.238] GetFileType (hFile=0x18c) returned 0x1 [0096.238] SetErrorMode (uMode=0x0) returned 0x1 [0096.238] GetFileType (hFile=0x18c) returned 0x1 [0096.238] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0096.238] ReadFile (in: hFile=0x18c, lpBuffer=0x2824970, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2824970*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0096.240] CloseHandle (hObject=0x18c) returned 1 [0096.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0096.241] SetErrorMode (uMode=0x1) returned 0x0 [0096.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0096.241] SetErrorMode (uMode=0x0) returned 0x1 [0096.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0096.349] SetErrorMode (uMode=0x1) returned 0x0 [0096.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.350] GetFileType (hFile=0x18c) returned 0x1 [0096.350] SetErrorMode (uMode=0x0) returned 0x1 [0096.350] GetFileType (hFile=0x18c) returned 0x1 [0096.350] WriteFile (in: hFile=0x18c, lpBuffer=0x28bd5b0*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28bd5b0*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0096.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0096.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yoAN5b5uqPHYMFoT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yoAN5b5uqPHYMFoT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0096.352] SetErrorMode (uMode=0x1) returned 0x0 [0096.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa1bf5d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0096.352] SetErrorMode (uMode=0x0) returned 0x1 [0096.352] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yoAN5b5uqPHYMFoT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\yoan5b5uqphymfot_encrypted_by.whiterose")) returned 1 [0096.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.449] SetErrorMode (uMode=0x1) returned 0x0 [0096.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.450] GetFileType (hFile=0x18c) returned 0x1 [0096.450] SetErrorMode (uMode=0x0) returned 0x1 [0096.450] GetFileType (hFile=0x18c) returned 0x1 [0096.450] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0096.450] ReadFile (in: hFile=0x18c, lpBuffer=0x28c5f28, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28c5f28*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0096.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.452] SetErrorMode (uMode=0x1) returned 0x0 [0096.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0096.452] SetErrorMode (uMode=0x0) returned 0x1 [0096.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.525] SetErrorMode (uMode=0x1) returned 0x0 [0096.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.527] GetFileType (hFile=0x18c) returned 0x1 [0096.527] SetErrorMode (uMode=0x0) returned 0x1 [0096.527] GetFileType (hFile=0x18c) returned 0x1 [0096.527] WriteFile (in: hFile=0x18c, lpBuffer=0x274e3a8*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x274e3a8*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0096.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rmYkuHJRodj*D613_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rmYkuHJRodj*D613_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0096.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0096.536] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 1 [0096.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0096.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0096.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0096.539] SetErrorMode (uMode=0x1) returned 0x0 [0096.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.540] GetFileType (hFile=0x18c) returned 0x1 [0096.540] SetErrorMode (uMode=0x0) returned 0x1 [0096.540] GetFileType (hFile=0x18c) returned 0x1 [0096.540] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0096.540] ReadFile (in: hFile=0x18c, lpBuffer=0x2757198, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2757198*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0096.542] CloseHandle (hObject=0x18c) returned 1 [0096.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0096.543] SetErrorMode (uMode=0x1) returned 0x0 [0096.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0096.543] SetErrorMode (uMode=0x0) returned 0x1 [0096.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0096.652] SetErrorMode (uMode=0x1) returned 0x0 [0096.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.660] GetFileType (hFile=0x18c) returned 0x1 [0096.660] SetErrorMode (uMode=0x0) returned 0x1 [0096.660] GetFileType (hFile=0x18c) returned 0x1 [0096.660] WriteFile (in: hFile=0x18c, lpBuffer=0x27d3f00*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d3f00*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0096.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0096.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\bftZHSGZ4ZM5fFAK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\bftZHSGZ4ZM5fFAK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0096.662] SetErrorMode (uMode=0x1) returned 0x0 [0096.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa4b9150, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0096.662] SetErrorMode (uMode=0x0) returned 0x1 [0096.662] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\bftZHSGZ4ZM5fFAK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\bftzhsgz4zm5ffak_encrypted_by.whiterose")) returned 1 [0096.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0096.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0096.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0096.761] SetErrorMode (uMode=0x1) returned 0x0 [0096.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.762] GetFileType (hFile=0x18c) returned 0x1 [0096.762] SetErrorMode (uMode=0x0) returned 0x1 [0096.762] GetFileType (hFile=0x18c) returned 0x1 [0096.762] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0096.762] ReadFile (in: hFile=0x18c, lpBuffer=0x27dc878, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27dc878*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0096.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0096.764] SetErrorMode (uMode=0x1) returned 0x0 [0096.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0096.765] SetErrorMode (uMode=0x0) returned 0x1 [0096.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0096.833] SetErrorMode (uMode=0x1) returned 0x0 [0096.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.835] GetFileType (hFile=0x18c) returned 0x1 [0096.835] SetErrorMode (uMode=0x0) returned 0x1 [0096.835] GetFileType (hFile=0x18c) returned 0x1 [0096.835] WriteFile (in: hFile=0x18c, lpBuffer=0x2860490*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2860490*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0096.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0096.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rU4Vlmwn1gaK9onT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rU4Vlmwn1gaK9onT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0096.836] SetErrorMode (uMode=0x1) returned 0x0 [0096.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa65c070, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0096.836] SetErrorMode (uMode=0x0) returned 0x1 [0096.837] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rU4Vlmwn1gaK9onT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ru4vlmwn1gak9ont_encrypted_by.whiterose")) returned 1 [0096.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0096.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0096.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0096.934] SetErrorMode (uMode=0x1) returned 0x0 [0096.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0096.935] GetFileType (hFile=0x18c) returned 0x1 [0096.935] SetErrorMode (uMode=0x0) returned 0x1 [0096.935] GetFileType (hFile=0x18c) returned 0x1 [0096.935] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0096.935] ReadFile (in: hFile=0x18c, lpBuffer=0x2868e08, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2868e08*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0096.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0096.937] SetErrorMode (uMode=0x1) returned 0x0 [0096.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0096.937] SetErrorMode (uMode=0x0) returned 0x1 [0097.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0097.017] SetErrorMode (uMode=0x1) returned 0x0 [0097.017] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.018] GetFileType (hFile=0x18c) returned 0x1 [0097.018] SetErrorMode (uMode=0x0) returned 0x1 [0097.018] GetFileType (hFile=0x18c) returned 0x1 [0097.018] WriteFile (in: hFile=0x18c, lpBuffer=0x28eca20*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28eca20*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0097.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0097.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ingD2FAFhHT3mTMi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ingD2FAFhHT3mTMi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0097.020] SetErrorMode (uMode=0x1) returned 0x0 [0097.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa8250f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0097.020] SetErrorMode (uMode=0x0) returned 0x1 [0097.021] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ingD2FAFhHT3mTMi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ingd2fafhht3mtmi_encrypted_by.whiterose")) returned 1 [0097.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0097.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0097.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0097.121] SetErrorMode (uMode=0x1) returned 0x0 [0097.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.121] GetFileType (hFile=0x18c) returned 0x1 [0097.121] SetErrorMode (uMode=0x0) returned 0x1 [0097.121] GetFileType (hFile=0x18c) returned 0x1 [0097.121] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0097.121] ReadFile (in: hFile=0x18c, lpBuffer=0x28f5398, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f5398*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0097.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0097.125] SetErrorMode (uMode=0x1) returned 0x0 [0097.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3d9d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0097.125] SetErrorMode (uMode=0x0) returned 0x1 [0097.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0097.192] SetErrorMode (uMode=0x1) returned 0x0 [0097.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.194] GetFileType (hFile=0x18c) returned 0x1 [0097.194] SetErrorMode (uMode=0x0) returned 0x1 [0097.194] GetFileType (hFile=0x18c) returned 0x1 [0097.194] WriteFile (in: hFile=0x18c, lpBuffer=0x2778ff0*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2778ff0*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0097.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0097.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1fZyr7ntpEE2VaF7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1fZyr7ntpEE2VaF7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0097.195] SetErrorMode (uMode=0x1) returned 0x0 [0097.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3d9d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa9c8010, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0097.196] SetErrorMode (uMode=0x0) returned 0x1 [0097.196] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1fZyr7ntpEE2VaF7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\1fzyr7ntpee2vaf7_encrypted_by.whiterose")) returned 1 [0097.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.291] SetErrorMode (uMode=0x1) returned 0x0 [0097.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.292] GetFileType (hFile=0x18c) returned 0x1 [0097.292] SetErrorMode (uMode=0x0) returned 0x1 [0097.292] GetFileType (hFile=0x18c) returned 0x1 [0097.292] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0097.292] ReadFile (in: hFile=0x18c, lpBuffer=0x2781968, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2781968*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0097.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.294] SetErrorMode (uMode=0x1) returned 0x0 [0097.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0097.294] SetErrorMode (uMode=0x0) returned 0x1 [0097.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.359] SetErrorMode (uMode=0x1) returned 0x0 [0097.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.360] GetFileType (hFile=0x18c) returned 0x1 [0097.360] SetErrorMode (uMode=0x0) returned 0x1 [0097.360] GetFileType (hFile=0x18c) returned 0x1 [0097.360] WriteFile (in: hFile=0x18c, lpBuffer=0x28055e0*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28055e0*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0097.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RIcf7orMH6ni*E5v_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RIcf7orMH6ni*E5v_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0097.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0097.370] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 1 [0097.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0097.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0097.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0097.373] SetErrorMode (uMode=0x1) returned 0x0 [0097.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.374] GetFileType (hFile=0x18c) returned 0x1 [0097.374] SetErrorMode (uMode=0x0) returned 0x1 [0097.374] GetFileType (hFile=0x18c) returned 0x1 [0097.374] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0097.374] ReadFile (in: hFile=0x18c, lpBuffer=0x280e3d0, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x280e3d0*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0097.376] CloseHandle (hObject=0x18c) returned 1 [0097.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0097.377] SetErrorMode (uMode=0x1) returned 0x0 [0097.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0097.377] SetErrorMode (uMode=0x0) returned 0x1 [0097.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0097.492] SetErrorMode (uMode=0x1) returned 0x0 [0097.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.493] GetFileType (hFile=0x18c) returned 0x1 [0097.493] SetErrorMode (uMode=0x0) returned 0x1 [0097.494] GetFileType (hFile=0x18c) returned 0x1 [0097.494] WriteFile (in: hFile=0x18c, lpBuffer=0x2892030*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2892030*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0097.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0097.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BBJUizoUlQQcMeFd_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BBJUizoUlQQcMeFd_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0097.496] SetErrorMode (uMode=0x1) returned 0x0 [0097.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xacc1b90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0097.496] SetErrorMode (uMode=0x0) returned 0x1 [0097.496] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BBJUizoUlQQcMeFd_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\bbjuizoulqqcmefd_encrypted_by.whiterose")) returned 1 [0097.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0097.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0097.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0097.604] SetErrorMode (uMode=0x1) returned 0x0 [0097.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.604] GetFileType (hFile=0x18c) returned 0x1 [0097.604] SetErrorMode (uMode=0x0) returned 0x1 [0097.604] GetFileType (hFile=0x18c) returned 0x1 [0097.604] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0097.604] ReadFile (in: hFile=0x18c, lpBuffer=0x289a9a8, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x289a9a8*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0097.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0097.607] SetErrorMode (uMode=0x1) returned 0x0 [0097.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0097.607] SetErrorMode (uMode=0x0) returned 0x1 [0097.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0097.675] SetErrorMode (uMode=0x1) returned 0x0 [0097.675] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.676] GetFileType (hFile=0x18c) returned 0x1 [0097.676] SetErrorMode (uMode=0x0) returned 0x1 [0097.676] GetFileType (hFile=0x18c) returned 0x1 [0097.676] WriteFile (in: hFile=0x18c, lpBuffer=0x291e5c0*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x291e5c0*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0097.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0097.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\QghRX5eii9eTEYsm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\QghRX5eii9eTEYsm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0097.678] SetErrorMode (uMode=0x1) returned 0x0 [0097.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae64ab0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0097.678] SetErrorMode (uMode=0x0) returned 0x1 [0097.678] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\QghRX5eii9eTEYsm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\qghrx5eii9eteysm_encrypted_by.whiterose")) returned 1 [0097.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0097.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0097.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0097.790] SetErrorMode (uMode=0x1) returned 0x0 [0097.791] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.791] GetFileType (hFile=0x18c) returned 0x1 [0097.791] SetErrorMode (uMode=0x0) returned 0x1 [0097.791] GetFileType (hFile=0x18c) returned 0x1 [0097.791] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0097.791] ReadFile (in: hFile=0x18c, lpBuffer=0x2926f38, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2926f38*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0097.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0097.793] SetErrorMode (uMode=0x1) returned 0x0 [0097.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0097.794] SetErrorMode (uMode=0x0) returned 0x1 [0097.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0097.866] SetErrorMode (uMode=0x1) returned 0x0 [0097.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.867] GetFileType (hFile=0x18c) returned 0x1 [0097.867] SetErrorMode (uMode=0x0) returned 0x1 [0097.867] GetFileType (hFile=0x18c) returned 0x1 [0097.867] WriteFile (in: hFile=0x18c, lpBuffer=0x27a6ca0*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27a6ca0*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0097.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0097.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\x91Lnt38q61Tbgl0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\x91Lnt38q61Tbgl0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0097.869] SetErrorMode (uMode=0x1) returned 0x0 [0097.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb053c90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0097.869] SetErrorMode (uMode=0x0) returned 0x1 [0097.870] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\x91Lnt38q61Tbgl0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\x91lnt38q61tbgl0_encrypted_by.whiterose")) returned 1 [0097.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0097.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0097.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0097.978] SetErrorMode (uMode=0x1) returned 0x0 [0097.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0097.978] GetFileType (hFile=0x18c) returned 0x1 [0097.978] SetErrorMode (uMode=0x0) returned 0x1 [0097.978] GetFileType (hFile=0x18c) returned 0x1 [0097.978] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0097.978] ReadFile (in: hFile=0x18c, lpBuffer=0x27af618, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27af618*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0097.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0097.980] SetErrorMode (uMode=0x1) returned 0x0 [0097.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0097.980] SetErrorMode (uMode=0x0) returned 0x1 [0098.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0098.049] SetErrorMode (uMode=0x1) returned 0x0 [0098.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.050] GetFileType (hFile=0x18c) returned 0x1 [0098.050] SetErrorMode (uMode=0x0) returned 0x1 [0098.050] GetFileType (hFile=0x18c) returned 0x1 [0098.050] WriteFile (in: hFile=0x18c, lpBuffer=0x2833290*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2833290*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0098.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0098.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\e1IGOTOVz3MSKyfW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\e1IGOTOVz3MSKyfW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0098.052] SetErrorMode (uMode=0x1) returned 0x0 [0098.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb1f6bb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0098.052] SetErrorMode (uMode=0x0) returned 0x1 [0098.052] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\e1IGOTOVz3MSKyfW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\e1igotovz3mskyfw_encrypted_by.whiterose")) returned 1 [0098.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.149] SetErrorMode (uMode=0x1) returned 0x0 [0098.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.150] GetFileType (hFile=0x18c) returned 0x1 [0098.151] SetErrorMode (uMode=0x0) returned 0x1 [0098.151] GetFileType (hFile=0x18c) returned 0x1 [0098.151] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0098.151] ReadFile (in: hFile=0x18c, lpBuffer=0x283bc08, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x283bc08*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0098.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.153] SetErrorMode (uMode=0x1) returned 0x0 [0098.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0098.153] SetErrorMode (uMode=0x0) returned 0x1 [0098.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.219] SetErrorMode (uMode=0x1) returned 0x0 [0098.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.220] GetFileType (hFile=0x18c) returned 0x1 [0098.220] SetErrorMode (uMode=0x0) returned 0x1 [0098.220] GetFileType (hFile=0x18c) returned 0x1 [0098.220] WriteFile (in: hFile=0x18c, lpBuffer=0x28bf820*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28bf820*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0098.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\7tWoscSdQsu*Z3El_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\7tWoscSdQsu*Z3El_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0098.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0098.228] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 1 [0098.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0098.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0098.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0098.231] SetErrorMode (uMode=0x1) returned 0x0 [0098.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.232] GetFileType (hFile=0x18c) returned 0x1 [0098.232] SetErrorMode (uMode=0x0) returned 0x1 [0098.232] GetFileType (hFile=0x18c) returned 0x1 [0098.232] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6c96 [0098.232] ReadFile (in: hFile=0x18c, lpBuffer=0x28c8610, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28c8610*, lpNumberOfBytesRead=0x27e648*=0x6c96, lpOverlapped=0x0) returned 1 [0098.240] CloseHandle (hObject=0x18c) returned 1 [0098.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0098.241] SetErrorMode (uMode=0x1) returned 0x0 [0098.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96)) returned 1 [0098.241] SetErrorMode (uMode=0x0) returned 0x1 [0098.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0098.344] SetErrorMode (uMode=0x1) returned 0x0 [0098.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.346] GetFileType (hFile=0x18c) returned 0x1 [0098.346] SetErrorMode (uMode=0x0) returned 0x1 [0098.346] GetFileType (hFile=0x18c) returned 0x1 [0098.346] WriteFile (in: hFile=0x18c, lpBuffer=0x274e3a8*, nNumberOfBytesToWrite=0x6da0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x274e3a8*, lpNumberOfBytesWritten=0x27e6c8*=0x6da0, lpOverlapped=0x0) returned 1 [0098.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0098.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Qls4GmPludX4CCe5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Qls4GmPludX4CCe5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0098.348] SetErrorMode (uMode=0x1) returned 0x0 [0098.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb4ca5d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1 [0098.348] SetErrorMode (uMode=0x0) returned 0x1 [0098.348] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Qls4GmPludX4CCe5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\qls4gmpludx4cce5_encrypted_by.whiterose")) returned 1 [0098.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0098.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0098.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0098.446] SetErrorMode (uMode=0x1) returned 0x0 [0098.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.447] GetFileType (hFile=0x18c) returned 0x1 [0098.447] SetErrorMode (uMode=0x0) returned 0x1 [0098.447] GetFileType (hFile=0x18c) returned 0x1 [0098.447] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6cde [0098.447] ReadFile (in: hFile=0x18c, lpBuffer=0x2756d08, nNumberOfBytesToRead=0x6cde, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2756d08*, lpNumberOfBytesRead=0x27e648*=0x6cde, lpOverlapped=0x0) returned 1 [0098.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0098.449] SetErrorMode (uMode=0x1) returned 0x0 [0098.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cde)) returned 1 [0098.449] SetErrorMode (uMode=0x0) returned 0x1 [0098.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0098.518] SetErrorMode (uMode=0x1) returned 0x0 [0098.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.519] GetFileType (hFile=0x18c) returned 0x1 [0098.519] SetErrorMode (uMode=0x0) returned 0x1 [0098.519] GetFileType (hFile=0x18c) returned 0x1 [0098.519] WriteFile (in: hFile=0x18c, lpBuffer=0x27d3c48*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d3c48*, lpNumberOfBytesWritten=0x27e6c8*=0x6de0, lpOverlapped=0x0) returned 1 [0098.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0098.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JjQz8SvIsCyft3Qc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JjQz8SvIsCyft3Qc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0098.521] SetErrorMode (uMode=0x1) returned 0x0 [0098.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb66d4f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0098.521] SetErrorMode (uMode=0x0) returned 0x1 [0098.521] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JjQz8SvIsCyft3Qc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\jjqz8sviscyft3qc_encrypted_by.whiterose")) returned 1 [0098.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0098.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0098.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0098.617] SetErrorMode (uMode=0x1) returned 0x0 [0098.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.618] GetFileType (hFile=0x18c) returned 0x1 [0098.618] SetErrorMode (uMode=0x0) returned 0x1 [0098.618] GetFileType (hFile=0x18c) returned 0x1 [0098.618] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6cde [0098.618] ReadFile (in: hFile=0x18c, lpBuffer=0x27dc5f8, nNumberOfBytesToRead=0x6cde, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27dc5f8*, lpNumberOfBytesRead=0x27e648*=0x6cde, lpOverlapped=0x0) returned 1 [0098.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0098.620] SetErrorMode (uMode=0x1) returned 0x0 [0098.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cde)) returned 1 [0098.620] SetErrorMode (uMode=0x0) returned 0x1 [0098.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0098.687] SetErrorMode (uMode=0x1) returned 0x0 [0098.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.688] GetFileType (hFile=0x18c) returned 0x1 [0098.688] SetErrorMode (uMode=0x0) returned 0x1 [0098.688] GetFileType (hFile=0x18c) returned 0x1 [0098.688] WriteFile (in: hFile=0x18c, lpBuffer=0x28603e0*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28603e0*, lpNumberOfBytesWritten=0x27e6c8*=0x6de0, lpOverlapped=0x0) returned 1 [0098.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0098.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AN5hLbz1K3hxIveC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AN5hLbz1K3hxIveC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0098.690] SetErrorMode (uMode=0x1) returned 0x0 [0098.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb810410, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0098.690] SetErrorMode (uMode=0x0) returned 0x1 [0098.690] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AN5hLbz1K3hxIveC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\an5hlbz1k3hxivec_encrypted_by.whiterose")) returned 1 [0098.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0098.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0098.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0098.789] SetErrorMode (uMode=0x1) returned 0x0 [0098.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.789] GetFileType (hFile=0x18c) returned 0x1 [0098.789] SetErrorMode (uMode=0x0) returned 0x1 [0098.789] GetFileType (hFile=0x18c) returned 0x1 [0098.789] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6cdc [0098.790] ReadFile (in: hFile=0x18c, lpBuffer=0x2868d80, nNumberOfBytesToRead=0x6cdc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2868d80*, lpNumberOfBytesRead=0x27e648*=0x6cdc, lpOverlapped=0x0) returned 1 [0098.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0098.792] SetErrorMode (uMode=0x1) returned 0x0 [0098.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc)) returned 1 [0098.792] SetErrorMode (uMode=0x0) returned 0x1 [0098.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0098.862] SetErrorMode (uMode=0x1) returned 0x0 [0098.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.863] GetFileType (hFile=0x18c) returned 0x1 [0098.863] SetErrorMode (uMode=0x0) returned 0x1 [0098.864] GetFileType (hFile=0x18c) returned 0x1 [0098.864] WriteFile (in: hFile=0x18c, lpBuffer=0x28ecb58*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28ecb58*, lpNumberOfBytesWritten=0x27e6c8*=0x6de0, lpOverlapped=0x0) returned 1 [0098.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0098.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VYAMYCbNU7f3gtVp_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VYAMYCbNU7f3gtVp_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0098.865] SetErrorMode (uMode=0x1) returned 0x0 [0098.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb9b3330, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0098.865] SetErrorMode (uMode=0x0) returned 0x1 [0098.865] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VYAMYCbNU7f3gtVp_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\vyamycbnu7f3gtvp_encrypted_by.whiterose")) returned 1 [0098.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0098.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0098.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0098.961] SetErrorMode (uMode=0x1) returned 0x0 [0098.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0098.962] GetFileType (hFile=0x18c) returned 0x1 [0098.962] SetErrorMode (uMode=0x0) returned 0x1 [0098.962] GetFileType (hFile=0x18c) returned 0x1 [0098.962] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6cdc [0098.962] ReadFile (in: hFile=0x18c, lpBuffer=0x28f5508, nNumberOfBytesToRead=0x6cdc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f5508*, lpNumberOfBytesRead=0x27e648*=0x6cdc, lpOverlapped=0x0) returned 1 [0098.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0098.964] SetErrorMode (uMode=0x1) returned 0x0 [0098.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc)) returned 1 [0098.965] SetErrorMode (uMode=0x0) returned 0x1 [0099.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0099.034] SetErrorMode (uMode=0x1) returned 0x0 [0099.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.036] GetFileType (hFile=0x18c) returned 0x1 [0099.036] SetErrorMode (uMode=0x0) returned 0x1 [0099.036] GetFileType (hFile=0x18c) returned 0x1 [0099.036] WriteFile (in: hFile=0x18c, lpBuffer=0x2779310*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2779310*, lpNumberOfBytesWritten=0x27e6c8*=0x6de0, lpOverlapped=0x0) returned 1 [0099.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0099.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MqPuCWf6awZjvYjQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MqPuCWf6awZjvYjQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0099.038] SetErrorMode (uMode=0x1) returned 0x0 [0099.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbb56250, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0099.038] SetErrorMode (uMode=0x0) returned 0x1 [0099.038] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MqPuCWf6awZjvYjQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\mqpucwf6awzjvyjq_encrypted_by.whiterose")) returned 1 [0099.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0099.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0099.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0099.148] SetErrorMode (uMode=0x1) returned 0x0 [0099.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.148] GetFileType (hFile=0x18c) returned 0x1 [0099.148] SetErrorMode (uMode=0x0) returned 0x1 [0099.148] GetFileType (hFile=0x18c) returned 0x1 [0099.148] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6cdc [0099.148] ReadFile (in: hFile=0x18c, lpBuffer=0x2781d28, nNumberOfBytesToRead=0x6cdc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2781d28*, lpNumberOfBytesRead=0x27e648*=0x6cdc, lpOverlapped=0x0) returned 1 [0099.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0099.151] SetErrorMode (uMode=0x1) returned 0x0 [0099.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc)) returned 1 [0099.151] SetErrorMode (uMode=0x0) returned 0x1 [0099.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0099.217] SetErrorMode (uMode=0x1) returned 0x0 [0099.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.218] GetFileType (hFile=0x18c) returned 0x1 [0099.218] SetErrorMode (uMode=0x0) returned 0x1 [0099.218] GetFileType (hFile=0x18c) returned 0x1 [0099.218] WriteFile (in: hFile=0x18c, lpBuffer=0x2805b40*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2805b40*, lpNumberOfBytesWritten=0x27e6c8*=0x6de0, lpOverlapped=0x0) returned 1 [0099.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0099.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\tiwp4l4UjtKj5fdC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\tiwp4l4UjtKj5fdC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0099.220] SetErrorMode (uMode=0x1) returned 0x0 [0099.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbd1f2d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0099.220] SetErrorMode (uMode=0x0) returned 0x1 [0099.220] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\tiwp4l4UjtKj5fdC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\tiwp4l4ujtkj5fdc_encrypted_by.whiterose")) returned 1 [0099.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0099.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0099.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0099.320] SetErrorMode (uMode=0x1) returned 0x0 [0099.320] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.321] GetFileType (hFile=0x18c) returned 0x1 [0099.321] SetErrorMode (uMode=0x0) returned 0x1 [0099.321] GetFileType (hFile=0x18c) returned 0x1 [0099.321] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x74c0 [0099.321] ReadFile (in: hFile=0x18c, lpBuffer=0x280e520, nNumberOfBytesToRead=0x74c0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x280e520*, lpNumberOfBytesRead=0x27e648*=0x74c0, lpOverlapped=0x0) returned 1 [0099.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0099.323] SetErrorMode (uMode=0x1) returned 0x0 [0099.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c0)) returned 1 [0099.323] SetErrorMode (uMode=0x0) returned 0x1 [0099.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0099.388] SetErrorMode (uMode=0x1) returned 0x0 [0099.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.390] GetFileType (hFile=0x18c) returned 0x1 [0099.390] SetErrorMode (uMode=0x0) returned 0x1 [0099.390] GetFileType (hFile=0x18c) returned 0x1 [0099.390] WriteFile (in: hFile=0x18c, lpBuffer=0x2895a80*, nNumberOfBytesToWrite=0x75d0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2895a80*, lpNumberOfBytesWritten=0x27e6c8*=0x75d0, lpOverlapped=0x0) returned 1 [0099.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0099.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\kLL9HF8bAUsAjJC3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\kLL9HF8bAUsAjJC3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0099.391] SetErrorMode (uMode=0x1) returned 0x0 [0099.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbec21f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x75d0)) returned 1 [0099.391] SetErrorMode (uMode=0x0) returned 0x1 [0099.392] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\kLL9HF8bAUsAjJC3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\kll9hf8bausajjc3_encrypted_by.whiterose")) returned 1 [0099.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0099.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0099.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0099.491] SetErrorMode (uMode=0x1) returned 0x0 [0099.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.492] GetFileType (hFile=0x18c) returned 0x1 [0099.492] SetErrorMode (uMode=0x0) returned 0x1 [0099.492] GetFileType (hFile=0x18c) returned 0x1 [0099.492] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x74c0 [0099.492] ReadFile (in: hFile=0x18c, lpBuffer=0x289ec20, nNumberOfBytesToRead=0x74c0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x289ec20*, lpNumberOfBytesRead=0x27e648*=0x74c0, lpOverlapped=0x0) returned 1 [0099.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0099.494] SetErrorMode (uMode=0x1) returned 0x0 [0099.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c0)) returned 1 [0099.494] SetErrorMode (uMode=0x0) returned 0x1 [0099.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0099.567] SetErrorMode (uMode=0x1) returned 0x0 [0099.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.569] GetFileType (hFile=0x18c) returned 0x1 [0099.569] SetErrorMode (uMode=0x0) returned 0x1 [0099.569] GetFileType (hFile=0x18c) returned 0x1 [0099.569] WriteFile (in: hFile=0x18c, lpBuffer=0x2925978*, nNumberOfBytesToWrite=0x75d0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2925978*, lpNumberOfBytesWritten=0x27e6c8*=0x75d0, lpOverlapped=0x0) returned 1 [0099.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0099.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\FWhCU7JZKXr7RHiP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\FWhCU7JZKXr7RHiP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0099.570] SetErrorMode (uMode=0x1) returned 0x0 [0099.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc08b270, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x75d0)) returned 1 [0099.571] SetErrorMode (uMode=0x0) returned 0x1 [0099.571] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\FWhCU7JZKXr7RHiP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\fwhcu7jzkxr7rhip_encrypted_by.whiterose")) returned 1 [0099.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0099.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0099.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0099.678] SetErrorMode (uMode=0x1) returned 0x0 [0099.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.679] GetFileType (hFile=0x18c) returned 0x1 [0099.679] SetErrorMode (uMode=0x0) returned 0x1 [0099.679] GetFileType (hFile=0x18c) returned 0x1 [0099.679] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d72 [0099.679] ReadFile (in: hFile=0x18c, lpBuffer=0x292eb08, nNumberOfBytesToRead=0x6d72, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x292eb08*, lpNumberOfBytesRead=0x27e648*=0x6d72, lpOverlapped=0x0) returned 1 [0099.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0099.683] SetErrorMode (uMode=0x1) returned 0x0 [0099.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d72)) returned 1 [0099.683] SetErrorMode (uMode=0x0) returned 0x1 [0099.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0099.756] SetErrorMode (uMode=0x1) returned 0x0 [0099.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.758] GetFileType (hFile=0x18c) returned 0x1 [0099.758] SetErrorMode (uMode=0x0) returned 0x1 [0099.758] GetFileType (hFile=0x18c) returned 0x1 [0099.758] WriteFile (in: hFile=0x18c, lpBuffer=0x27af788*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27af788*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0099.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0099.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\S8HKNoXh1hXS8vUe_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\S8HKNoXh1hXS8vUe_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0099.759] SetErrorMode (uMode=0x1) returned 0x0 [0099.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc2542f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0099.760] SetErrorMode (uMode=0x0) returned 0x1 [0099.760] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\S8HKNoXh1hXS8vUe_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\s8hknoxh1hxs8vue_encrypted_by.whiterose")) returned 1 [0099.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0099.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0099.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0099.865] SetErrorMode (uMode=0x1) returned 0x0 [0099.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.866] GetFileType (hFile=0x18c) returned 0x1 [0099.866] SetErrorMode (uMode=0x0) returned 0x1 [0099.866] GetFileType (hFile=0x18c) returned 0x1 [0099.866] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d72 [0099.867] ReadFile (in: hFile=0x18c, lpBuffer=0x27b81d8, nNumberOfBytesToRead=0x6d72, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b81d8*, lpNumberOfBytesRead=0x27e648*=0x6d72, lpOverlapped=0x0) returned 1 [0099.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0099.885] SetErrorMode (uMode=0x1) returned 0x0 [0099.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d72)) returned 1 [0099.885] SetErrorMode (uMode=0x0) returned 0x1 [0099.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0099.950] SetErrorMode (uMode=0x1) returned 0x0 [0099.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0099.952] GetFileType (hFile=0x18c) returned 0x1 [0099.952] SetErrorMode (uMode=0x0) returned 0x1 [0099.952] GetFileType (hFile=0x18c) returned 0x1 [0099.952] WriteFile (in: hFile=0x18c, lpBuffer=0x283c380*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x283c380*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0099.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0099.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zYoFdOK80eISENN3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zYoFdOK80eISENN3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0099.953] SetErrorMode (uMode=0x1) returned 0x0 [0099.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc41d370, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0099.954] SetErrorMode (uMode=0x0) returned 0x1 [0099.954] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zYoFdOK80eISENN3_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\zyofdok80eisenn3_encrypted_by.whiterose")) returned 1 [0100.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0100.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0100.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0100.052] SetErrorMode (uMode=0x1) returned 0x0 [0100.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.053] GetFileType (hFile=0x18c) returned 0x1 [0100.053] SetErrorMode (uMode=0x0) returned 0x1 [0100.053] GetFileType (hFile=0x18c) returned 0x1 [0100.053] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x72d6 [0100.053] ReadFile (in: hFile=0x18c, lpBuffer=0x2844dd8, nNumberOfBytesToRead=0x72d6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2844dd8*, lpNumberOfBytesRead=0x27e648*=0x72d6, lpOverlapped=0x0) returned 1 [0100.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0100.055] SetErrorMode (uMode=0x1) returned 0x0 [0100.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72d6)) returned 1 [0100.055] SetErrorMode (uMode=0x0) returned 0x1 [0100.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0100.120] SetErrorMode (uMode=0x1) returned 0x0 [0100.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.121] GetFileType (hFile=0x18c) returned 0x1 [0100.121] SetErrorMode (uMode=0x0) returned 0x1 [0100.121] GetFileType (hFile=0x18c) returned 0x1 [0100.121] WriteFile (in: hFile=0x18c, lpBuffer=0x28cb4e0*, nNumberOfBytesToWrite=0x73e0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28cb4e0*, lpNumberOfBytesWritten=0x27e6c8*=0x73e0, lpOverlapped=0x0) returned 1 [0100.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0100.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\gQ8zEewVgbuRc6HO_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\gQ8zEewVgbuRc6HO_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0100.123] SetErrorMode (uMode=0x1) returned 0x0 [0100.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc5c0290, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x73e0)) returned 1 [0100.123] SetErrorMode (uMode=0x0) returned 0x1 [0100.123] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\gQ8zEewVgbuRc6HO_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\gq8zeewvgburc6ho_encrypted_by.whiterose")) returned 1 [0100.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0100.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0100.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0100.224] SetErrorMode (uMode=0x1) returned 0x0 [0100.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.225] GetFileType (hFile=0x18c) returned 0x1 [0100.225] SetErrorMode (uMode=0x0) returned 0x1 [0100.225] GetFileType (hFile=0x18c) returned 0x1 [0100.225] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7328 [0100.225] ReadFile (in: hFile=0x18c, lpBuffer=0x28d4498, nNumberOfBytesToRead=0x7328, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d4498*, lpNumberOfBytesRead=0x27e648*=0x7328, lpOverlapped=0x0) returned 1 [0100.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0100.227] SetErrorMode (uMode=0x1) returned 0x0 [0100.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7328)) returned 1 [0100.227] SetErrorMode (uMode=0x0) returned 0x1 [0100.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0100.294] SetErrorMode (uMode=0x1) returned 0x0 [0100.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.295] GetFileType (hFile=0x18c) returned 0x1 [0100.295] SetErrorMode (uMode=0x0) returned 0x1 [0100.295] GetFileType (hFile=0x18c) returned 0x1 [0100.295] WriteFile (in: hFile=0x18c, lpBuffer=0x275a898*, nNumberOfBytesToWrite=0x7430, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x275a898*, lpNumberOfBytesWritten=0x27e6c8*=0x7430, lpOverlapped=0x0) returned 1 [0100.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0100.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\9jkhixBcyCc0sy6d_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\9jkhixBcyCc0sy6d_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0100.297] SetErrorMode (uMode=0x1) returned 0x0 [0100.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc7631b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7430)) returned 1 [0100.297] SetErrorMode (uMode=0x0) returned 0x1 [0100.297] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\9jkhixBcyCc0sy6d_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\9jkhixbcycc0sy6d_encrypted_by.whiterose")) returned 1 [0100.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.396] SetErrorMode (uMode=0x1) returned 0x0 [0100.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.396] GetFileType (hFile=0x18c) returned 0x1 [0100.396] SetErrorMode (uMode=0x0) returned 0x1 [0100.396] GetFileType (hFile=0x18c) returned 0x1 [0100.396] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7326 [0100.396] ReadFile (in: hFile=0x18c, lpBuffer=0x2763900, nNumberOfBytesToRead=0x7326, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2763900*, lpNumberOfBytesRead=0x27e648*=0x7326, lpOverlapped=0x0) returned 1 [0100.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.399] SetErrorMode (uMode=0x1) returned 0x0 [0100.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7326)) returned 1 [0100.399] SetErrorMode (uMode=0x0) returned 0x1 [0100.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.472] SetErrorMode (uMode=0x1) returned 0x0 [0100.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.477] GetFileType (hFile=0x18c) returned 0x1 [0100.477] SetErrorMode (uMode=0x0) returned 0x1 [0100.477] GetFileType (hFile=0x18c) returned 0x1 [0100.477] WriteFile (in: hFile=0x18c, lpBuffer=0x27e9d00*, nNumberOfBytesToWrite=0x7430, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27e9d00*, lpNumberOfBytesWritten=0x27e6c8*=0x7430, lpOverlapped=0x0) returned 1 [0100.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\suSNvZd1IGbE1wM2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\suSNvZd1IGbE1wM2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0100.480] SetErrorMode (uMode=0x1) returned 0x0 [0100.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc92c230, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7430)) returned 1 [0100.480] SetErrorMode (uMode=0x0) returned 0x1 [0100.480] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\suSNvZd1IGbE1wM2_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\susnvzd1igbe1wm2_encrypted_by.whiterose")) returned 1 [0100.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.583] SetErrorMode (uMode=0x1) returned 0x0 [0100.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.585] GetFileType (hFile=0x18c) returned 0x1 [0100.585] SetErrorMode (uMode=0x0) returned 0x1 [0100.585] GetFileType (hFile=0x18c) returned 0x1 [0100.585] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e92 [0100.585] ReadFile (in: hFile=0x18c, lpBuffer=0x27f2d30, nNumberOfBytesToRead=0x6e92, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27f2d30*, lpNumberOfBytesRead=0x27e648*=0x6e92, lpOverlapped=0x0) returned 1 [0100.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.588] SetErrorMode (uMode=0x1) returned 0x0 [0100.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e92)) returned 1 [0100.588] SetErrorMode (uMode=0x0) returned 0x1 [0100.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.647] SetErrorMode (uMode=0x1) returned 0x0 [0100.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.649] GetFileType (hFile=0x18c) returned 0x1 [0100.649] SetErrorMode (uMode=0x0) returned 0x1 [0100.649] GetFileType (hFile=0x18c) returned 0x1 [0100.649] WriteFile (in: hFile=0x18c, lpBuffer=0x28770d8*, nNumberOfBytesToWrite=0x6fa0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28770d8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fa0, lpOverlapped=0x0) returned 1 [0100.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*lzHWo1OQDXDyOGO_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*lzHWo1OQDXDyOGO_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0100.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0100.653] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 1 [0100.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.656] SetErrorMode (uMode=0x1) returned 0x0 [0100.656] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.657] GetFileType (hFile=0x18c) returned 0x1 [0100.657] SetErrorMode (uMode=0x0) returned 0x1 [0100.657] GetFileType (hFile=0x18c) returned 0x1 [0100.657] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e92 [0100.657] ReadFile (in: hFile=0x18c, lpBuffer=0x28800c0, nNumberOfBytesToRead=0x6e92, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28800c0*, lpNumberOfBytesRead=0x27e648*=0x6e92, lpOverlapped=0x0) returned 1 [0100.659] CloseHandle (hObject=0x18c) returned 1 [0100.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.660] SetErrorMode (uMode=0x1) returned 0x0 [0100.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e92)) returned 1 [0100.660] SetErrorMode (uMode=0x0) returned 0x1 [0100.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.765] SetErrorMode (uMode=0x1) returned 0x0 [0100.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.767] GetFileType (hFile=0x18c) returned 0x1 [0100.767] SetErrorMode (uMode=0x0) returned 0x1 [0100.767] GetFileType (hFile=0x18c) returned 0x1 [0100.767] WriteFile (in: hFile=0x18c, lpBuffer=0x2904900*, nNumberOfBytesToWrite=0x6fa0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2904900*, lpNumberOfBytesWritten=0x27e6c8*=0x6fa0, lpOverlapped=0x0) returned 1 [0100.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\5QC0nsdqDRmPSAM*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\5QC0nsdqDRmPSAM*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0100.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0100.775] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 1 [0100.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.778] SetErrorMode (uMode=0x1) returned 0x0 [0100.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.779] GetFileType (hFile=0x18c) returned 0x1 [0100.779] SetErrorMode (uMode=0x0) returned 0x1 [0100.779] GetFileType (hFile=0x18c) returned 0x1 [0100.779] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e76 [0100.779] ReadFile (in: hFile=0x18c, lpBuffer=0x290d950, nNumberOfBytesToRead=0x6e76, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x290d950*, lpNumberOfBytesRead=0x27e648*=0x6e76, lpOverlapped=0x0) returned 1 [0100.781] CloseHandle (hObject=0x18c) returned 1 [0100.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.782] SetErrorMode (uMode=0x1) returned 0x0 [0100.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e76)) returned 1 [0100.782] SetErrorMode (uMode=0x0) returned 0x1 [0100.875] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.875] SetErrorMode (uMode=0x1) returned 0x0 [0100.875] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.876] GetFileType (hFile=0x18c) returned 0x1 [0100.876] SetErrorMode (uMode=0x0) returned 0x1 [0100.876] GetFileType (hFile=0x18c) returned 0x1 [0100.876] WriteFile (in: hFile=0x18c, lpBuffer=0x2792150*, nNumberOfBytesToWrite=0x6f80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2792150*, lpNumberOfBytesWritten=0x27e6c8*=0x6f80, lpOverlapped=0x0) returned 1 [0100.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0100.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\mwZPOGe98XspNCgd_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\mwZPOGe98XspNCgd_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0100.879] SetErrorMode (uMode=0x1) returned 0x0 [0100.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcce4490, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f80)) returned 1 [0100.879] SetErrorMode (uMode=0x0) returned 0x1 [0100.879] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\mwZPOGe98XspNCgd_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\mwzpoge98xspncgd_encrypted_by.whiterose")) returned 1 [0100.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0100.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0100.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0100.989] SetErrorMode (uMode=0x1) returned 0x0 [0100.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0100.990] GetFileType (hFile=0x18c) returned 0x1 [0100.990] SetErrorMode (uMode=0x0) returned 0x1 [0100.990] GetFileType (hFile=0x18c) returned 0x1 [0100.990] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0100.990] ReadFile (in: hFile=0x18c, lpBuffer=0x279ace8, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x279ace8*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0100.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0100.992] SetErrorMode (uMode=0x1) returned 0x0 [0100.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0100.992] SetErrorMode (uMode=0x0) returned 0x1 [0101.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0101.063] SetErrorMode (uMode=0x1) returned 0x0 [0101.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.065] GetFileType (hFile=0x18c) returned 0x1 [0101.065] SetErrorMode (uMode=0x0) returned 0x1 [0101.065] GetFileType (hFile=0x18c) returned 0x1 [0101.065] WriteFile (in: hFile=0x18c, lpBuffer=0x281f4c8*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x281f4c8*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0101.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0101.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fummecVu6l5BF3Sm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fummecVu6l5BF3Sm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0101.067] SetErrorMode (uMode=0x1) returned 0x0 [0101.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xced3670, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0101.067] SetErrorMode (uMode=0x0) returned 0x1 [0101.067] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fummecVu6l5BF3Sm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\fummecvu6l5bf3sm_encrypted_by.whiterose")) returned 1 [0101.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0101.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0101.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0101.176] SetErrorMode (uMode=0x1) returned 0x0 [0101.176] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.177] GetFileType (hFile=0x18c) returned 0x1 [0101.177] SetErrorMode (uMode=0x0) returned 0x1 [0101.177] GetFileType (hFile=0x18c) returned 0x1 [0101.177] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0101.177] ReadFile (in: hFile=0x18c, lpBuffer=0x2828030, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2828030*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0101.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0101.179] SetErrorMode (uMode=0x1) returned 0x0 [0101.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0101.179] SetErrorMode (uMode=0x0) returned 0x1 [0101.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0101.243] SetErrorMode (uMode=0x1) returned 0x0 [0101.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.244] GetFileType (hFile=0x18c) returned 0x1 [0101.244] SetErrorMode (uMode=0x0) returned 0x1 [0101.244] GetFileType (hFile=0x18c) returned 0x1 [0101.244] WriteFile (in: hFile=0x18c, lpBuffer=0x28ac848*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28ac848*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0101.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0101.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Xl6gFCHjciQBdkL0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Xl6gFCHjciQBdkL0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0101.246] SetErrorMode (uMode=0x1) returned 0x0 [0101.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd076590, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0101.246] SetErrorMode (uMode=0x0) returned 0x1 [0101.246] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Xl6gFCHjciQBdkL0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\xl6gfchjciqbdkl0_encrypted_by.whiterose")) returned 1 [0101.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.347] SetErrorMode (uMode=0x1) returned 0x0 [0101.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.348] GetFileType (hFile=0x18c) returned 0x1 [0101.348] SetErrorMode (uMode=0x0) returned 0x1 [0101.348] GetFileType (hFile=0x18c) returned 0x1 [0101.348] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0101.348] ReadFile (in: hFile=0x18c, lpBuffer=0x28b53f8, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28b53f8*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0101.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.383] SetErrorMode (uMode=0x1) returned 0x0 [0101.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0101.383] SetErrorMode (uMode=0x0) returned 0x1 [0101.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.477] SetErrorMode (uMode=0x1) returned 0x0 [0101.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.479] GetFileType (hFile=0x18c) returned 0x1 [0101.479] SetErrorMode (uMode=0x0) returned 0x1 [0101.479] GetFileType (hFile=0x18c) returned 0x1 [0101.479] WriteFile (in: hFile=0x18c, lpBuffer=0x27409b0*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27409b0*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0101.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\OPiZjWLBuJyTsO*z_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\OPiZjWLBuJyTsO*z_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0101.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0101.486] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 1 [0101.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.489] SetErrorMode (uMode=0x1) returned 0x0 [0101.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.490] GetFileType (hFile=0x18c) returned 0x1 [0101.490] SetErrorMode (uMode=0x0) returned 0x1 [0101.490] GetFileType (hFile=0x18c) returned 0x1 [0101.490] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0101.490] ReadFile (in: hFile=0x18c, lpBuffer=0x27499d8, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27499d8*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0101.492] CloseHandle (hObject=0x18c) returned 1 [0101.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.493] SetErrorMode (uMode=0x1) returned 0x0 [0101.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0101.493] SetErrorMode (uMode=0x0) returned 0x1 [0101.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.610] SetErrorMode (uMode=0x1) returned 0x0 [0101.610] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.612] GetFileType (hFile=0x18c) returned 0x1 [0101.612] SetErrorMode (uMode=0x0) returned 0x1 [0101.612] GetFileType (hFile=0x18c) returned 0x1 [0101.612] WriteFile (in: hFile=0x18c, lpBuffer=0x291ab28*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x291ab28*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0101.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\XU*SwguQOlHbHE*1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\XU*SwguQOlHbHE*1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0101.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0101.625] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 1 [0101.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0101.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0101.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0101.628] SetErrorMode (uMode=0x1) returned 0x0 [0101.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.629] GetFileType (hFile=0x18c) returned 0x1 [0101.629] SetErrorMode (uMode=0x0) returned 0x1 [0101.629] GetFileType (hFile=0x18c) returned 0x1 [0101.629] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0101.629] ReadFile (in: hFile=0x18c, lpBuffer=0x2923b68, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2923b68*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0101.631] CloseHandle (hObject=0x18c) returned 1 [0101.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0101.632] SetErrorMode (uMode=0x1) returned 0x0 [0101.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0101.632] SetErrorMode (uMode=0x0) returned 0x1 [0101.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0101.755] SetErrorMode (uMode=0x1) returned 0x0 [0101.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.757] GetFileType (hFile=0x18c) returned 0x1 [0101.757] SetErrorMode (uMode=0x0) returned 0x1 [0101.757] GetFileType (hFile=0x18c) returned 0x1 [0101.757] WriteFile (in: hFile=0x18c, lpBuffer=0x27a83b8*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27a83b8*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0101.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0101.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BgIYbuFzflzgD1Q5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BgIYbuFzflzgD1Q5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0101.759] SetErrorMode (uMode=0x1) returned 0x0 [0101.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd55f2f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0101.759] SetErrorMode (uMode=0x0) returned 0x1 [0101.759] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BgIYbuFzflzgD1Q5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\bgiybufzflzgd1q5_encrypted_by.whiterose")) returned 1 [0101.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0101.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0101.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0101.862] SetErrorMode (uMode=0x1) returned 0x0 [0101.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.863] GetFileType (hFile=0x18c) returned 0x1 [0101.863] SetErrorMode (uMode=0x0) returned 0x1 [0101.863] GetFileType (hFile=0x18c) returned 0x1 [0101.863] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec4 [0101.863] ReadFile (in: hFile=0x18c, lpBuffer=0x27b0f48, nNumberOfBytesToRead=0x6ec4, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b0f48*, lpNumberOfBytesRead=0x27e648*=0x6ec4, lpOverlapped=0x0) returned 1 [0101.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0101.865] SetErrorMode (uMode=0x1) returned 0x0 [0101.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec4)) returned 1 [0101.865] SetErrorMode (uMode=0x0) returned 0x1 [0101.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0101.940] SetErrorMode (uMode=0x1) returned 0x0 [0101.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0101.941] GetFileType (hFile=0x18c) returned 0x1 [0101.941] SetErrorMode (uMode=0x0) returned 0x1 [0101.941] GetFileType (hFile=0x18c) returned 0x1 [0101.941] WriteFile (in: hFile=0x18c, lpBuffer=0x28358a8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28358a8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0101.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0101.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RWhUQZvYcDYXuKDb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RWhUQZvYcDYXuKDb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0101.943] SetErrorMode (uMode=0x1) returned 0x0 [0101.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd728370, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0101.943] SetErrorMode (uMode=0x0) returned 0x1 [0101.943] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RWhUQZvYcDYXuKDb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\rwhuqzvycdyxukdb_encrypted_by.whiterose")) returned 1 [0102.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0102.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0102.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0102.049] SetErrorMode (uMode=0x1) returned 0x0 [0102.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.050] GetFileType (hFile=0x18c) returned 0x1 [0102.051] SetErrorMode (uMode=0x0) returned 0x1 [0102.051] GetFileType (hFile=0x18c) returned 0x1 [0102.051] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0102.051] ReadFile (in: hFile=0x18c, lpBuffer=0x283e448, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x283e448*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0102.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0102.053] SetErrorMode (uMode=0x1) returned 0x0 [0102.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0102.053] SetErrorMode (uMode=0x0) returned 0x1 [0102.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0102.122] SetErrorMode (uMode=0x1) returned 0x0 [0102.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.123] GetFileType (hFile=0x18c) returned 0x1 [0102.123] SetErrorMode (uMode=0x0) returned 0x1 [0102.123] GetFileType (hFile=0x18c) returned 0x1 [0102.123] WriteFile (in: hFile=0x18c, lpBuffer=0x28c2da8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28c2da8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0102.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0102.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yO1PgpiNkAJX43xZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yO1PgpiNkAJX43xZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0102.125] SetErrorMode (uMode=0x1) returned 0x0 [0102.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd8cb290, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0102.125] SetErrorMode (uMode=0x0) returned 0x1 [0102.125] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yO1PgpiNkAJX43xZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\yo1pgpinkajx43xz_encrypted_by.whiterose")) returned 1 [0102.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0102.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0102.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0102.237] SetErrorMode (uMode=0x1) returned 0x0 [0102.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.237] GetFileType (hFile=0x18c) returned 0x1 [0102.237] SetErrorMode (uMode=0x0) returned 0x1 [0102.237] GetFileType (hFile=0x18c) returned 0x1 [0102.237] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0102.237] ReadFile (in: hFile=0x18c, lpBuffer=0x28cb950, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28cb950*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0102.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0102.239] SetErrorMode (uMode=0x1) returned 0x0 [0102.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0102.240] SetErrorMode (uMode=0x0) returned 0x1 [0102.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0102.307] SetErrorMode (uMode=0x1) returned 0x0 [0102.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.308] GetFileType (hFile=0x18c) returned 0x1 [0102.308] SetErrorMode (uMode=0x0) returned 0x1 [0102.308] GetFileType (hFile=0x18c) returned 0x1 [0102.308] WriteFile (in: hFile=0x18c, lpBuffer=0x2755dd8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2755dd8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0102.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0102.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eFHJGP7BtxvWBjqL_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eFHJGP7BtxvWBjqL_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0102.310] SetErrorMode (uMode=0x1) returned 0x0 [0102.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda94310, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0102.310] SetErrorMode (uMode=0x0) returned 0x1 [0102.310] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eFHJGP7BtxvWBjqL_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\efhjgp7btxvwbjql_encrypted_by.whiterose")) returned 1 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.408] SetErrorMode (uMode=0x1) returned 0x0 [0102.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.409] GetFileType (hFile=0x18c) returned 0x1 [0102.409] SetErrorMode (uMode=0x0) returned 0x1 [0102.409] GetFileType (hFile=0x18c) returned 0x1 [0102.409] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0102.409] ReadFile (in: hFile=0x18c, lpBuffer=0x275e980, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x275e980*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0102.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.411] SetErrorMode (uMode=0x1) returned 0x0 [0102.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0102.411] SetErrorMode (uMode=0x0) returned 0x1 [0102.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.492] SetErrorMode (uMode=0x1) returned 0x0 [0102.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.494] GetFileType (hFile=0x18c) returned 0x1 [0102.494] SetErrorMode (uMode=0x0) returned 0x1 [0102.494] GetFileType (hFile=0x18c) returned 0x1 [0102.494] WriteFile (in: hFile=0x18c, lpBuffer=0x27d5678*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d5678*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0102.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\70Wrl0*TKYddQNPa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\70Wrl0*TKYddQNPa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0102.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0102.501] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 1 [0102.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0102.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0102.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0102.504] SetErrorMode (uMode=0x1) returned 0x0 [0102.505] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.505] GetFileType (hFile=0x18c) returned 0x1 [0102.505] SetErrorMode (uMode=0x0) returned 0x1 [0102.505] GetFileType (hFile=0x18c) returned 0x1 [0102.505] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ed0 [0102.505] ReadFile (in: hFile=0x18c, lpBuffer=0x27de698, nNumberOfBytesToRead=0x6ed0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27de698*, lpNumberOfBytesRead=0x27e648*=0x6ed0, lpOverlapped=0x0) returned 1 [0102.507] CloseHandle (hObject=0x18c) returned 1 [0102.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0102.508] SetErrorMode (uMode=0x1) returned 0x0 [0102.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0102.508] SetErrorMode (uMode=0x0) returned 0x1 [0102.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0102.630] SetErrorMode (uMode=0x1) returned 0x0 [0102.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.632] GetFileType (hFile=0x18c) returned 0x1 [0102.632] SetErrorMode (uMode=0x0) returned 0x1 [0102.632] GetFileType (hFile=0x18c) returned 0x1 [0102.632] WriteFile (in: hFile=0x18c, lpBuffer=0x2863088*, nNumberOfBytesToWrite=0x6fe0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2863088*, lpNumberOfBytesWritten=0x27e6c8*=0x6fe0, lpOverlapped=0x0) returned 1 [0102.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0102.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\GqWikpPyfgKPMbVg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\GqWikpPyfgKPMbVg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0102.634] SetErrorMode (uMode=0x1) returned 0x0 [0102.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xddb3ff0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe0)) returned 1 [0102.634] SetErrorMode (uMode=0x0) returned 0x1 [0102.635] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\GqWikpPyfgKPMbVg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\gqwikppyfgkpmbvg_encrypted_by.whiterose")) returned 1 [0102.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0102.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0102.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0102.736] SetErrorMode (uMode=0x1) returned 0x0 [0102.736] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.737] GetFileType (hFile=0x18c) returned 0x1 [0102.737] SetErrorMode (uMode=0x0) returned 0x1 [0102.737] GetFileType (hFile=0x18c) returned 0x1 [0102.737] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0102.737] ReadFile (in: hFile=0x18c, lpBuffer=0x286bc40, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x286bc40*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0102.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0102.740] SetErrorMode (uMode=0x1) returned 0x0 [0102.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0102.740] SetErrorMode (uMode=0x0) returned 0x1 [0102.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0102.817] SetErrorMode (uMode=0x1) returned 0x0 [0102.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.818] GetFileType (hFile=0x18c) returned 0x1 [0102.818] SetErrorMode (uMode=0x0) returned 0x1 [0102.818] GetFileType (hFile=0x18c) returned 0x1 [0102.818] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0598*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28f0598*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0102.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0102.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\W6ueZUFWcy9vDVIo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\W6ueZUFWcy9vDVIo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0102.820] SetErrorMode (uMode=0x1) returned 0x0 [0102.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdf7d070, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0102.820] SetErrorMode (uMode=0x0) returned 0x1 [0102.820] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\W6ueZUFWcy9vDVIo_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\w6uezufwcy9vdvio_encrypted_by.whiterose")) returned 1 [0102.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0102.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0102.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0102.925] SetErrorMode (uMode=0x1) returned 0x0 [0102.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0102.925] GetFileType (hFile=0x18c) returned 0x1 [0102.925] SetErrorMode (uMode=0x0) returned 0x1 [0102.925] GetFileType (hFile=0x18c) returned 0x1 [0102.925] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0102.925] ReadFile (in: hFile=0x18c, lpBuffer=0x28f9140, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f9140*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0102.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0102.934] SetErrorMode (uMode=0x1) returned 0x0 [0102.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0102.934] SetErrorMode (uMode=0x0) returned 0x1 [0103.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0103.010] SetErrorMode (uMode=0x1) returned 0x0 [0103.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.011] GetFileType (hFile=0x18c) returned 0x1 [0103.011] SetErrorMode (uMode=0x0) returned 0x1 [0103.011] GetFileType (hFile=0x18c) returned 0x1 [0103.011] WriteFile (in: hFile=0x18c, lpBuffer=0x277dad8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x277dad8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0103.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DXc*pjsLlvUvbcBb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DXc*pjsLlvUvbcBb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0103.026] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 1 [0103.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.029] SetErrorMode (uMode=0x1) returned 0x0 [0103.029] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.030] GetFileType (hFile=0x18c) returned 0x1 [0103.030] SetErrorMode (uMode=0x0) returned 0x1 [0103.030] GetFileType (hFile=0x18c) returned 0x1 [0103.030] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec6 [0103.030] ReadFile (in: hFile=0x18c, lpBuffer=0x2786af8, nNumberOfBytesToRead=0x6ec6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2786af8*, lpNumberOfBytesRead=0x27e648*=0x6ec6, lpOverlapped=0x0) returned 1 [0103.032] CloseHandle (hObject=0x18c) returned 1 [0103.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.032] SetErrorMode (uMode=0x1) returned 0x0 [0103.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6)) returned 1 [0103.033] SetErrorMode (uMode=0x0) returned 0x1 [0103.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.129] SetErrorMode (uMode=0x1) returned 0x0 [0103.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.130] GetFileType (hFile=0x18c) returned 0x1 [0103.130] SetErrorMode (uMode=0x0) returned 0x1 [0103.130] GetFileType (hFile=0x18c) returned 0x1 [0103.130] WriteFile (in: hFile=0x18c, lpBuffer=0x280b4a0*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x280b4a0*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JxVdQszVYa*TO8pT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JxVdQszVYa*TO8pT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0103.135] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 1 [0103.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0103.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0103.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0103.137] SetErrorMode (uMode=0x1) returned 0x0 [0103.138] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.139] GetFileType (hFile=0x18c) returned 0x1 [0103.139] SetErrorMode (uMode=0x0) returned 0x1 [0103.139] GetFileType (hFile=0x18c) returned 0x1 [0103.139] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec0 [0103.139] ReadFile (in: hFile=0x18c, lpBuffer=0x28144c0, nNumberOfBytesToRead=0x6ec0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28144c0*, lpNumberOfBytesRead=0x27e648*=0x6ec0, lpOverlapped=0x0) returned 1 [0103.141] CloseHandle (hObject=0x18c) returned 1 [0103.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0103.141] SetErrorMode (uMode=0x1) returned 0x0 [0103.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0)) returned 1 [0103.141] SetErrorMode (uMode=0x0) returned 0x1 [0103.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0103.255] SetErrorMode (uMode=0x1) returned 0x0 [0103.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.257] GetFileType (hFile=0x18c) returned 0x1 [0103.257] SetErrorMode (uMode=0x0) returned 0x1 [0103.257] GetFileType (hFile=0x18c) returned 0x1 [0103.257] WriteFile (in: hFile=0x18c, lpBuffer=0x2898df8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2898df8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0103.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Gw8u5IpBsms1KPHY_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Gw8u5IpBsms1KPHY_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.259] SetErrorMode (uMode=0x1) returned 0x0 [0103.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe3a76f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0103.259] SetErrorMode (uMode=0x0) returned 0x1 [0103.259] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Gw8u5IpBsms1KPHY_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\gw8u5ipbsms1kphy_encrypted_by.whiterose")) returned 1 [0103.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0103.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0103.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0103.360] SetErrorMode (uMode=0x1) returned 0x0 [0103.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.360] GetFileType (hFile=0x18c) returned 0x1 [0103.360] SetErrorMode (uMode=0x0) returned 0x1 [0103.360] GetFileType (hFile=0x18c) returned 0x1 [0103.360] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0103.360] ReadFile (in: hFile=0x18c, lpBuffer=0x28a1a00, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a1a00*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0103.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0103.363] SetErrorMode (uMode=0x1) returned 0x0 [0103.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0103.363] SetErrorMode (uMode=0x0) returned 0x1 [0103.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0103.432] SetErrorMode (uMode=0x1) returned 0x0 [0103.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.433] GetFileType (hFile=0x18c) returned 0x1 [0103.433] SetErrorMode (uMode=0x0) returned 0x1 [0103.433] GetFileType (hFile=0x18c) returned 0x1 [0103.433] WriteFile (in: hFile=0x18c, lpBuffer=0x2926368*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2926368*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0103.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VaFqIcf1pERGCzu7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VaFqIcf1pERGCzu7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.435] SetErrorMode (uMode=0x1) returned 0x0 [0103.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe54a610, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0103.435] SetErrorMode (uMode=0x0) returned 0x1 [0103.435] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VaFqIcf1pERGCzu7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\vafqicf1pergczu7_encrypted_by.whiterose")) returned 1 [0103.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0103.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0103.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0103.531] SetErrorMode (uMode=0x1) returned 0x0 [0103.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.532] GetFileType (hFile=0x18c) returned 0x1 [0103.532] SetErrorMode (uMode=0x0) returned 0x1 [0103.532] GetFileType (hFile=0x18c) returned 0x1 [0103.533] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0103.533] ReadFile (in: hFile=0x18c, lpBuffer=0x292ef50, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x292ef50*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0103.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0103.535] SetErrorMode (uMode=0x1) returned 0x0 [0103.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0103.535] SetErrorMode (uMode=0x0) returned 0x1 [0103.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0103.617] SetErrorMode (uMode=0x1) returned 0x0 [0103.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.619] GetFileType (hFile=0x18c) returned 0x1 [0103.619] SetErrorMode (uMode=0x0) returned 0x1 [0103.619] GetFileType (hFile=0x18c) returned 0x1 [0103.619] WriteFile (in: hFile=0x18c, lpBuffer=0x27b38f8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27b38f8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0103.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MET0mwjhG6zYR4Tw_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MET0mwjhG6zYR4Tw_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.620] SetErrorMode (uMode=0x1) returned 0x0 [0103.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe713690, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0103.620] SetErrorMode (uMode=0x0) returned 0x1 [0103.620] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MET0mwjhG6zYR4Tw_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\met0mwjhg6zyr4tw_encrypted_by.whiterose")) returned 1 [0103.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0103.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0103.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0103.719] SetErrorMode (uMode=0x1) returned 0x0 [0103.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.719] GetFileType (hFile=0x18c) returned 0x1 [0103.719] SetErrorMode (uMode=0x0) returned 0x1 [0103.719] GetFileType (hFile=0x18c) returned 0x1 [0103.719] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0103.719] ReadFile (in: hFile=0x18c, lpBuffer=0x27bc4a0, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27bc4a0*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0103.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0103.722] SetErrorMode (uMode=0x1) returned 0x0 [0103.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0103.722] SetErrorMode (uMode=0x0) returned 0x1 [0103.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0103.796] SetErrorMode (uMode=0x1) returned 0x0 [0103.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.797] GetFileType (hFile=0x18c) returned 0x1 [0103.797] SetErrorMode (uMode=0x0) returned 0x1 [0103.797] GetFileType (hFile=0x18c) returned 0x1 [0103.798] WriteFile (in: hFile=0x18c, lpBuffer=0x2840df8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2840df8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0103.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\twB5NW87P3kXpkNi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\twB5NW87P3kXpkNi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.799] SetErrorMode (uMode=0x1) returned 0x0 [0103.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe8dc710, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0103.799] SetErrorMode (uMode=0x0) returned 0x1 [0103.799] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\twB5NW87P3kXpkNi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\twb5nw87p3kxpkni_encrypted_by.whiterose")) returned 1 [0103.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0103.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0103.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0103.906] SetErrorMode (uMode=0x1) returned 0x0 [0103.906] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.906] GetFileType (hFile=0x18c) returned 0x1 [0103.906] SetErrorMode (uMode=0x0) returned 0x1 [0103.906] GetFileType (hFile=0x18c) returned 0x1 [0103.906] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec0 [0103.906] ReadFile (in: hFile=0x18c, lpBuffer=0x28499a0, nNumberOfBytesToRead=0x6ec0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28499a0*, lpNumberOfBytesRead=0x27e648*=0x6ec0, lpOverlapped=0x0) returned 1 [0103.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0103.908] SetErrorMode (uMode=0x1) returned 0x0 [0103.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0)) returned 1 [0103.909] SetErrorMode (uMode=0x0) returned 0x1 [0103.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0103.991] SetErrorMode (uMode=0x1) returned 0x0 [0103.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0103.991] GetFileType (hFile=0x18c) returned 0x1 [0103.991] SetErrorMode (uMode=0x0) returned 0x1 [0103.991] GetFileType (hFile=0x18c) returned 0x1 [0103.991] WriteFile (in: hFile=0x18c, lpBuffer=0x28ce358*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28ce358*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0103.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0103.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\anjYdmTVX18XYCG7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\anjYdmTVX18XYCG7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0103.993] SetErrorMode (uMode=0x1) returned 0x0 [0103.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeaa5790, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0103.993] SetErrorMode (uMode=0x0) returned 0x1 [0103.993] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\anjYdmTVX18XYCG7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\anjydmtvx18xycg7_encrypted_by.whiterose")) returned 1 [0104.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0104.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0104.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0104.093] SetErrorMode (uMode=0x1) returned 0x0 [0104.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.094] GetFileType (hFile=0x18c) returned 0x1 [0104.094] SetErrorMode (uMode=0x0) returned 0x1 [0104.094] GetFileType (hFile=0x18c) returned 0x1 [0104.094] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ecc [0104.094] ReadFile (in: hFile=0x18c, lpBuffer=0x28d6f00, nNumberOfBytesToRead=0x6ecc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d6f00*, lpNumberOfBytesRead=0x27e648*=0x6ecc, lpOverlapped=0x0) returned 1 [0104.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0104.097] SetErrorMode (uMode=0x1) returned 0x0 [0104.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ecc)) returned 1 [0104.097] SetErrorMode (uMode=0x0) returned 0x1 [0104.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0104.165] SetErrorMode (uMode=0x1) returned 0x0 [0104.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.167] GetFileType (hFile=0x18c) returned 0x1 [0104.167] SetErrorMode (uMode=0x0) returned 0x1 [0104.167] GetFileType (hFile=0x18c) returned 0x1 [0104.167] WriteFile (in: hFile=0x18c, lpBuffer=0x275d208*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x275d208*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0104.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0104.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Sf3TEMGJ7XSXvUzS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Sf3TEMGJ7XSXvUzS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0104.168] SetErrorMode (uMode=0x1) returned 0x0 [0104.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xec486b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0104.168] SetErrorMode (uMode=0x0) returned 0x1 [0104.169] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Sf3TEMGJ7XSXvUzS_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\sf3temgj7xsxvuzs_encrypted_by.whiterose")) returned 1 [0104.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0104.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0104.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0104.280] SetErrorMode (uMode=0x1) returned 0x0 [0104.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.283] GetFileType (hFile=0x18c) returned 0x1 [0104.283] SetErrorMode (uMode=0x0) returned 0x1 [0104.283] GetFileType (hFile=0x18c) returned 0x1 [0104.283] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0104.283] ReadFile (in: hFile=0x18c, lpBuffer=0x2765db0, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2765db0*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0104.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0104.285] SetErrorMode (uMode=0x1) returned 0x0 [0104.286] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0104.286] SetErrorMode (uMode=0x0) returned 0x1 [0104.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0104.350] SetErrorMode (uMode=0x1) returned 0x0 [0104.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.351] GetFileType (hFile=0x18c) returned 0x1 [0104.351] SetErrorMode (uMode=0x0) returned 0x1 [0104.351] GetFileType (hFile=0x18c) returned 0x1 [0104.351] WriteFile (in: hFile=0x18c, lpBuffer=0x27e35b8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27e35b8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0104.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0104.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\6pq2w6V4lgnILIah_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\6pq2w6V4lgnILIah_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0104.353] SetErrorMode (uMode=0x1) returned 0x0 [0104.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee11730, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0104.353] SetErrorMode (uMode=0x0) returned 0x1 [0104.353] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\6pq2w6V4lgnILIah_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\6pq2w6v4lgniliah_encrypted_by.whiterose")) returned 1 [0104.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0104.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0104.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0104.452] SetErrorMode (uMode=0x1) returned 0x0 [0104.452] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.452] GetFileType (hFile=0x18c) returned 0x1 [0104.453] SetErrorMode (uMode=0x0) returned 0x1 [0104.453] GetFileType (hFile=0x18c) returned 0x1 [0104.453] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0104.453] ReadFile (in: hFile=0x18c, lpBuffer=0x27ec160, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27ec160*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0104.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0104.455] SetErrorMode (uMode=0x1) returned 0x0 [0104.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0104.455] SetErrorMode (uMode=0x0) returned 0x1 [0104.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0104.519] SetErrorMode (uMode=0x1) returned 0x0 [0104.519] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.520] GetFileType (hFile=0x18c) returned 0x1 [0104.520] SetErrorMode (uMode=0x0) returned 0x1 [0104.520] GetFileType (hFile=0x18c) returned 0x1 [0104.521] WriteFile (in: hFile=0x18c, lpBuffer=0x2870b18*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2870b18*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0104.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0104.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\pAYvJvxPvkmdiGS6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\pAYvJvxPvkmdiGS6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0104.522] SetErrorMode (uMode=0x1) returned 0x0 [0104.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xefb4650, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0104.522] SetErrorMode (uMode=0x0) returned 0x1 [0104.522] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\pAYvJvxPvkmdiGS6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\payvjvxpvkmdigs6_encrypted_by.whiterose")) returned 1 [0104.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.623] SetErrorMode (uMode=0x1) returned 0x0 [0104.624] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.624] GetFileType (hFile=0x18c) returned 0x1 [0104.624] SetErrorMode (uMode=0x0) returned 0x1 [0104.624] GetFileType (hFile=0x18c) returned 0x1 [0104.624] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0104.624] ReadFile (in: hFile=0x18c, lpBuffer=0x28796c0, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28796c0*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0104.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.627] SetErrorMode (uMode=0x1) returned 0x0 [0104.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0104.627] SetErrorMode (uMode=0x0) returned 0x1 [0104.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.708] SetErrorMode (uMode=0x1) returned 0x0 [0104.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.709] GetFileType (hFile=0x18c) returned 0x1 [0104.709] SetErrorMode (uMode=0x0) returned 0x1 [0104.709] GetFileType (hFile=0x18c) returned 0x1 [0104.709] WriteFile (in: hFile=0x18c, lpBuffer=0x28fe018*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28fe018*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0104.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\g5bdnPB9NL6vy*gu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\g5bdnPB9NL6vy*gu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0104.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0104.713] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 1 [0104.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0104.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0104.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0104.716] SetErrorMode (uMode=0x1) returned 0x0 [0104.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.716] GetFileType (hFile=0x18c) returned 0x1 [0104.716] SetErrorMode (uMode=0x0) returned 0x1 [0104.716] GetFileType (hFile=0x18c) returned 0x1 [0104.716] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0104.716] ReadFile (in: hFile=0x18c, lpBuffer=0x2907038, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2907038*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0104.718] CloseHandle (hObject=0x18c) returned 1 [0104.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0104.719] SetErrorMode (uMode=0x1) returned 0x0 [0104.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0104.719] SetErrorMode (uMode=0x0) returned 0x1 [0104.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0104.843] SetErrorMode (uMode=0x1) returned 0x0 [0104.843] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.844] GetFileType (hFile=0x18c) returned 0x1 [0104.844] SetErrorMode (uMode=0x0) returned 0x1 [0104.844] GetFileType (hFile=0x18c) returned 0x1 [0104.844] WriteFile (in: hFile=0x18c, lpBuffer=0x278ba18*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x278ba18*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0104.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0104.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\2XISBZxfqwxoaKRc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\2XISBZxfqwxoaKRc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0104.846] SetErrorMode (uMode=0x1) returned 0x0 [0104.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf2d4330, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0104.846] SetErrorMode (uMode=0x0) returned 0x1 [0104.846] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\2XISBZxfqwxoaKRc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\2xisbzxfqwxoakrc_encrypted_by.whiterose")) returned 1 [0104.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0104.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0104.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0104.952] SetErrorMode (uMode=0x1) returned 0x0 [0104.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0104.952] GetFileType (hFile=0x18c) returned 0x1 [0104.952] SetErrorMode (uMode=0x0) returned 0x1 [0104.952] GetFileType (hFile=0x18c) returned 0x1 [0104.952] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0104.952] ReadFile (in: hFile=0x18c, lpBuffer=0x27945c0, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27945c0*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0104.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0104.955] SetErrorMode (uMode=0x1) returned 0x0 [0104.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0104.955] SetErrorMode (uMode=0x0) returned 0x1 [0105.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0105.024] SetErrorMode (uMode=0x1) returned 0x0 [0105.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.025] GetFileType (hFile=0x18c) returned 0x1 [0105.025] SetErrorMode (uMode=0x0) returned 0x1 [0105.025] GetFileType (hFile=0x18c) returned 0x1 [0105.025] WriteFile (in: hFile=0x18c, lpBuffer=0x2818f18*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2818f18*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0105.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0105.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\82L22A8aek1Nlh*I_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\82L22A8aek1Nlh*I_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0105.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0105.033] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 1 [0105.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0105.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0105.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0105.036] SetErrorMode (uMode=0x1) returned 0x0 [0105.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.036] GetFileType (hFile=0x18c) returned 0x1 [0105.036] SetErrorMode (uMode=0x0) returned 0x1 [0105.036] GetFileType (hFile=0x18c) returned 0x1 [0105.036] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0105.037] ReadFile (in: hFile=0x18c, lpBuffer=0x2821f38, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2821f38*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0105.038] CloseHandle (hObject=0x18c) returned 1 [0105.039] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0105.039] SetErrorMode (uMode=0x1) returned 0x0 [0105.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0105.040] SetErrorMode (uMode=0x0) returned 0x1 [0105.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0105.137] SetErrorMode (uMode=0x1) returned 0x0 [0105.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.138] GetFileType (hFile=0x18c) returned 0x1 [0105.138] SetErrorMode (uMode=0x0) returned 0x1 [0105.138] GetFileType (hFile=0x18c) returned 0x1 [0105.138] WriteFile (in: hFile=0x18c, lpBuffer=0x28a68d8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28a68d8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0105.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0105.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RThFeK5iT7sHYSKq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RThFeK5iT7sHYSKq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0105.140] SetErrorMode (uMode=0x1) returned 0x0 [0105.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf5a7d50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0105.140] SetErrorMode (uMode=0x0) returned 0x1 [0105.140] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\RThFeK5iT7sHYSKq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\rthfek5it7shyskq_encrypted_by.whiterose")) returned 1 [0105.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.247] SetErrorMode (uMode=0x1) returned 0x0 [0105.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.248] GetFileType (hFile=0x18c) returned 0x1 [0105.248] SetErrorMode (uMode=0x0) returned 0x1 [0105.248] GetFileType (hFile=0x18c) returned 0x1 [0105.248] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0105.248] ReadFile (in: hFile=0x18c, lpBuffer=0x28af480, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28af480*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0105.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.250] SetErrorMode (uMode=0x1) returned 0x0 [0105.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0105.251] SetErrorMode (uMode=0x0) returned 0x1 [0105.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.323] SetErrorMode (uMode=0x1) returned 0x0 [0105.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.325] GetFileType (hFile=0x18c) returned 0x1 [0105.326] SetErrorMode (uMode=0x0) returned 0x1 [0105.326] GetFileType (hFile=0x18c) returned 0x1 [0105.326] WriteFile (in: hFile=0x18c, lpBuffer=0x2933dc8*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2933dc8*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0105.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\g*mp89baZROFwO4b_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\g*mp89baZROFwO4b_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0105.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0105.334] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 1 [0105.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0105.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0105.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0105.338] SetErrorMode (uMode=0x1) returned 0x0 [0105.338] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.338] GetFileType (hFile=0x18c) returned 0x1 [0105.339] SetErrorMode (uMode=0x0) returned 0x1 [0105.339] GetFileType (hFile=0x18c) returned 0x1 [0105.339] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec8 [0105.339] ReadFile (in: hFile=0x18c, lpBuffer=0x293cde8, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x293cde8*, lpNumberOfBytesRead=0x27e648*=0x6ec8, lpOverlapped=0x0) returned 1 [0105.341] CloseHandle (hObject=0x18c) returned 1 [0105.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0105.342] SetErrorMode (uMode=0x1) returned 0x0 [0105.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8)) returned 1 [0105.342] SetErrorMode (uMode=0x0) returned 0x1 [0105.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0105.441] SetErrorMode (uMode=0x1) returned 0x0 [0105.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.442] GetFileType (hFile=0x18c) returned 0x1 [0105.442] SetErrorMode (uMode=0x0) returned 0x1 [0105.442] GetFileType (hFile=0x18c) returned 0x1 [0105.442] WriteFile (in: hFile=0x18c, lpBuffer=0x27bc908*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27bc908*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0105.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0105.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\24S5ki9iDCgz0nEU_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\24S5ki9iDCgz0nEU_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0105.444] SetErrorMode (uMode=0x1) returned 0x0 [0105.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf87b770, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0105.444] SetErrorMode (uMode=0x0) returned 0x1 [0105.444] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\24S5ki9iDCgz0nEU_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\24s5ki9idcgz0neu_encrypted_by.whiterose")) returned 1 [0105.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0105.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0105.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0105.544] SetErrorMode (uMode=0x1) returned 0x0 [0105.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.544] GetFileType (hFile=0x18c) returned 0x1 [0105.544] SetErrorMode (uMode=0x0) returned 0x1 [0105.544] GetFileType (hFile=0x18c) returned 0x1 [0105.544] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ec6 [0105.544] ReadFile (in: hFile=0x18c, lpBuffer=0x27c5540, nNumberOfBytesToRead=0x6ec6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27c5540*, lpNumberOfBytesRead=0x27e648*=0x6ec6, lpOverlapped=0x0) returned 1 [0105.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0105.547] SetErrorMode (uMode=0x1) returned 0x0 [0105.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6)) returned 1 [0105.547] SetErrorMode (uMode=0x0) returned 0x1 [0105.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0105.623] SetErrorMode (uMode=0x1) returned 0x0 [0105.624] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.625] GetFileType (hFile=0x18c) returned 0x1 [0105.625] SetErrorMode (uMode=0x0) returned 0x1 [0105.625] GetFileType (hFile=0x18c) returned 0x1 [0105.625] WriteFile (in: hFile=0x18c, lpBuffer=0x2849f10*, nNumberOfBytesToWrite=0x6fd0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2849f10*, lpNumberOfBytesWritten=0x27e6c8*=0x6fd0, lpOverlapped=0x0) returned 1 [0105.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0105.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\U1fAKOOFB1SL1Ne4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\U1fAKOOFB1SL1Ne4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0105.626] SetErrorMode (uMode=0x1) returned 0x0 [0105.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfa447f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd0)) returned 1 [0105.626] SetErrorMode (uMode=0x0) returned 0x1 [0105.626] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\U1fAKOOFB1SL1Ne4_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\u1fakoofb1sl1ne4_encrypted_by.whiterose")) returned 1 [0105.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0105.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0105.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0105.731] SetErrorMode (uMode=0x1) returned 0x0 [0105.731] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.731] GetFileType (hFile=0x18c) returned 0x1 [0105.731] SetErrorMode (uMode=0x0) returned 0x1 [0105.731] GetFileType (hFile=0x18c) returned 0x1 [0105.731] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6b5e [0105.732] ReadFile (in: hFile=0x18c, lpBuffer=0x2852b00, nNumberOfBytesToRead=0x6b5e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2852b00*, lpNumberOfBytesRead=0x27e648*=0x6b5e, lpOverlapped=0x0) returned 1 [0105.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0105.734] SetErrorMode (uMode=0x1) returned 0x0 [0105.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e)) returned 1 [0105.734] SetErrorMode (uMode=0x0) returned 0x1 [0105.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0105.816] SetErrorMode (uMode=0x1) returned 0x0 [0105.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.819] GetFileType (hFile=0x18c) returned 0x1 [0105.819] SetErrorMode (uMode=0x0) returned 0x1 [0105.819] GetFileType (hFile=0x18c) returned 0x1 [0105.819] WriteFile (in: hFile=0x18c, lpBuffer=0x28d5c58*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d5c58*, lpNumberOfBytesWritten=0x27e6c8*=0x6c60, lpOverlapped=0x0) returned 1 [0105.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0105.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BSYvadBuKYDLy79Q_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BSYvadBuKYDLy79Q_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0105.821] SetErrorMode (uMode=0x1) returned 0x0 [0105.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfc0d870, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6c60)) returned 1 [0105.822] SetErrorMode (uMode=0x0) returned 0x1 [0105.822] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BSYvadBuKYDLy79Q_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\bsyvadbukydly79q_encrypted_by.whiterose")) returned 1 [0105.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0105.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0105.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0105.919] SetErrorMode (uMode=0x1) returned 0x0 [0105.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0105.920] GetFileType (hFile=0x18c) returned 0x1 [0105.920] SetErrorMode (uMode=0x0) returned 0x1 [0105.920] GetFileType (hFile=0x18c) returned 0x1 [0105.920] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6b5e [0105.920] ReadFile (in: hFile=0x18c, lpBuffer=0x28de488, nNumberOfBytesToRead=0x6b5e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28de488*, lpNumberOfBytesRead=0x27e648*=0x6b5e, lpOverlapped=0x0) returned 1 [0105.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0105.959] SetErrorMode (uMode=0x1) returned 0x0 [0105.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e)) returned 1 [0105.959] SetErrorMode (uMode=0x0) returned 0x1 [0106.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0106.057] SetErrorMode (uMode=0x1) returned 0x0 [0106.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.057] GetFileType (hFile=0x18c) returned 0x1 [0106.057] SetErrorMode (uMode=0x0) returned 0x1 [0106.057] GetFileType (hFile=0x18c) returned 0x1 [0106.057] WriteFile (in: hFile=0x18c, lpBuffer=0x2723a80*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2723a80*, lpNumberOfBytesWritten=0x27e6c8*=0x6c60, lpOverlapped=0x0) returned 1 [0106.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0106.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\O3nD5wPO1h0wNTJf_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\O3nD5wPO1h0wNTJf_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0106.075] SetErrorMode (uMode=0x1) returned 0x0 [0106.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfe94fd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6c60)) returned 1 [0106.075] SetErrorMode (uMode=0x0) returned 0x1 [0106.075] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\O3nD5wPO1h0wNTJf_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\o3nd5wpo1h0wntjf_encrypted_by.whiterose")) returned 1 [0106.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0106.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0106.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0106.183] SetErrorMode (uMode=0x1) returned 0x0 [0106.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.184] GetFileType (hFile=0x18c) returned 0x1 [0106.184] SetErrorMode (uMode=0x0) returned 0x1 [0106.184] GetFileType (hFile=0x18c) returned 0x1 [0106.184] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d74 [0106.184] ReadFile (in: hFile=0x18c, lpBuffer=0x272c2a0, nNumberOfBytesToRead=0x6d74, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x272c2a0*, lpNumberOfBytesRead=0x27e648*=0x6d74, lpOverlapped=0x0) returned 1 [0106.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0106.187] SetErrorMode (uMode=0x1) returned 0x0 [0106.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d74)) returned 1 [0106.187] SetErrorMode (uMode=0x0) returned 0x1 [0106.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0106.252] SetErrorMode (uMode=0x1) returned 0x0 [0106.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.254] GetFileType (hFile=0x18c) returned 0x1 [0106.254] SetErrorMode (uMode=0x0) returned 0x1 [0106.254] GetFileType (hFile=0x18c) returned 0x1 [0106.254] WriteFile (in: hFile=0x18c, lpBuffer=0x27c52e8*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27c52e8*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0106.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0106.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fNBbH7zKM1npYLdK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fNBbH7zKM1npYLdK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0106.256] SetErrorMode (uMode=0x1) returned 0x0 [0106.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x10037ef0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0106.256] SetErrorMode (uMode=0x0) returned 0x1 [0106.256] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fNBbH7zKM1npYLdK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\fnbbh7zkm1npyldk_encrypted_by.whiterose")) returned 1 [0106.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0106.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0106.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0106.355] SetErrorMode (uMode=0x1) returned 0x0 [0106.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.355] GetFileType (hFile=0x18c) returned 0x1 [0106.355] SetErrorMode (uMode=0x0) returned 0x1 [0106.355] GetFileType (hFile=0x18c) returned 0x1 [0106.355] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d74 [0106.355] ReadFile (in: hFile=0x18c, lpBuffer=0x27cdd38, nNumberOfBytesToRead=0x6d74, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27cdd38*, lpNumberOfBytesRead=0x27e648*=0x6d74, lpOverlapped=0x0) returned 1 [0106.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0106.358] SetErrorMode (uMode=0x1) returned 0x0 [0106.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d74)) returned 1 [0106.358] SetErrorMode (uMode=0x0) returned 0x1 [0106.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0106.422] SetErrorMode (uMode=0x1) returned 0x0 [0106.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.423] GetFileType (hFile=0x18c) returned 0x1 [0106.423] SetErrorMode (uMode=0x0) returned 0x1 [0106.423] GetFileType (hFile=0x18c) returned 0x1 [0106.423] WriteFile (in: hFile=0x18c, lpBuffer=0x2867040*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2867040*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0106.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0106.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AY0HUxbxW5mVwJVx_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AY0HUxbxW5mVwJVx_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0106.425] SetErrorMode (uMode=0x1) returned 0x0 [0106.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x101dae10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0106.425] SetErrorMode (uMode=0x0) returned 0x1 [0106.425] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AY0HUxbxW5mVwJVx_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ay0huxbxw5mvwjvx_encrypted_by.whiterose")) returned 1 [0106.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0106.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0106.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0106.526] SetErrorMode (uMode=0x1) returned 0x0 [0106.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.527] GetFileType (hFile=0x18c) returned 0x1 [0106.527] SetErrorMode (uMode=0x0) returned 0x1 [0106.527] GetFileType (hFile=0x18c) returned 0x1 [0106.527] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d7a [0106.527] ReadFile (in: hFile=0x18c, lpBuffer=0x286faf8, nNumberOfBytesToRead=0x6d7a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x286faf8*, lpNumberOfBytesRead=0x27e648*=0x6d7a, lpOverlapped=0x0) returned 1 [0106.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0106.529] SetErrorMode (uMode=0x1) returned 0x0 [0106.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d7a)) returned 1 [0106.529] SetErrorMode (uMode=0x0) returned 0x1 [0106.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0106.614] SetErrorMode (uMode=0x1) returned 0x0 [0106.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.615] GetFileType (hFile=0x18c) returned 0x1 [0106.616] SetErrorMode (uMode=0x0) returned 0x1 [0106.616] GetFileType (hFile=0x18c) returned 0x1 [0106.616] WriteFile (in: hFile=0x18c, lpBuffer=0x28f3ca0*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28f3ca0*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0106.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0106.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rrmpzQfPdu6cLciX_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rrmpzQfPdu6cLciX_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0106.617] SetErrorMode (uMode=0x1) returned 0x0 [0106.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x103a3e90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0106.618] SetErrorMode (uMode=0x0) returned 0x1 [0106.618] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rrmpzQfPdu6cLciX_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\rrmpzqfpdu6clcix_encrypted_by.whiterose")) returned 1 [0106.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0106.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0106.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0106.713] SetErrorMode (uMode=0x1) returned 0x0 [0106.713] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.714] GetFileType (hFile=0x18c) returned 0x1 [0106.714] SetErrorMode (uMode=0x0) returned 0x1 [0106.714] GetFileType (hFile=0x18c) returned 0x1 [0106.715] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6f48 [0106.715] ReadFile (in: hFile=0x18c, lpBuffer=0x28fc738, nNumberOfBytesToRead=0x6f48, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28fc738*, lpNumberOfBytesRead=0x27e648*=0x6f48, lpOverlapped=0x0) returned 1 [0106.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0106.717] SetErrorMode (uMode=0x1) returned 0x0 [0106.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f48)) returned 1 [0106.717] SetErrorMode (uMode=0x0) returned 0x1 [0106.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0106.792] SetErrorMode (uMode=0x1) returned 0x0 [0106.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.793] GetFileType (hFile=0x18c) returned 0x1 [0106.793] SetErrorMode (uMode=0x0) returned 0x1 [0106.794] GetFileType (hFile=0x18c) returned 0x1 [0106.794] WriteFile (in: hFile=0x18c, lpBuffer=0x2781548*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2781548*, lpNumberOfBytesWritten=0x27e6c8*=0x7050, lpOverlapped=0x0) returned 1 [0106.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0106.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\0i6jZg3DlrQbjucK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\0i6jZg3DlrQbjucK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0106.795] SetErrorMode (uMode=0x1) returned 0x0 [0106.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1056cf10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7050)) returned 1 [0106.796] SetErrorMode (uMode=0x0) returned 0x1 [0106.796] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\0i6jZg3DlrQbjucK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\0i6jzg3dlrqbjuck_encrypted_by.whiterose")) returned 1 [0106.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0106.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0106.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0106.901] SetErrorMode (uMode=0x1) returned 0x0 [0106.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.901] GetFileType (hFile=0x18c) returned 0x1 [0106.901] SetErrorMode (uMode=0x0) returned 0x1 [0106.902] GetFileType (hFile=0x18c) returned 0x1 [0106.902] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6f48 [0106.902] ReadFile (in: hFile=0x18c, lpBuffer=0x278a170, nNumberOfBytesToRead=0x6f48, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x278a170*, lpNumberOfBytesRead=0x27e648*=0x6f48, lpOverlapped=0x0) returned 1 [0106.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0106.911] SetErrorMode (uMode=0x1) returned 0x0 [0106.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f48)) returned 1 [0106.912] SetErrorMode (uMode=0x0) returned 0x1 [0106.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0106.978] SetErrorMode (uMode=0x1) returned 0x0 [0106.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0106.979] GetFileType (hFile=0x18c) returned 0x1 [0106.980] SetErrorMode (uMode=0x0) returned 0x1 [0106.980] GetFileType (hFile=0x18c) returned 0x1 [0106.980] WriteFile (in: hFile=0x18c, lpBuffer=0x280edd8*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x280edd8*, lpNumberOfBytesWritten=0x27e6c8*=0x7050, lpOverlapped=0x0) returned 1 [0106.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0106.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\QaMepGPsuoCbSN7w_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\QaMepGPsuoCbSN7w_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0106.981] SetErrorMode (uMode=0x1) returned 0x0 [0106.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x10735f90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7050)) returned 1 [0106.982] SetErrorMode (uMode=0x0) returned 0x1 [0106.982] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\QaMepGPsuoCbSN7w_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\qamepgpsuocbsn7w_encrypted_by.whiterose")) returned 1 [0107.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0107.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0107.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0107.088] SetErrorMode (uMode=0x1) returned 0x0 [0107.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.088] GetFileType (hFile=0x18c) returned 0x1 [0107.088] SetErrorMode (uMode=0x0) returned 0x1 [0107.089] GetFileType (hFile=0x18c) returned 0x1 [0107.089] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6f44 [0107.089] ReadFile (in: hFile=0x18c, lpBuffer=0x2817a60, nNumberOfBytesToRead=0x6f44, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2817a60*, lpNumberOfBytesRead=0x27e648*=0x6f44, lpOverlapped=0x0) returned 1 [0107.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0107.091] SetErrorMode (uMode=0x1) returned 0x0 [0107.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f44)) returned 1 [0107.092] SetErrorMode (uMode=0x0) returned 0x1 [0107.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0107.157] SetErrorMode (uMode=0x1) returned 0x0 [0107.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.158] GetFileType (hFile=0x18c) returned 0x1 [0107.158] SetErrorMode (uMode=0x0) returned 0x1 [0107.158] GetFileType (hFile=0x18c) returned 0x1 [0107.158] WriteFile (in: hFile=0x18c, lpBuffer=0x289c6f0*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x289c6f0*, lpNumberOfBytesWritten=0x27e6c8*=0x7050, lpOverlapped=0x0) returned 1 [0107.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0107.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\4kbmiZ5MKJ9Y8BHW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\4kbmiZ5MKJ9Y8BHW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0107.160] SetErrorMode (uMode=0x1) returned 0x0 [0107.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x108d8eb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7050)) returned 1 [0107.160] SetErrorMode (uMode=0x0) returned 0x1 [0107.160] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\4kbmiZ5MKJ9Y8BHW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\4kbmiz5mkj9y8bhw_encrypted_by.whiterose")) returned 1 [0107.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0107.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0107.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0107.260] SetErrorMode (uMode=0x1) returned 0x0 [0107.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.260] GetFileType (hFile=0x18c) returned 0x1 [0107.260] SetErrorMode (uMode=0x0) returned 0x1 [0107.260] GetFileType (hFile=0x18c) returned 0x1 [0107.260] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x67c2 [0107.260] ReadFile (in: hFile=0x18c, lpBuffer=0x28a5340, nNumberOfBytesToRead=0x67c2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a5340*, lpNumberOfBytesRead=0x27e648*=0x67c2, lpOverlapped=0x0) returned 1 [0107.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0107.263] SetErrorMode (uMode=0x1) returned 0x0 [0107.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x67c2)) returned 1 [0107.263] SetErrorMode (uMode=0x0) returned 0x1 [0107.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0107.328] SetErrorMode (uMode=0x1) returned 0x0 [0107.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.329] GetFileType (hFile=0x18c) returned 0x1 [0107.330] SetErrorMode (uMode=0x0) returned 0x1 [0107.330] GetFileType (hFile=0x18c) returned 0x1 [0107.330] WriteFile (in: hFile=0x18c, lpBuffer=0x2926b28*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2926b28*, lpNumberOfBytesWritten=0x27e6c8*=0x68d0, lpOverlapped=0x0) returned 1 [0107.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0107.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\nvIRvpGyUM8sFynJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\nvIRvpGyUM8sFynJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0107.331] SetErrorMode (uMode=0x1) returned 0x0 [0107.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x10a7bdd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x68d0)) returned 1 [0107.332] SetErrorMode (uMode=0x0) returned 0x1 [0107.332] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\nvIRvpGyUM8sFynJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\nvirvpgyum8sfynj_encrypted_by.whiterose")) returned 1 [0107.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.431] SetErrorMode (uMode=0x1) returned 0x0 [0107.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.432] GetFileType (hFile=0x18c) returned 0x1 [0107.432] SetErrorMode (uMode=0x0) returned 0x1 [0107.432] GetFileType (hFile=0x18c) returned 0x1 [0107.432] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x67c2 [0107.432] ReadFile (in: hFile=0x18c, lpBuffer=0x292efc8, nNumberOfBytesToRead=0x67c2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x292efc8*, lpNumberOfBytesRead=0x27e648*=0x67c2, lpOverlapped=0x0) returned 1 [0107.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.435] SetErrorMode (uMode=0x1) returned 0x0 [0107.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x67c2)) returned 1 [0107.435] SetErrorMode (uMode=0x0) returned 0x1 [0107.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.505] SetErrorMode (uMode=0x1) returned 0x0 [0107.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.507] GetFileType (hFile=0x18c) returned 0x1 [0107.507] SetErrorMode (uMode=0x0) returned 0x1 [0107.508] GetFileType (hFile=0x18c) returned 0x1 [0107.508] WriteFile (in: hFile=0x18c, lpBuffer=0x27ad270*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27ad270*, lpNumberOfBytesWritten=0x27e6c8*=0x68d0, lpOverlapped=0x0) returned 1 [0107.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eZXz*JKRbcPKV4M0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eZXz*JKRbcPKV4M0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0107.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0107.517] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 1 [0107.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0107.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0107.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0107.520] SetErrorMode (uMode=0x1) returned 0x0 [0107.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.521] GetFileType (hFile=0x18c) returned 0x1 [0107.521] SetErrorMode (uMode=0x0) returned 0x1 [0107.521] GetFileType (hFile=0x18c) returned 0x1 [0107.521] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e28 [0107.521] ReadFile (in: hFile=0x18c, lpBuffer=0x27b5b78, nNumberOfBytesToRead=0x6e28, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b5b78*, lpNumberOfBytesRead=0x27e648*=0x6e28, lpOverlapped=0x0) returned 1 [0107.523] CloseHandle (hObject=0x18c) returned 1 [0107.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0107.524] SetErrorMode (uMode=0x1) returned 0x0 [0107.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e28)) returned 1 [0107.524] SetErrorMode (uMode=0x0) returned 0x1 [0107.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0107.650] SetErrorMode (uMode=0x1) returned 0x0 [0107.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.651] GetFileType (hFile=0x18c) returned 0x1 [0107.651] SetErrorMode (uMode=0x0) returned 0x1 [0107.651] GetFileType (hFile=0x18c) returned 0x1 [0107.651] WriteFile (in: hFile=0x18c, lpBuffer=0x283a898*, nNumberOfBytesToWrite=0x6f30, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x283a898*, lpNumberOfBytesWritten=0x27e6c8*=0x6f30, lpOverlapped=0x0) returned 1 [0107.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0107.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1StdnTGZPYhExCnR_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1StdnTGZPYhExCnR_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0107.653] SetErrorMode (uMode=0x1) returned 0x0 [0107.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x10d9bab0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f30)) returned 1 [0107.653] SetErrorMode (uMode=0x0) returned 0x1 [0107.653] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1StdnTGZPYhExCnR_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\1stdntgzpyhexcnr_encrypted_by.whiterose")) returned 1 [0107.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.759] SetErrorMode (uMode=0x1) returned 0x0 [0107.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.759] GetFileType (hFile=0x18c) returned 0x1 [0107.759] SetErrorMode (uMode=0x0) returned 0x1 [0107.759] GetFileType (hFile=0x18c) returned 0x1 [0107.759] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e28 [0107.760] ReadFile (in: hFile=0x18c, lpBuffer=0x2843398, nNumberOfBytesToRead=0x6e28, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2843398*, lpNumberOfBytesRead=0x27e648*=0x6e28, lpOverlapped=0x0) returned 1 [0107.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.762] SetErrorMode (uMode=0x1) returned 0x0 [0107.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e28)) returned 1 [0107.762] SetErrorMode (uMode=0x0) returned 0x1 [0107.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.834] SetErrorMode (uMode=0x1) returned 0x0 [0107.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.835] GetFileType (hFile=0x18c) returned 0x1 [0107.835] SetErrorMode (uMode=0x0) returned 0x1 [0107.836] GetFileType (hFile=0x18c) returned 0x1 [0107.836] WriteFile (in: hFile=0x18c, lpBuffer=0x28c7940*, nNumberOfBytesToWrite=0x6f30, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28c7940*, lpNumberOfBytesWritten=0x27e6c8*=0x6f30, lpOverlapped=0x0) returned 1 [0107.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\6VwmNufUDNJ4I*Gm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\6VwmNufUDNJ4I*Gm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0107.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0107.843] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 1 [0107.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0107.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0107.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0107.846] SetErrorMode (uMode=0x1) returned 0x0 [0107.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.847] GetFileType (hFile=0x18c) returned 0x1 [0107.847] SetErrorMode (uMode=0x0) returned 0x1 [0107.847] GetFileType (hFile=0x18c) returned 0x1 [0107.847] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dfe [0107.847] ReadFile (in: hFile=0x18c, lpBuffer=0x28d08a8, nNumberOfBytesToRead=0x6dfe, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d08a8*, lpNumberOfBytesRead=0x27e648*=0x6dfe, lpOverlapped=0x0) returned 1 [0107.849] CloseHandle (hObject=0x18c) returned 1 [0107.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0107.850] SetErrorMode (uMode=0x1) returned 0x0 [0107.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe)) returned 1 [0107.850] SetErrorMode (uMode=0x0) returned 0x1 [0107.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0107.954] SetErrorMode (uMode=0x1) returned 0x0 [0107.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0107.956] GetFileType (hFile=0x18c) returned 0x1 [0107.956] SetErrorMode (uMode=0x0) returned 0x1 [0107.956] GetFileType (hFile=0x18c) returned 0x1 [0107.956] WriteFile (in: hFile=0x18c, lpBuffer=0x2755468*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2755468*, lpNumberOfBytesWritten=0x27e6c8*=0x6f00, lpOverlapped=0x0) returned 1 [0107.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0107.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\PO322Ec3hybWkKg6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\PO322Ec3hybWkKg6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0107.957] SetErrorMode (uMode=0x1) returned 0x0 [0107.957] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1106f4d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f00)) returned 1 [0107.958] SetErrorMode (uMode=0x0) returned 0x1 [0107.958] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\PO322Ec3hybWkKg6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\po322ec3hybwkkg6_encrypted_by.whiterose")) returned 1 [0108.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0108.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0108.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0108.056] SetErrorMode (uMode=0x1) returned 0x0 [0108.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.056] GetFileType (hFile=0x18c) returned 0x1 [0108.056] SetErrorMode (uMode=0x0) returned 0x1 [0108.056] GetFileType (hFile=0x18c) returned 0x1 [0108.056] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dfe [0108.056] ReadFile (in: hFile=0x18c, lpBuffer=0x275df38, nNumberOfBytesToRead=0x6dfe, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x275df38*, lpNumberOfBytesRead=0x27e648*=0x6dfe, lpOverlapped=0x0) returned 1 [0108.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0108.058] SetErrorMode (uMode=0x1) returned 0x0 [0108.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe)) returned 1 [0108.058] SetErrorMode (uMode=0x0) returned 0x1 [0108.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0108.123] SetErrorMode (uMode=0x1) returned 0x0 [0108.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.125] GetFileType (hFile=0x18c) returned 0x1 [0108.125] SetErrorMode (uMode=0x0) returned 0x1 [0108.125] GetFileType (hFile=0x18c) returned 0x1 [0108.125] WriteFile (in: hFile=0x18c, lpBuffer=0x27db358*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27db358*, lpNumberOfBytesWritten=0x27e6c8*=0x6f00, lpOverlapped=0x0) returned 1 [0108.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0108.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\e68LT3kUnjxVTGzR_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\e68LT3kUnjxVTGzR_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0108.126] SetErrorMode (uMode=0x1) returned 0x0 [0108.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x112123f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f00)) returned 1 [0108.127] SetErrorMode (uMode=0x0) returned 0x1 [0108.127] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\e68LT3kUnjxVTGzR_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\e68lt3kunjxvtgzr_encrypted_by.whiterose")) returned 1 [0108.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0108.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0108.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0108.227] SetErrorMode (uMode=0x1) returned 0x0 [0108.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.227] GetFileType (hFile=0x18c) returned 0x1 [0108.227] SetErrorMode (uMode=0x0) returned 0x1 [0108.227] GetFileType (hFile=0x18c) returned 0x1 [0108.227] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0108.228] ReadFile (in: hFile=0x18c, lpBuffer=0x27e3e18, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27e3e18*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0108.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0108.230] SetErrorMode (uMode=0x1) returned 0x0 [0108.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0108.230] SetErrorMode (uMode=0x0) returned 0x1 [0108.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0108.296] SetErrorMode (uMode=0x1) returned 0x0 [0108.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.297] GetFileType (hFile=0x18c) returned 0x1 [0108.297] SetErrorMode (uMode=0x0) returned 0x1 [0108.297] GetFileType (hFile=0x18c) returned 0x1 [0108.297] WriteFile (in: hFile=0x18c, lpBuffer=0x2868658*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2868658*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0108.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0108.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zfDf7tXHxmwpqEfE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zfDf7tXHxmwpqEfE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0108.299] SetErrorMode (uMode=0x1) returned 0x0 [0108.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x113b5310, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0108.299] SetErrorMode (uMode=0x0) returned 0x1 [0108.299] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\zfDf7tXHxmwpqEfE_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\zfdf7txhxmwpqefe_encrypted_by.whiterose")) returned 1 [0108.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0108.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0108.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0108.398] SetErrorMode (uMode=0x1) returned 0x0 [0108.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.400] GetFileType (hFile=0x18c) returned 0x1 [0108.400] SetErrorMode (uMode=0x0) returned 0x1 [0108.400] GetFileType (hFile=0x18c) returned 0x1 [0108.400] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e8e [0108.400] ReadFile (in: hFile=0x18c, lpBuffer=0x28711b8, nNumberOfBytesToRead=0x6e8e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28711b8*, lpNumberOfBytesRead=0x27e648*=0x6e8e, lpOverlapped=0x0) returned 1 [0108.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0108.402] SetErrorMode (uMode=0x1) returned 0x0 [0108.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e)) returned 1 [0108.402] SetErrorMode (uMode=0x0) returned 0x1 [0108.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0108.462] SetErrorMode (uMode=0x1) returned 0x0 [0108.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.463] GetFileType (hFile=0x18c) returned 0x1 [0108.463] SetErrorMode (uMode=0x0) returned 0x1 [0108.463] GetFileType (hFile=0x18c) returned 0x1 [0108.464] WriteFile (in: hFile=0x18c, lpBuffer=0x28f59c8*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28f59c8*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0108.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0108.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\qISYKM2ZONeHG9E5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\qISYKM2ZONeHG9E5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0108.465] SetErrorMode (uMode=0x1) returned 0x0 [0108.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x11558230, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0108.465] SetErrorMode (uMode=0x0) returned 0x1 [0108.465] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\qISYKM2ZONeHG9E5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\qisykm2zonehg9e5_encrypted_by.whiterose")) returned 1 [0108.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0108.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0108.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0108.570] SetErrorMode (uMode=0x1) returned 0x0 [0108.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.571] GetFileType (hFile=0x18c) returned 0x1 [0108.571] SetErrorMode (uMode=0x0) returned 0x1 [0108.571] GetFileType (hFile=0x18c) returned 0x1 [0108.571] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e88 [0108.571] ReadFile (in: hFile=0x18c, lpBuffer=0x28fe530, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28fe530*, lpNumberOfBytesRead=0x27e648*=0x6e88, lpOverlapped=0x0) returned 1 [0108.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0108.573] SetErrorMode (uMode=0x1) returned 0x0 [0108.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88)) returned 1 [0108.573] SetErrorMode (uMode=0x0) returned 0x1 [0108.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0108.634] SetErrorMode (uMode=0x1) returned 0x0 [0108.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.636] GetFileType (hFile=0x18c) returned 0x1 [0108.636] SetErrorMode (uMode=0x0) returned 0x1 [0108.636] GetFileType (hFile=0x18c) returned 0x1 [0108.636] WriteFile (in: hFile=0x18c, lpBuffer=0x2782d10*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2782d10*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0108.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0108.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\hb7Go76g7dXZVC4t_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\hb7Go76g7dXZVC4t_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0108.637] SetErrorMode (uMode=0x1) returned 0x0 [0108.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x116fb150, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0108.637] SetErrorMode (uMode=0x0) returned 0x1 [0108.637] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\hb7Go76g7dXZVC4t_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\hb7go76g7dxzvc4t_encrypted_by.whiterose")) returned 1 [0108.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0108.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0108.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0108.742] SetErrorMode (uMode=0x1) returned 0x0 [0108.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.742] GetFileType (hFile=0x18c) returned 0x1 [0108.742] SetErrorMode (uMode=0x0) returned 0x1 [0108.742] GetFileType (hFile=0x18c) returned 0x1 [0108.742] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e8e [0108.742] ReadFile (in: hFile=0x18c, lpBuffer=0x278b8d8, nNumberOfBytesToRead=0x6e8e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x278b8d8*, lpNumberOfBytesRead=0x27e648*=0x6e8e, lpOverlapped=0x0) returned 1 [0108.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0108.744] SetErrorMode (uMode=0x1) returned 0x0 [0108.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e)) returned 1 [0108.745] SetErrorMode (uMode=0x0) returned 0x1 [0108.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0108.823] SetErrorMode (uMode=0x1) returned 0x0 [0108.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.824] GetFileType (hFile=0x18c) returned 0x1 [0108.824] SetErrorMode (uMode=0x0) returned 0x1 [0108.824] GetFileType (hFile=0x18c) returned 0x1 [0108.824] WriteFile (in: hFile=0x18c, lpBuffer=0x2810108*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2810108*, lpNumberOfBytesWritten=0x27e6c8*=0x6f90, lpOverlapped=0x0) returned 1 [0108.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0108.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\CmCaBwH5fgWutzKg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\CmCaBwH5fgWutzKg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0108.826] SetErrorMode (uMode=0x1) returned 0x0 [0108.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x118c41d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0108.826] SetErrorMode (uMode=0x0) returned 0x1 [0108.826] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\CmCaBwH5fgWutzKg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\cmcabwh5fgwutzkg_encrypted_by.whiterose")) returned 1 [0108.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0108.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0108.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0108.929] SetErrorMode (uMode=0x1) returned 0x0 [0108.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.930] GetFileType (hFile=0x18c) returned 0x1 [0108.930] SetErrorMode (uMode=0x0) returned 0x1 [0108.930] GetFileType (hFile=0x18c) returned 0x1 [0108.930] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x656a [0108.930] ReadFile (in: hFile=0x18c, lpBuffer=0x2818c98, nNumberOfBytesToRead=0x656a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2818c98*, lpNumberOfBytesRead=0x27e648*=0x656a, lpOverlapped=0x0) returned 1 [0108.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0108.933] SetErrorMode (uMode=0x1) returned 0x0 [0108.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x656a)) returned 1 [0108.933] SetErrorMode (uMode=0x0) returned 0x1 [0108.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0108.994] SetErrorMode (uMode=0x1) returned 0x0 [0108.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0108.995] GetFileType (hFile=0x18c) returned 0x1 [0108.995] SetErrorMode (uMode=0x0) returned 0x1 [0108.996] GetFileType (hFile=0x18c) returned 0x1 [0108.996] WriteFile (in: hFile=0x18c, lpBuffer=0x2899470*, nNumberOfBytesToWrite=0x6670, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2899470*, lpNumberOfBytesWritten=0x27e6c8*=0x6670, lpOverlapped=0x0) returned 1 [0108.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0108.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\jdk73XtSndIt3SD5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\jdk73XtSndIt3SD5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0108.997] SetErrorMode (uMode=0x1) returned 0x0 [0108.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x11a670f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6670)) returned 1 [0108.997] SetErrorMode (uMode=0x0) returned 0x1 [0108.997] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\jdk73XtSndIt3SD5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\jdk73xtsndit3sd5_encrypted_by.whiterose")) returned 1 [0109.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.103] SetErrorMode (uMode=0x1) returned 0x0 [0109.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.104] GetFileType (hFile=0x18c) returned 0x1 [0109.104] SetErrorMode (uMode=0x0) returned 0x1 [0109.104] GetFileType (hFile=0x18c) returned 0x1 [0109.104] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x656a [0109.104] ReadFile (in: hFile=0x18c, lpBuffer=0x28a16b0, nNumberOfBytesToRead=0x656a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a16b0*, lpNumberOfBytesRead=0x27e648*=0x656a, lpOverlapped=0x0) returned 1 [0109.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.106] SetErrorMode (uMode=0x1) returned 0x0 [0109.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x656a)) returned 1 [0109.107] SetErrorMode (uMode=0x0) returned 0x1 [0109.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.166] SetErrorMode (uMode=0x1) returned 0x0 [0109.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.167] GetFileType (hFile=0x18c) returned 0x1 [0109.167] SetErrorMode (uMode=0x0) returned 0x1 [0109.167] GetFileType (hFile=0x18c) returned 0x1 [0109.167] WriteFile (in: hFile=0x18c, lpBuffer=0x29227b8*, nNumberOfBytesToWrite=0x6670, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x29227b8*, lpNumberOfBytesWritten=0x27e6c8*=0x6670, lpOverlapped=0x0) returned 1 [0109.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\aHyOGfy*FEqLgl3t_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\aHyOGfy*FEqLgl3t_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0109.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0109.171] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 1 [0109.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0109.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0109.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0109.174] SetErrorMode (uMode=0x1) returned 0x0 [0109.174] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.174] GetFileType (hFile=0x18c) returned 0x1 [0109.174] SetErrorMode (uMode=0x0) returned 0x1 [0109.174] GetFileType (hFile=0x18c) returned 0x1 [0109.174] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6594 [0109.174] ReadFile (in: hFile=0x18c, lpBuffer=0x292af08, nNumberOfBytesToRead=0x6594, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x292af08*, lpNumberOfBytesRead=0x27e648*=0x6594, lpOverlapped=0x0) returned 1 [0109.201] CloseHandle (hObject=0x18c) returned 1 [0109.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0109.202] SetErrorMode (uMode=0x1) returned 0x0 [0109.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6594)) returned 1 [0109.202] SetErrorMode (uMode=0x0) returned 0x1 [0109.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0109.311] SetErrorMode (uMode=0x1) returned 0x0 [0109.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.312] GetFileType (hFile=0x18c) returned 0x1 [0109.312] SetErrorMode (uMode=0x0) returned 0x1 [0109.312] GetFileType (hFile=0x18c) returned 0x1 [0109.312] WriteFile (in: hFile=0x18c, lpBuffer=0x27ab4e8*, nNumberOfBytesToWrite=0x66a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27ab4e8*, lpNumberOfBytesWritten=0x27e6c8*=0x66a0, lpOverlapped=0x0) returned 1 [0109.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0109.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yTT4Grkgkw7aTBqb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yTT4Grkgkw7aTBqb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0109.314] SetErrorMode (uMode=0x1) returned 0x0 [0109.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x11d60c70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x66a0)) returned 1 [0109.314] SetErrorMode (uMode=0x0) returned 0x1 [0109.314] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\yTT4Grkgkw7aTBqb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ytt4grkgkw7atbqb_encrypted_by.whiterose")) returned 1 [0109.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0109.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0109.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0109.412] SetErrorMode (uMode=0x1) returned 0x0 [0109.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.413] GetFileType (hFile=0x18c) returned 0x1 [0109.413] SetErrorMode (uMode=0x0) returned 0x1 [0109.413] GetFileType (hFile=0x18c) returned 0x1 [0109.413] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x626a [0109.413] ReadFile (in: hFile=0x18c, lpBuffer=0x27b37a8, nNumberOfBytesToRead=0x626a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b37a8*, lpNumberOfBytesRead=0x27e648*=0x626a, lpOverlapped=0x0) returned 1 [0109.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0109.415] SetErrorMode (uMode=0x1) returned 0x0 [0109.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x626a)) returned 1 [0109.415] SetErrorMode (uMode=0x0) returned 0x1 [0109.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0109.477] SetErrorMode (uMode=0x1) returned 0x0 [0109.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.478] GetFileType (hFile=0x18c) returned 0x1 [0109.478] SetErrorMode (uMode=0x0) returned 0x1 [0109.478] GetFileType (hFile=0x18c) returned 0x1 [0109.479] WriteFile (in: hFile=0x18c, lpBuffer=0x28333b0*, nNumberOfBytesToWrite=0x6370, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28333b0*, lpNumberOfBytesWritten=0x27e6c8*=0x6370, lpOverlapped=0x0) returned 1 [0109.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0109.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\aeDoyVlGgHhlKFqk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\aeDoyVlGgHhlKFqk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0109.480] SetErrorMode (uMode=0x1) returned 0x0 [0109.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x11f03b90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6370)) returned 1 [0109.480] SetErrorMode (uMode=0x0) returned 0x1 [0109.480] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\aeDoyVlGgHhlKFqk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\aedoyvlgghhlkfqk_encrypted_by.whiterose")) returned 1 [0109.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.584] SetErrorMode (uMode=0x1) returned 0x0 [0109.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.584] GetFileType (hFile=0x18c) returned 0x1 [0109.584] SetErrorMode (uMode=0x0) returned 0x1 [0109.584] GetFileType (hFile=0x18c) returned 0x1 [0109.584] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x626a [0109.585] ReadFile (in: hFile=0x18c, lpBuffer=0x283b2f0, nNumberOfBytesToRead=0x626a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x283b2f0*, lpNumberOfBytesRead=0x27e648*=0x626a, lpOverlapped=0x0) returned 1 [0109.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.587] SetErrorMode (uMode=0x1) returned 0x0 [0109.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x626a)) returned 1 [0109.587] SetErrorMode (uMode=0x0) returned 0x1 [0109.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.657] SetErrorMode (uMode=0x1) returned 0x0 [0109.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.659] GetFileType (hFile=0x18c) returned 0x1 [0109.659] SetErrorMode (uMode=0x0) returned 0x1 [0109.659] GetFileType (hFile=0x18c) returned 0x1 [0109.659] WriteFile (in: hFile=0x18c, lpBuffer=0x28bb268*, nNumberOfBytesToWrite=0x6370, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28bb268*, lpNumberOfBytesWritten=0x27e6c8*=0x6370, lpOverlapped=0x0) returned 1 [0109.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\3IS8cdpZx91D1*PK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\3IS8cdpZx91D1*PK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0109.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0109.668] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 1 [0109.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0109.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0109.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0109.671] SetErrorMode (uMode=0x1) returned 0x0 [0109.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.672] GetFileType (hFile=0x18c) returned 0x1 [0109.672] SetErrorMode (uMode=0x0) returned 0x1 [0109.672] GetFileType (hFile=0x18c) returned 0x1 [0109.672] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6bea [0109.672] ReadFile (in: hFile=0x18c, lpBuffer=0x28c3610, nNumberOfBytesToRead=0x6bea, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28c3610*, lpNumberOfBytesRead=0x27e648*=0x6bea, lpOverlapped=0x0) returned 1 [0109.674] CloseHandle (hObject=0x18c) returned 1 [0109.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0109.676] SetErrorMode (uMode=0x1) returned 0x0 [0109.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bea)) returned 1 [0109.676] SetErrorMode (uMode=0x0) returned 0x1 [0109.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0109.768] SetErrorMode (uMode=0x1) returned 0x0 [0109.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.769] GetFileType (hFile=0x18c) returned 0x1 [0109.769] SetErrorMode (uMode=0x0) returned 0x1 [0109.769] GetFileType (hFile=0x18c) returned 0x1 [0109.769] WriteFile (in: hFile=0x18c, lpBuffer=0x274dce8*, nNumberOfBytesToWrite=0x6cf0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x274dce8*, lpNumberOfBytesWritten=0x27e6c8*=0x6cf0, lpOverlapped=0x0) returned 1 [0109.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0109.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MBoLqol8bTswCJqs_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MBoLqol8bTswCJqs_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0109.770] SetErrorMode (uMode=0x1) returned 0x0 [0109.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x121b1450, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf0)) returned 1 [0109.771] SetErrorMode (uMode=0x0) returned 0x1 [0109.771] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\MBoLqol8bTswCJqs_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\mbolqol8btswcjqs_encrypted_by.whiterose")) returned 1 [0109.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.882] SetErrorMode (uMode=0x1) returned 0x0 [0109.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.883] GetFileType (hFile=0x18c) returned 0x1 [0109.883] SetErrorMode (uMode=0x0) returned 0x1 [0109.883] GetFileType (hFile=0x18c) returned 0x1 [0109.883] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6bea [0109.883] ReadFile (in: hFile=0x18c, lpBuffer=0x27565a8, nNumberOfBytesToRead=0x6bea, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27565a8*, lpNumberOfBytesRead=0x27e648*=0x6bea, lpOverlapped=0x0) returned 1 [0109.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.885] SetErrorMode (uMode=0x1) returned 0x0 [0109.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bea)) returned 1 [0109.885] SetErrorMode (uMode=0x0) returned 0x1 [0109.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.944] SetErrorMode (uMode=0x1) returned 0x0 [0109.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.945] GetFileType (hFile=0x18c) returned 0x1 [0109.945] SetErrorMode (uMode=0x0) returned 0x1 [0109.945] GetFileType (hFile=0x18c) returned 0x1 [0109.945] WriteFile (in: hFile=0x18c, lpBuffer=0x27d2f88*, nNumberOfBytesToWrite=0x6cf0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d2f88*, lpNumberOfBytesWritten=0x27e6c8*=0x6cf0, lpOverlapped=0x0) returned 1 [0109.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\FyLhQU3t*h6It02B_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\FyLhQU3t*h6It02B_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0109.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0109.952] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 1 [0109.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0109.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0109.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0109.955] SetErrorMode (uMode=0x1) returned 0x0 [0109.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0109.956] GetFileType (hFile=0x18c) returned 0x1 [0109.956] SetErrorMode (uMode=0x0) returned 0x1 [0109.956] GetFileType (hFile=0x18c) returned 0x1 [0109.956] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6aae [0109.956] ReadFile (in: hFile=0x18c, lpBuffer=0x27dbcb0, nNumberOfBytesToRead=0x6aae, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27dbcb0*, lpNumberOfBytesRead=0x27e648*=0x6aae, lpOverlapped=0x0) returned 1 [0109.957] CloseHandle (hObject=0x18c) returned 1 [0109.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0109.958] SetErrorMode (uMode=0x1) returned 0x0 [0109.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6aae)) returned 1 [0109.959] SetErrorMode (uMode=0x0) returned 0x1 [0110.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0110.071] SetErrorMode (uMode=0x1) returned 0x0 [0110.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.072] GetFileType (hFile=0x18c) returned 0x1 [0110.072] SetErrorMode (uMode=0x0) returned 0x1 [0110.072] GetFileType (hFile=0x18c) returned 0x1 [0110.072] WriteFile (in: hFile=0x18c, lpBuffer=0x285ec10*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x285ec10*, lpNumberOfBytesWritten=0x27e6c8*=0x6bb0, lpOverlapped=0x0) returned 1 [0110.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0110.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\4L8wQ6OAQ0K97opj_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\4L8wQ6OAQ0K97opj_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0110.074] SetErrorMode (uMode=0x1) returned 0x0 [0110.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x124aafd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6bb0)) returned 1 [0110.074] SetErrorMode (uMode=0x0) returned 0x1 [0110.074] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\4L8wQ6OAQ0K97opj_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\4l8wq6oaq0k97opj_encrypted_by.whiterose")) returned 1 [0110.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0110.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0110.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0110.177] SetErrorMode (uMode=0x1) returned 0x0 [0110.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.177] GetFileType (hFile=0x18c) returned 0x1 [0110.177] SetErrorMode (uMode=0x0) returned 0x1 [0110.177] GetFileType (hFile=0x18c) returned 0x1 [0110.178] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6aae [0110.178] ReadFile (in: hFile=0x18c, lpBuffer=0x2867390, nNumberOfBytesToRead=0x6aae, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2867390*, lpNumberOfBytesRead=0x27e648*=0x6aae, lpOverlapped=0x0) returned 1 [0110.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0110.179] SetErrorMode (uMode=0x1) returned 0x0 [0110.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6aae)) returned 1 [0110.180] SetErrorMode (uMode=0x0) returned 0x1 [0110.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0110.241] SetErrorMode (uMode=0x1) returned 0x0 [0110.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.243] GetFileType (hFile=0x18c) returned 0x1 [0110.243] SetErrorMode (uMode=0x0) returned 0x1 [0110.243] GetFileType (hFile=0x18c) returned 0x1 [0110.243] WriteFile (in: hFile=0x18c, lpBuffer=0x28ea428*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28ea428*, lpNumberOfBytesWritten=0x27e6c8*=0x6bb0, lpOverlapped=0x0) returned 1 [0110.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0110.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ipFtuzEYMq0OY0cs_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ipFtuzEYMq0OY0cs_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0110.244] SetErrorMode (uMode=0x1) returned 0x0 [0110.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1264def0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6bb0)) returned 1 [0110.244] SetErrorMode (uMode=0x0) returned 0x1 [0110.244] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ipFtuzEYMq0OY0cs_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ipftuzeymq0oy0cs_encrypted_by.whiterose")) returned 1 [0110.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.349] SetErrorMode (uMode=0x1) returned 0x0 [0110.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.349] GetFileType (hFile=0x18c) returned 0x1 [0110.349] SetErrorMode (uMode=0x0) returned 0x1 [0110.349] GetFileType (hFile=0x18c) returned 0x1 [0110.349] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6df2 [0110.349] ReadFile (in: hFile=0x18c, lpBuffer=0x28f2b98, nNumberOfBytesToRead=0x6df2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f2b98*, lpNumberOfBytesRead=0x27e648*=0x6df2, lpOverlapped=0x0) returned 1 [0110.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.353] SetErrorMode (uMode=0x1) returned 0x0 [0110.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2)) returned 1 [0110.353] SetErrorMode (uMode=0x0) returned 0x1 [0110.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.418] SetErrorMode (uMode=0x1) returned 0x0 [0110.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.419] GetFileType (hFile=0x18c) returned 0x1 [0110.419] SetErrorMode (uMode=0x0) returned 0x1 [0110.419] GetFileType (hFile=0x18c) returned 0x1 [0110.419] WriteFile (in: hFile=0x18c, lpBuffer=0x2777360*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2777360*, lpNumberOfBytesWritten=0x27e6c8*=0x6f00, lpOverlapped=0x0) returned 1 [0110.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*TTb0TJg5RR7cDBS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*TTb0TJg5RR7cDBS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0110.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0110.423] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 1 [0110.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0110.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0110.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0110.426] SetErrorMode (uMode=0x1) returned 0x0 [0110.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.426] GetFileType (hFile=0x18c) returned 0x1 [0110.426] SetErrorMode (uMode=0x0) returned 0x1 [0110.426] GetFileType (hFile=0x18c) returned 0x1 [0110.427] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6df2 [0110.427] ReadFile (in: hFile=0x18c, lpBuffer=0x27802a8, nNumberOfBytesToRead=0x6df2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27802a8*, lpNumberOfBytesRead=0x27e648*=0x6df2, lpOverlapped=0x0) returned 1 [0110.429] CloseHandle (hObject=0x18c) returned 1 [0110.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0110.430] SetErrorMode (uMode=0x1) returned 0x0 [0110.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2)) returned 1 [0110.430] SetErrorMode (uMode=0x0) returned 0x1 [0110.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0110.528] SetErrorMode (uMode=0x1) returned 0x0 [0110.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.530] GetFileType (hFile=0x18c) returned 0x1 [0110.530] SetErrorMode (uMode=0x0) returned 0x1 [0110.530] GetFileType (hFile=0x18c) returned 0x1 [0110.530] WriteFile (in: hFile=0x18c, lpBuffer=0x2804738*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2804738*, lpNumberOfBytesWritten=0x27e6c8*=0x6f00, lpOverlapped=0x0) returned 1 [0110.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0110.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ULpQm4FoICkZPccA_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ULpQm4FoICkZPccA_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0110.531] SetErrorMode (uMode=0x1) returned 0x0 [0110.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x128fb7b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f00)) returned 1 [0110.532] SetErrorMode (uMode=0x0) returned 0x1 [0110.532] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ULpQm4FoICkZPccA_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ulpqm4foickzpcca_encrypted_by.whiterose")) returned 1 [0110.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.629] SetErrorMode (uMode=0x1) returned 0x0 [0110.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.630] GetFileType (hFile=0x18c) returned 0x1 [0110.630] SetErrorMode (uMode=0x0) returned 0x1 [0110.630] GetFileType (hFile=0x18c) returned 0x1 [0110.630] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dc6 [0110.630] ReadFile (in: hFile=0x18c, lpBuffer=0x280d1f8, nNumberOfBytesToRead=0x6dc6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x280d1f8*, lpNumberOfBytesRead=0x27e648*=0x6dc6, lpOverlapped=0x0) returned 1 [0110.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.633] SetErrorMode (uMode=0x1) returned 0x0 [0110.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6)) returned 1 [0110.633] SetErrorMode (uMode=0x0) returned 0x1 [0110.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.693] SetErrorMode (uMode=0x1) returned 0x0 [0110.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.694] GetFileType (hFile=0x18c) returned 0x1 [0110.694] SetErrorMode (uMode=0x0) returned 0x1 [0110.694] GetFileType (hFile=0x18c) returned 0x1 [0110.694] WriteFile (in: hFile=0x18c, lpBuffer=0x2891550*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2891550*, lpNumberOfBytesWritten=0x27e6c8*=0x6ed0, lpOverlapped=0x0) returned 1 [0110.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Xkj*2rDePtTtnPim_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Xkj*2rDePtTtnPim_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0110.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0110.702] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 1 [0110.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0110.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0110.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0110.705] SetErrorMode (uMode=0x1) returned 0x0 [0110.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.705] GetFileType (hFile=0x18c) returned 0x1 [0110.705] SetErrorMode (uMode=0x0) returned 0x1 [0110.705] GetFileType (hFile=0x18c) returned 0x1 [0110.705] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dd6 [0110.705] ReadFile (in: hFile=0x18c, lpBuffer=0x289a468, nNumberOfBytesToRead=0x6dd6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x289a468*, lpNumberOfBytesRead=0x27e648*=0x6dd6, lpOverlapped=0x0) returned 1 [0110.709] CloseHandle (hObject=0x18c) returned 1 [0110.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0110.710] SetErrorMode (uMode=0x1) returned 0x0 [0110.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6)) returned 1 [0110.710] SetErrorMode (uMode=0x0) returned 0x1 [0110.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0110.812] SetErrorMode (uMode=0x1) returned 0x0 [0110.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.813] GetFileType (hFile=0x18c) returned 0x1 [0110.813] SetErrorMode (uMode=0x0) returned 0x1 [0110.813] GetFileType (hFile=0x18c) returned 0x1 [0110.813] WriteFile (in: hFile=0x18c, lpBuffer=0x291e838*, nNumberOfBytesToWrite=0x6ee0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x291e838*, lpNumberOfBytesWritten=0x27e6c8*=0x6ee0, lpOverlapped=0x0) returned 1 [0110.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0110.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\lwEo1DplukyS16H7_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\lwEo1DplukyS16H7_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0110.815] SetErrorMode (uMode=0x1) returned 0x0 [0110.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x12ba9070, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6ee0)) returned 1 [0110.815] SetErrorMode (uMode=0x0) returned 0x1 [0110.815] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\lwEo1DplukyS16H7_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\lweo1dplukys16h7_encrypted_by.whiterose")) returned 1 [0110.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0110.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0110.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0110.926] SetErrorMode (uMode=0x1) returned 0x0 [0110.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0110.926] GetFileType (hFile=0x18c) returned 0x1 [0110.926] SetErrorMode (uMode=0x0) returned 0x1 [0110.926] GetFileType (hFile=0x18c) returned 0x1 [0110.926] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dd6 [0110.927] ReadFile (in: hFile=0x18c, lpBuffer=0x2927350, nNumberOfBytesToRead=0x6dd6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2927350*, lpNumberOfBytesRead=0x27e648*=0x6dd6, lpOverlapped=0x0) returned 1 [0110.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0110.929] SetErrorMode (uMode=0x1) returned 0x0 [0110.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6)) returned 1 [0110.929] SetErrorMode (uMode=0x0) returned 0x1 [0111.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.015] SetErrorMode (uMode=0x1) returned 0x0 [0111.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.017] GetFileType (hFile=0x18c) returned 0x1 [0111.017] SetErrorMode (uMode=0x0) returned 0x1 [0111.017] GetFileType (hFile=0x18c) returned 0x1 [0111.017] WriteFile (in: hFile=0x18c, lpBuffer=0x27ab798*, nNumberOfBytesToWrite=0x6ee0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27ab798*, lpNumberOfBytesWritten=0x27e6c8*=0x6ee0, lpOverlapped=0x0) returned 1 [0111.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BbclE9fJrCXzSOud_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BbclE9fJrCXzSOud_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.019] SetErrorMode (uMode=0x1) returned 0x0 [0111.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x12dbe3b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6ee0)) returned 1 [0111.019] SetErrorMode (uMode=0x0) returned 0x1 [0111.019] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\BbclE9fJrCXzSOud_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\bbcle9fjrcxzsoud_encrypted_by.whiterose")) returned 1 [0111.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0111.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0111.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0111.129] SetErrorMode (uMode=0x1) returned 0x0 [0111.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.129] GetFileType (hFile=0x18c) returned 0x1 [0111.129] SetErrorMode (uMode=0x0) returned 0x1 [0111.129] GetFileType (hFile=0x18c) returned 0x1 [0111.129] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dc6 [0111.129] ReadFile (in: hFile=0x18c, lpBuffer=0x27b4290, nNumberOfBytesToRead=0x6dc6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b4290*, lpNumberOfBytesRead=0x27e648*=0x6dc6, lpOverlapped=0x0) returned 1 [0111.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0111.132] SetErrorMode (uMode=0x1) returned 0x0 [0111.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6)) returned 1 [0111.132] SetErrorMode (uMode=0x0) returned 0x1 [0111.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0111.199] SetErrorMode (uMode=0x1) returned 0x0 [0111.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.201] GetFileType (hFile=0x18c) returned 0x1 [0111.201] SetErrorMode (uMode=0x0) returned 0x1 [0111.201] GetFileType (hFile=0x18c) returned 0x1 [0111.201] WriteFile (in: hFile=0x18c, lpBuffer=0x2838588*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2838588*, lpNumberOfBytesWritten=0x27e6c8*=0x6ed0, lpOverlapped=0x0) returned 1 [0111.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0111.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\EK8Fiwczztv4pqA1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\EK8Fiwczztv4pqA1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.205] SetErrorMode (uMode=0x1) returned 0x0 [0111.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x12f612d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0111.205] SetErrorMode (uMode=0x0) returned 0x1 [0111.205] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\EK8Fiwczztv4pqA1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ek8fiwczztv4pqa1_encrypted_by.whiterose")) returned 1 [0111.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.316] SetErrorMode (uMode=0x1) returned 0x0 [0111.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.316] GetFileType (hFile=0x18c) returned 0x1 [0111.316] SetErrorMode (uMode=0x0) returned 0x1 [0111.317] GetFileType (hFile=0x18c) returned 0x1 [0111.317] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6dd6 [0111.317] ReadFile (in: hFile=0x18c, lpBuffer=0x2841090, nNumberOfBytesToRead=0x6dd6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2841090*, lpNumberOfBytesRead=0x27e648*=0x6dd6, lpOverlapped=0x0) returned 1 [0111.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.319] SetErrorMode (uMode=0x1) returned 0x0 [0111.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6)) returned 1 [0111.319] SetErrorMode (uMode=0x0) returned 0x1 [0111.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.386] SetErrorMode (uMode=0x1) returned 0x0 [0111.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.387] GetFileType (hFile=0x18c) returned 0x1 [0111.387] SetErrorMode (uMode=0x0) returned 0x1 [0111.387] GetFileType (hFile=0x18c) returned 0x1 [0111.387] WriteFile (in: hFile=0x18c, lpBuffer=0x28c5508*, nNumberOfBytesToWrite=0x6ee0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28c5508*, lpNumberOfBytesWritten=0x27e6c8*=0x6ee0, lpOverlapped=0x0) returned 1 [0111.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0111.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\lCOAJW1oHrh4YItN_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\lCOAJW1oHrh4YItN_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.388] SetErrorMode (uMode=0x1) returned 0x0 [0111.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1312a350, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6ee0)) returned 1 [0111.388] SetErrorMode (uMode=0x0) returned 0x1 [0111.389] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\lCOAJW1oHrh4YItN_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\lcoajw1ohrh4yitn_encrypted_by.whiterose")) returned 1 [0111.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0111.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0111.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0111.487] SetErrorMode (uMode=0x1) returned 0x0 [0111.487] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.488] GetFileType (hFile=0x18c) returned 0x1 [0111.488] SetErrorMode (uMode=0x0) returned 0x1 [0111.488] GetFileType (hFile=0x18c) returned 0x1 [0111.488] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6df2 [0111.488] ReadFile (in: hFile=0x18c, lpBuffer=0x28ce000, nNumberOfBytesToRead=0x6df2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28ce000*, lpNumberOfBytesRead=0x27e648*=0x6df2, lpOverlapped=0x0) returned 1 [0111.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0111.490] SetErrorMode (uMode=0x1) returned 0x0 [0111.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2)) returned 1 [0111.490] SetErrorMode (uMode=0x0) returned 0x1 [0111.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0111.551] SetErrorMode (uMode=0x1) returned 0x0 [0111.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.553] GetFileType (hFile=0x18c) returned 0x1 [0111.553] SetErrorMode (uMode=0x0) returned 0x1 [0111.553] GetFileType (hFile=0x18c) returned 0x1 [0111.553] WriteFile (in: hFile=0x18c, lpBuffer=0x2755470*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2755470*, lpNumberOfBytesWritten=0x27e6c8*=0x6f00, lpOverlapped=0x0) returned 1 [0111.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0111.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\c64inf5GZR1kcbSc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\c64inf5GZR1kcbSc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.554] SetErrorMode (uMode=0x1) returned 0x0 [0111.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x132cd270, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6f00)) returned 1 [0111.554] SetErrorMode (uMode=0x0) returned 0x1 [0111.555] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\c64inf5GZR1kcbSc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\c64inf5gzr1kcbsc_encrypted_by.whiterose")) returned 1 [0111.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.659] SetErrorMode (uMode=0x1) returned 0x0 [0111.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.659] GetFileType (hFile=0x18c) returned 0x1 [0111.659] SetErrorMode (uMode=0x0) returned 0x1 [0111.659] GetFileType (hFile=0x18c) returned 0x1 [0111.660] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e56 [0111.660] ReadFile (in: hFile=0x18c, lpBuffer=0x275df30, nNumberOfBytesToRead=0x6e56, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x275df30*, lpNumberOfBytesRead=0x27e648*=0x6e56, lpOverlapped=0x0) returned 1 [0111.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.661] SetErrorMode (uMode=0x1) returned 0x0 [0111.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e56)) returned 1 [0111.662] SetErrorMode (uMode=0x0) returned 0x1 [0111.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.719] SetErrorMode (uMode=0x1) returned 0x0 [0111.720] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.721] GetFileType (hFile=0x18c) returned 0x1 [0111.721] SetErrorMode (uMode=0x0) returned 0x1 [0111.721] GetFileType (hFile=0x18c) returned 0x1 [0111.721] WriteFile (in: hFile=0x18c, lpBuffer=0x27db600*, nNumberOfBytesToWrite=0x6f60, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27db600*, lpNumberOfBytesWritten=0x27e6c8*=0x6f60, lpOverlapped=0x0) returned 1 [0111.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\xfzNAGGt9VZPL*z1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\xfzNAGGt9VZPL*z1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0111.728] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 1 [0111.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.731] SetErrorMode (uMode=0x1) returned 0x0 [0111.731] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.731] GetFileType (hFile=0x18c) returned 0x1 [0111.731] SetErrorMode (uMode=0x0) returned 0x1 [0111.731] GetFileType (hFile=0x18c) returned 0x1 [0111.731] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6e56 [0111.732] ReadFile (in: hFile=0x18c, lpBuffer=0x27e45a8, nNumberOfBytesToRead=0x6e56, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27e45a8*, lpNumberOfBytesRead=0x27e648*=0x6e56, lpOverlapped=0x0) returned 1 [0111.733] CloseHandle (hObject=0x18c) returned 1 [0111.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.734] SetErrorMode (uMode=0x1) returned 0x0 [0111.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e56)) returned 1 [0111.734] SetErrorMode (uMode=0x0) returned 0x1 [0111.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.835] SetErrorMode (uMode=0x1) returned 0x0 [0111.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.836] GetFileType (hFile=0x18c) returned 0x1 [0111.836] SetErrorMode (uMode=0x0) returned 0x1 [0111.836] GetFileType (hFile=0x18c) returned 0x1 [0111.836] WriteFile (in: hFile=0x18c, lpBuffer=0x2868c98*, nNumberOfBytesToWrite=0x6f60, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2868c98*, lpNumberOfBytesWritten=0x27e6c8*=0x6f60, lpOverlapped=0x0) returned 1 [0111.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rKBe3KU6V*o26WFl_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rKBe3KU6V*o26WFl_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0111.849] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 1 [0111.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.852] SetErrorMode (uMode=0x1) returned 0x0 [0111.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.853] GetFileType (hFile=0x18c) returned 0x1 [0111.853] SetErrorMode (uMode=0x0) returned 0x1 [0111.853] GetFileType (hFile=0x18c) returned 0x1 [0111.853] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ebc [0111.853] ReadFile (in: hFile=0x18c, lpBuffer=0x2871c48, nNumberOfBytesToRead=0x6ebc, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2871c48*, lpNumberOfBytesRead=0x27e648*=0x6ebc, lpOverlapped=0x0) returned 1 [0111.857] CloseHandle (hObject=0x18c) returned 1 [0111.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.857] SetErrorMode (uMode=0x1) returned 0x0 [0111.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ebc)) returned 1 [0111.858] SetErrorMode (uMode=0x0) returned 0x1 [0111.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.948] SetErrorMode (uMode=0x1) returned 0x0 [0111.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.949] GetFileType (hFile=0x18c) returned 0x1 [0111.949] SetErrorMode (uMode=0x0) returned 0x1 [0111.949] GetFileType (hFile=0x18c) returned 0x1 [0111.949] WriteFile (in: hFile=0x18c, lpBuffer=0x28f6568*, nNumberOfBytesToWrite=0x6fc0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28f6568*, lpNumberOfBytesWritten=0x27e6c8*=0x6fc0, lpOverlapped=0x0) returned 1 [0111.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\KqZVsZUNoeuB2Y*p_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\KqZVsZUNoeuB2Y*p_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0111.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0111.953] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 1 [0111.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0111.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0111.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0111.956] SetErrorMode (uMode=0x1) returned 0x0 [0111.956] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0111.956] GetFileType (hFile=0x18c) returned 0x1 [0111.956] SetErrorMode (uMode=0x0) returned 0x1 [0111.956] GetFileType (hFile=0x18c) returned 0x1 [0111.956] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6f46 [0111.956] ReadFile (in: hFile=0x18c, lpBuffer=0x28ff578, nNumberOfBytesToRead=0x6f46, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28ff578*, lpNumberOfBytesRead=0x27e648*=0x6f46, lpOverlapped=0x0) returned 1 [0111.973] CloseHandle (hObject=0x18c) returned 1 [0111.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0111.974] SetErrorMode (uMode=0x1) returned 0x0 [0111.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f46)) returned 1 [0111.974] SetErrorMode (uMode=0x0) returned 0x1 [0112.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0112.067] SetErrorMode (uMode=0x1) returned 0x0 [0112.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.069] GetFileType (hFile=0x18c) returned 0x1 [0112.069] SetErrorMode (uMode=0x0) returned 0x1 [0112.069] GetFileType (hFile=0x18c) returned 0x1 [0112.069] WriteFile (in: hFile=0x18c, lpBuffer=0x27842a8*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27842a8*, lpNumberOfBytesWritten=0x27e6c8*=0x7050, lpOverlapped=0x0) returned 1 [0112.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0112.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HpabGeKtSrNHWGst_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HpabGeKtSrNHWGst_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0112.070] SetErrorMode (uMode=0x1) returned 0x0 [0112.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x137b5fd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7050)) returned 1 [0112.071] SetErrorMode (uMode=0x0) returned 0x1 [0112.071] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HpabGeKtSrNHWGst_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\hpabgektsrnhwgst_encrypted_by.whiterose")) returned 1 [0112.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0112.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0112.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0112.174] SetErrorMode (uMode=0x1) returned 0x0 [0112.174] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.174] GetFileType (hFile=0x18c) returned 0x1 [0112.174] SetErrorMode (uMode=0x0) returned 0x1 [0112.174] GetFileType (hFile=0x18c) returned 0x1 [0112.174] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6f50 [0112.174] ReadFile (in: hFile=0x18c, lpBuffer=0x278cf30, nNumberOfBytesToRead=0x6f50, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x278cf30*, lpNumberOfBytesRead=0x27e648*=0x6f50, lpOverlapped=0x0) returned 1 [0112.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0112.176] SetErrorMode (uMode=0x1) returned 0x0 [0112.176] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f50)) returned 1 [0112.176] SetErrorMode (uMode=0x0) returned 0x1 [0112.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0112.239] SetErrorMode (uMode=0x1) returned 0x0 [0112.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.240] GetFileType (hFile=0x18c) returned 0x1 [0112.240] SetErrorMode (uMode=0x0) returned 0x1 [0112.240] GetFileType (hFile=0x18c) returned 0x1 [0112.240] WriteFile (in: hFile=0x18c, lpBuffer=0x2811c50*, nNumberOfBytesToWrite=0x7060, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2811c50*, lpNumberOfBytesWritten=0x27e6c8*=0x7060, lpOverlapped=0x0) returned 1 [0112.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0112.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AmyI8KqQQPoUO74D_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AmyI8KqQQPoUO74D_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0112.242] SetErrorMode (uMode=0x1) returned 0x0 [0112.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x13958ef0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7060)) returned 1 [0112.242] SetErrorMode (uMode=0x0) returned 0x1 [0112.242] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\AmyI8KqQQPoUO74D_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\amyi8kqqqpouo74d_encrypted_by.whiterose")) returned 1 [0112.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0112.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0112.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0112.346] SetErrorMode (uMode=0x1) returned 0x0 [0112.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.347] GetFileType (hFile=0x18c) returned 0x1 [0112.347] SetErrorMode (uMode=0x0) returned 0x1 [0112.348] GetFileType (hFile=0x18c) returned 0x1 [0112.348] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ba2 [0112.348] ReadFile (in: hFile=0x18c, lpBuffer=0x281a8b0, nNumberOfBytesToRead=0x6ba2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x281a8b0*, lpNumberOfBytesRead=0x27e648*=0x6ba2, lpOverlapped=0x0) returned 1 [0112.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0112.350] SetErrorMode (uMode=0x1) returned 0x0 [0112.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2)) returned 1 [0112.351] SetErrorMode (uMode=0x0) returned 0x1 [0112.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0112.413] SetErrorMode (uMode=0x1) returned 0x0 [0112.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.414] GetFileType (hFile=0x18c) returned 0x1 [0112.414] SetErrorMode (uMode=0x0) returned 0x1 [0112.414] GetFileType (hFile=0x18c) returned 0x1 [0112.414] WriteFile (in: hFile=0x18c, lpBuffer=0x289db50*, nNumberOfBytesToWrite=0x6cb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x289db50*, lpNumberOfBytesWritten=0x27e6c8*=0x6cb0, lpOverlapped=0x0) returned 1 [0112.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0112.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rQMqL5u99f8a4zr4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rQMqL5u99f8a4zr4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0112.416] SetErrorMode (uMode=0x1) returned 0x0 [0112.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x13afbe10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb0)) returned 1 [0112.416] SetErrorMode (uMode=0x0) returned 0x1 [0112.416] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\rQMqL5u99f8a4zr4_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\rqmql5u99f8a4zr4_encrypted_by.whiterose")) returned 1 [0112.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0112.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0112.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0112.541] SetErrorMode (uMode=0x1) returned 0x0 [0112.541] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.541] GetFileType (hFile=0x18c) returned 0x1 [0112.541] SetErrorMode (uMode=0x0) returned 0x1 [0112.541] GetFileType (hFile=0x18c) returned 0x1 [0112.541] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ba2 [0112.541] ReadFile (in: hFile=0x18c, lpBuffer=0x28a63d0, nNumberOfBytesToRead=0x6ba2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a63d0*, lpNumberOfBytesRead=0x27e648*=0x6ba2, lpOverlapped=0x0) returned 1 [0112.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0112.543] SetErrorMode (uMode=0x1) returned 0x0 [0112.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2)) returned 1 [0112.544] SetErrorMode (uMode=0x0) returned 0x1 [0112.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0112.620] SetErrorMode (uMode=0x1) returned 0x0 [0112.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.621] GetFileType (hFile=0x18c) returned 0x1 [0112.621] SetErrorMode (uMode=0x0) returned 0x1 [0112.621] GetFileType (hFile=0x18c) returned 0x1 [0112.621] WriteFile (in: hFile=0x18c, lpBuffer=0x2929a88*, nNumberOfBytesToWrite=0x6cb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2929a88*, lpNumberOfBytesWritten=0x27e6c8*=0x6cb0, lpOverlapped=0x0) returned 1 [0112.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0112.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\9IulbthWfcTaBSkP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\9IulbthWfcTaBSkP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0112.623] SetErrorMode (uMode=0x1) returned 0x0 [0112.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x13ceaff0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb0)) returned 1 [0112.623] SetErrorMode (uMode=0x0) returned 0x1 [0112.623] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\9IulbthWfcTaBSkP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\9iulbthwfctabskp_encrypted_by.whiterose")) returned 1 [0112.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.725] SetErrorMode (uMode=0x1) returned 0x0 [0112.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.725] GetFileType (hFile=0x18c) returned 0x1 [0112.725] SetErrorMode (uMode=0x0) returned 0x1 [0112.725] GetFileType (hFile=0x18c) returned 0x1 [0112.725] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7498 [0112.725] ReadFile (in: hFile=0x18c, lpBuffer=0x29322f8, nNumberOfBytesToRead=0x7498, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x29322f8*, lpNumberOfBytesRead=0x27e648*=0x7498, lpOverlapped=0x0) returned 1 [0112.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.752] SetErrorMode (uMode=0x1) returned 0x0 [0112.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7498)) returned 1 [0112.752] SetErrorMode (uMode=0x0) returned 0x1 [0112.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.812] SetErrorMode (uMode=0x1) returned 0x0 [0112.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.813] GetFileType (hFile=0x18c) returned 0x1 [0112.813] SetErrorMode (uMode=0x0) returned 0x1 [0112.813] GetFileType (hFile=0x18c) returned 0x1 [0112.813] WriteFile (in: hFile=0x18c, lpBuffer=0x27b8c28*, nNumberOfBytesToWrite=0x75a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27b8c28*, lpNumberOfBytesWritten=0x27e6c8*=0x75a0, lpOverlapped=0x0) returned 1 [0112.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\PzbfCT5Lo*Ea**eC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\PzbfCT5Lo*Ea**eC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0112.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0112.821] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 1 [0112.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.824] SetErrorMode (uMode=0x1) returned 0x0 [0112.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.825] GetFileType (hFile=0x18c) returned 0x1 [0112.825] SetErrorMode (uMode=0x0) returned 0x1 [0112.825] GetFileType (hFile=0x18c) returned 0x1 [0112.825] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7498 [0112.825] ReadFile (in: hFile=0x18c, lpBuffer=0x27c2210, nNumberOfBytesToRead=0x7498, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27c2210*, lpNumberOfBytesRead=0x27e648*=0x7498, lpOverlapped=0x0) returned 1 [0112.828] CloseHandle (hObject=0x18c) returned 1 [0112.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.829] SetErrorMode (uMode=0x1) returned 0x0 [0112.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7498)) returned 1 [0112.830] SetErrorMode (uMode=0x0) returned 0x1 [0112.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.941] SetErrorMode (uMode=0x1) returned 0x0 [0112.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.943] GetFileType (hFile=0x18c) returned 0x1 [0112.943] SetErrorMode (uMode=0x0) returned 0x1 [0112.943] GetFileType (hFile=0x18c) returned 0x1 [0112.944] WriteFile (in: hFile=0x18c, lpBuffer=0x2848e50*, nNumberOfBytesToWrite=0x75a0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2848e50*, lpNumberOfBytesWritten=0x27e6c8*=0x75a0, lpOverlapped=0x0) returned 1 [0112.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\W*Uj44bV3PUyM53j_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\W*Uj44bV3PUyM53j_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0112.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0112.947] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 1 [0112.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0112.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0112.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0112.950] SetErrorMode (uMode=0x1) returned 0x0 [0112.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0112.951] GetFileType (hFile=0x18c) returned 0x1 [0112.951] SetErrorMode (uMode=0x0) returned 0x1 [0112.951] GetFileType (hFile=0x18c) returned 0x1 [0112.951] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7416 [0112.951] ReadFile (in: hFile=0x18c, lpBuffer=0x2852440, nNumberOfBytesToRead=0x7416, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2852440*, lpNumberOfBytesRead=0x27e648*=0x7416, lpOverlapped=0x0) returned 1 [0112.995] CloseHandle (hObject=0x18c) returned 1 [0112.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0112.996] SetErrorMode (uMode=0x1) returned 0x0 [0112.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7416)) returned 1 [0112.996] SetErrorMode (uMode=0x0) returned 0x1 [0113.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0113.132] SetErrorMode (uMode=0x1) returned 0x0 [0113.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.136] GetFileType (hFile=0x18c) returned 0x1 [0113.136] SetErrorMode (uMode=0x0) returned 0x1 [0113.136] GetFileType (hFile=0x18c) returned 0x1 [0113.136] WriteFile (in: hFile=0x18c, lpBuffer=0x28d8d28*, nNumberOfBytesToWrite=0x7520, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d8d28*, lpNumberOfBytesWritten=0x27e6c8*=0x7520, lpOverlapped=0x0) returned 1 [0113.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0113.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eQg1uhbDuV10H7wn_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eQg1uhbDuV10H7wn_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0113.139] SetErrorMode (uMode=0x1) returned 0x0 [0113.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x141d3d50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7520)) returned 1 [0113.140] SetErrorMode (uMode=0x0) returned 0x1 [0113.140] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\eQg1uhbDuV10H7wn_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\eqg1uhbduv10h7wn_encrypted_by.whiterose")) returned 1 [0113.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.250] SetErrorMode (uMode=0x1) returned 0x0 [0113.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.251] GetFileType (hFile=0x18c) returned 0x1 [0113.251] SetErrorMode (uMode=0x0) returned 0x1 [0113.251] GetFileType (hFile=0x18c) returned 0x1 [0113.251] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d76 [0113.251] ReadFile (in: hFile=0x18c, lpBuffer=0x28e1e08, nNumberOfBytesToRead=0x6d76, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28e1e08*, lpNumberOfBytesRead=0x27e648*=0x6d76, lpOverlapped=0x0) returned 1 [0113.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.253] SetErrorMode (uMode=0x1) returned 0x0 [0113.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d76)) returned 1 [0113.253] SetErrorMode (uMode=0x0) returned 0x1 [0113.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.324] SetErrorMode (uMode=0x1) returned 0x0 [0113.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.325] GetFileType (hFile=0x18c) returned 0x1 [0113.325] SetErrorMode (uMode=0x0) returned 0x1 [0113.325] GetFileType (hFile=0x18c) returned 0x1 [0113.325] WriteFile (in: hFile=0x18c, lpBuffer=0x2765900*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2765900*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0113.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\enmBlWZ*7YRJbpVe_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\enmBlWZ*7YRJbpVe_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0113.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0113.330] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 1 [0113.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0113.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0113.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0113.334] SetErrorMode (uMode=0x1) returned 0x0 [0113.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.334] GetFileType (hFile=0x18c) returned 0x1 [0113.334] SetErrorMode (uMode=0x0) returned 0x1 [0113.334] GetFileType (hFile=0x18c) returned 0x1 [0113.334] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6d76 [0113.335] ReadFile (in: hFile=0x18c, lpBuffer=0x276e7c8, nNumberOfBytesToRead=0x6d76, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x276e7c8*, lpNumberOfBytesRead=0x27e648*=0x6d76, lpOverlapped=0x0) returned 1 [0113.336] CloseHandle (hObject=0x18c) returned 1 [0113.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0113.337] SetErrorMode (uMode=0x1) returned 0x0 [0113.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2a9280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d76)) returned 1 [0113.337] SetErrorMode (uMode=0x0) returned 0x1 [0113.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0113.427] SetErrorMode (uMode=0x1) returned 0x0 [0113.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.428] GetFileType (hFile=0x18c) returned 0x1 [0113.428] SetErrorMode (uMode=0x0) returned 0x1 [0113.428] GetFileType (hFile=0x18c) returned 0x1 [0113.429] WriteFile (in: hFile=0x18c, lpBuffer=0x27f2948*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27f2948*, lpNumberOfBytesWritten=0x27e6c8*=0x6e80, lpOverlapped=0x0) returned 1 [0113.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0113.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ZgSez7WhKJjCOZwX_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ZgSez7WhKJjCOZwX_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0113.430] SetErrorMode (uMode=0x1) returned 0x0 [0113.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2a9280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x144a7770, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0113.430] SetErrorMode (uMode=0x0) returned 0x1 [0113.430] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\ZgSez7WhKJjCOZwX_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\zgsez7whkjjcozwx_encrypted_by.whiterose")) returned 1 [0113.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0113.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0113.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0113.531] SetErrorMode (uMode=0x1) returned 0x0 [0113.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.532] GetFileType (hFile=0x18c) returned 0x1 [0113.532] SetErrorMode (uMode=0x0) returned 0x1 [0113.532] GetFileType (hFile=0x18c) returned 0x1 [0113.532] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ef0 [0113.532] ReadFile (in: hFile=0x18c, lpBuffer=0x27fb388, nNumberOfBytesToRead=0x6ef0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27fb388*, lpNumberOfBytesRead=0x27e648*=0x6ef0, lpOverlapped=0x0) returned 1 [0113.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0113.534] SetErrorMode (uMode=0x1) returned 0x0 [0113.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0)) returned 1 [0113.535] SetErrorMode (uMode=0x0) returned 0x1 [0113.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0113.609] SetErrorMode (uMode=0x1) returned 0x0 [0113.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.611] GetFileType (hFile=0x18c) returned 0x1 [0113.611] SetErrorMode (uMode=0x0) returned 0x1 [0113.611] GetFileType (hFile=0x18c) returned 0x1 [0113.611] WriteFile (in: hFile=0x18c, lpBuffer=0x287ffc8*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x287ffc8*, lpNumberOfBytesWritten=0x27e6c8*=0x7000, lpOverlapped=0x0) returned 1 [0113.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0113.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\vx6mLCrCJd0kG6U8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\vx6mLCrCJd0kG6U8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0113.612] SetErrorMode (uMode=0x1) returned 0x0 [0113.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x146707f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0113.612] SetErrorMode (uMode=0x0) returned 0x1 [0113.612] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\vx6mLCrCJd0kG6U8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\vx6mlcrcjd0kg6u8_encrypted_by.whiterose")) returned 1 [0113.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0113.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0113.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0113.718] SetErrorMode (uMode=0x1) returned 0x0 [0113.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.718] GetFileType (hFile=0x18c) returned 0x1 [0113.719] SetErrorMode (uMode=0x0) returned 0x1 [0113.719] GetFileType (hFile=0x18c) returned 0x1 [0113.719] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6ef0 [0113.719] ReadFile (in: hFile=0x18c, lpBuffer=0x2888b98, nNumberOfBytesToRead=0x6ef0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2888b98*, lpNumberOfBytesRead=0x27e648*=0x6ef0, lpOverlapped=0x0) returned 1 [0113.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0113.721] SetErrorMode (uMode=0x1) returned 0x0 [0113.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0)) returned 1 [0113.721] SetErrorMode (uMode=0x0) returned 0x1 [0113.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0113.777] SetErrorMode (uMode=0x1) returned 0x0 [0113.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.778] GetFileType (hFile=0x18c) returned 0x1 [0113.778] SetErrorMode (uMode=0x0) returned 0x1 [0113.778] GetFileType (hFile=0x18c) returned 0x1 [0113.779] WriteFile (in: hFile=0x18c, lpBuffer=0x290d600*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x290d600*, lpNumberOfBytesWritten=0x27e6c8*=0x7000, lpOverlapped=0x0) returned 1 [0113.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0113.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JHuuEVFWZxE7VTvv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JHuuEVFWZxE7VTvv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0113.780] SetErrorMode (uMode=0x1) returned 0x0 [0113.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x14813710, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0113.780] SetErrorMode (uMode=0x0) returned 0x1 [0113.780] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\JHuuEVFWZxE7VTvv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\jhuuevfwzxe7vtvv_encrypted_by.whiterose")) returned 1 [0113.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0113.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0113.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0113.890] SetErrorMode (uMode=0x1) returned 0x0 [0113.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.891] GetFileType (hFile=0x18c) returned 0x1 [0113.891] SetErrorMode (uMode=0x0) returned 0x1 [0113.891] GetFileType (hFile=0x18c) returned 0x1 [0113.891] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x715c [0113.891] ReadFile (in: hFile=0x18c, lpBuffer=0x29161c0, nNumberOfBytesToRead=0x715c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x29161c0*, lpNumberOfBytesRead=0x27e648*=0x715c, lpOverlapped=0x0) returned 1 [0113.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0113.893] SetErrorMode (uMode=0x1) returned 0x0 [0113.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x715c)) returned 1 [0113.893] SetErrorMode (uMode=0x0) returned 0x1 [0113.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0113.950] SetErrorMode (uMode=0x1) returned 0x0 [0113.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0113.952] GetFileType (hFile=0x18c) returned 0x1 [0113.952] SetErrorMode (uMode=0x0) returned 0x1 [0113.952] GetFileType (hFile=0x18c) returned 0x1 [0113.952] WriteFile (in: hFile=0x18c, lpBuffer=0x279bd10*, nNumberOfBytesToWrite=0x7260, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x279bd10*, lpNumberOfBytesWritten=0x27e6c8*=0x7260, lpOverlapped=0x0) returned 1 [0113.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0113.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\5S2ZRlhJ0BDBtRci_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\5S2ZRlhJ0BDBtRci_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0113.954] SetErrorMode (uMode=0x1) returned 0x0 [0113.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x149b6630, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7260)) returned 1 [0113.954] SetErrorMode (uMode=0x0) returned 0x1 [0113.954] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\5S2ZRlhJ0BDBtRci_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\5s2zrlhj0bdbtrci_encrypted_by.whiterose")) returned 1 [0114.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0114.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0114.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0114.061] SetErrorMode (uMode=0x1) returned 0x0 [0114.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.062] GetFileType (hFile=0x18c) returned 0x1 [0114.062] SetErrorMode (uMode=0x0) returned 0x1 [0114.062] GetFileType (hFile=0x18c) returned 0x1 [0114.062] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7144 [0114.062] ReadFile (in: hFile=0x18c, lpBuffer=0x27a4b40, nNumberOfBytesToRead=0x7144, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27a4b40*, lpNumberOfBytesRead=0x27e648*=0x7144, lpOverlapped=0x0) returned 1 [0114.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0114.064] SetErrorMode (uMode=0x1) returned 0x0 [0114.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7144)) returned 1 [0114.064] SetErrorMode (uMode=0x0) returned 0x1 [0114.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0114.120] SetErrorMode (uMode=0x1) returned 0x0 [0114.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.121] GetFileType (hFile=0x18c) returned 0x1 [0114.121] SetErrorMode (uMode=0x0) returned 0x1 [0114.121] GetFileType (hFile=0x18c) returned 0x1 [0114.121] WriteFile (in: hFile=0x18c, lpBuffer=0x282a398*, nNumberOfBytesToWrite=0x7250, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x282a398*, lpNumberOfBytesWritten=0x27e6c8*=0x7250, lpOverlapped=0x0) returned 1 [0114.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0114.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VleHvFm2q3lTIkBJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VleHvFm2q3lTIkBJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0114.122] SetErrorMode (uMode=0x1) returned 0x0 [0114.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x14b333f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7250)) returned 1 [0114.122] SetErrorMode (uMode=0x0) returned 0x1 [0114.123] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\VleHvFm2q3lTIkBJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\vlehvfm2q3ltikbj_encrypted_by.whiterose")) returned 1 [0114.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0114.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0114.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0114.233] SetErrorMode (uMode=0x1) returned 0x0 [0114.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.234] GetFileType (hFile=0x18c) returned 0x1 [0114.234] SetErrorMode (uMode=0x0) returned 0x1 [0114.234] GetFileType (hFile=0x18c) returned 0x1 [0114.234] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x715c [0114.234] ReadFile (in: hFile=0x18c, lpBuffer=0x28331c0, nNumberOfBytesToRead=0x715c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28331c0*, lpNumberOfBytesRead=0x27e648*=0x715c, lpOverlapped=0x0) returned 1 [0114.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0114.237] SetErrorMode (uMode=0x1) returned 0x0 [0114.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x715c)) returned 1 [0114.237] SetErrorMode (uMode=0x0) returned 0x1 [0114.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0114.296] SetErrorMode (uMode=0x1) returned 0x0 [0114.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.298] GetFileType (hFile=0x18c) returned 0x1 [0114.298] SetErrorMode (uMode=0x0) returned 0x1 [0114.298] GetFileType (hFile=0x18c) returned 0x1 [0114.298] WriteFile (in: hFile=0x18c, lpBuffer=0x28b8ab8*, nNumberOfBytesToWrite=0x7260, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28b8ab8*, lpNumberOfBytesWritten=0x27e6c8*=0x7260, lpOverlapped=0x0) returned 1 [0114.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0114.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fwLbI7YOA6kogihw_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fwLbI7YOA6kogihw_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0114.300] SetErrorMode (uMode=0x1) returned 0x0 [0114.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x14cfc470, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7260)) returned 1 [0114.300] SetErrorMode (uMode=0x0) returned 0x1 [0114.300] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\fwLbI7YOA6kogihw_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\fwlbi7yoa6kogihw_encrypted_by.whiterose")) returned 1 [0114.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0114.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0114.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0114.405] SetErrorMode (uMode=0x1) returned 0x0 [0114.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.405] GetFileType (hFile=0x18c) returned 0x1 [0114.405] SetErrorMode (uMode=0x0) returned 0x1 [0114.405] GetFileType (hFile=0x18c) returned 0x1 [0114.405] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7288 [0114.405] ReadFile (in: hFile=0x18c, lpBuffer=0x28c18d8, nNumberOfBytesToRead=0x7288, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28c18d8*, lpNumberOfBytesRead=0x27e648*=0x7288, lpOverlapped=0x0) returned 1 [0114.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0114.408] SetErrorMode (uMode=0x1) returned 0x0 [0114.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7288)) returned 1 [0114.408] SetErrorMode (uMode=0x0) returned 0x1 [0114.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0114.468] SetErrorMode (uMode=0x1) returned 0x0 [0114.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.469] GetFileType (hFile=0x18c) returned 0x1 [0114.469] SetErrorMode (uMode=0x0) returned 0x1 [0114.469] GetFileType (hFile=0x18c) returned 0x1 [0114.469] WriteFile (in: hFile=0x18c, lpBuffer=0x274f760*, nNumberOfBytesToWrite=0x7390, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x274f760*, lpNumberOfBytesWritten=0x27e6c8*=0x7390, lpOverlapped=0x0) returned 1 [0114.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0114.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\8ZZUmp47Rv4FvMGW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\8ZZUmp47Rv4FvMGW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0114.470] SetErrorMode (uMode=0x1) returned 0x0 [0114.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x14e9f390, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7390)) returned 1 [0114.471] SetErrorMode (uMode=0x0) returned 0x1 [0114.471] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\8ZZUmp47Rv4FvMGW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\8zzump47rv4fvmgw_encrypted_by.whiterose")) returned 1 [0114.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0114.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0114.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0114.576] SetErrorMode (uMode=0x1) returned 0x0 [0114.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.576] GetFileType (hFile=0x18c) returned 0x1 [0114.576] SetErrorMode (uMode=0x0) returned 0x1 [0114.576] GetFileType (hFile=0x18c) returned 0x1 [0114.577] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x7288 [0114.577] ReadFile (in: hFile=0x18c, lpBuffer=0x27586c0, nNumberOfBytesToRead=0x7288, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27586c0*, lpNumberOfBytesRead=0x27e648*=0x7288, lpOverlapped=0x0) returned 1 [0114.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0114.578] SetErrorMode (uMode=0x1) returned 0x0 [0114.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7288)) returned 1 [0114.578] SetErrorMode (uMode=0x0) returned 0x1 [0114.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0114.639] SetErrorMode (uMode=0x1) returned 0x0 [0114.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.640] GetFileType (hFile=0x18c) returned 0x1 [0114.640] SetErrorMode (uMode=0x0) returned 0x1 [0114.640] GetFileType (hFile=0x18c) returned 0x1 [0114.640] WriteFile (in: hFile=0x18c, lpBuffer=0x27d71e0*, nNumberOfBytesToWrite=0x7390, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27d71e0*, lpNumberOfBytesWritten=0x27e6c8*=0x7390, lpOverlapped=0x0) returned 1 [0114.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0114.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\YsdC3J8n0WLXKg6l_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\YsdC3J8n0WLXKg6l_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0114.642] SetErrorMode (uMode=0x1) returned 0x0 [0114.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x150422b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7390)) returned 1 [0114.642] SetErrorMode (uMode=0x0) returned 0x1 [0114.642] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\YsdC3J8n0WLXKg6l_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\ysdc3j8n0wlxkg6l_encrypted_by.whiterose")) returned 1 [0114.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.748] SetErrorMode (uMode=0x1) returned 0x0 [0114.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.748] GetFileType (hFile=0x18c) returned 0x1 [0114.749] SetErrorMode (uMode=0x0) returned 0x1 [0114.749] GetFileType (hFile=0x18c) returned 0x1 [0114.749] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x724e [0114.749] ReadFile (in: hFile=0x18c, lpBuffer=0x27e0130, nNumberOfBytesToRead=0x724e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27e0130*, lpNumberOfBytesRead=0x27e648*=0x724e, lpOverlapped=0x0) returned 1 [0114.752] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.752] SetErrorMode (uMode=0x1) returned 0x0 [0114.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724e)) returned 1 [0114.753] SetErrorMode (uMode=0x0) returned 0x1 [0114.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.808] SetErrorMode (uMode=0x1) returned 0x0 [0114.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.809] GetFileType (hFile=0x18c) returned 0x1 [0114.809] SetErrorMode (uMode=0x0) returned 0x1 [0114.809] GetFileType (hFile=0x18c) returned 0x1 [0114.809] WriteFile (in: hFile=0x18c, lpBuffer=0x2865f60*, nNumberOfBytesToWrite=0x7350, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2865f60*, lpNumberOfBytesWritten=0x27e6c8*=0x7350, lpOverlapped=0x0) returned 1 [0114.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\iDK9d*Jai1KsieM0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\iDK9d*Jai1KsieM0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0114.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0114.820] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 1 [0114.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.823] SetErrorMode (uMode=0x1) returned 0x0 [0114.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.823] GetFileType (hFile=0x18c) returned 0x1 [0114.823] SetErrorMode (uMode=0x0) returned 0x1 [0114.823] GetFileType (hFile=0x18c) returned 0x1 [0114.823] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x724e [0114.823] ReadFile (in: hFile=0x18c, lpBuffer=0x286f2f8, nNumberOfBytesToRead=0x724e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x286f2f8*, lpNumberOfBytesRead=0x27e648*=0x724e, lpOverlapped=0x0) returned 1 [0114.825] CloseHandle (hObject=0x18c) returned 1 [0114.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.826] SetErrorMode (uMode=0x1) returned 0x0 [0114.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724e)) returned 1 [0114.826] SetErrorMode (uMode=0x0) returned 0x1 [0114.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.929] SetErrorMode (uMode=0x1) returned 0x0 [0114.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.931] GetFileType (hFile=0x18c) returned 0x1 [0114.931] SetErrorMode (uMode=0x0) returned 0x1 [0114.931] GetFileType (hFile=0x18c) returned 0x1 [0114.931] WriteFile (in: hFile=0x18c, lpBuffer=0x28f5138*, nNumberOfBytesToWrite=0x7350, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28f5138*, lpNumberOfBytesWritten=0x27e6c8*=0x7350, lpOverlapped=0x0) returned 1 [0114.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\d8MzFdXM7d*DC1Su_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\d8MzFdXM7d*DC1Su_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0114.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0114.935] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 1 [0114.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0114.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0114.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0114.939] SetErrorMode (uMode=0x1) returned 0x0 [0114.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0114.939] GetFileType (hFile=0x18c) returned 0x1 [0114.939] SetErrorMode (uMode=0x0) returned 0x1 [0114.939] GetFileType (hFile=0x18c) returned 0x1 [0114.939] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x6068 [0114.939] ReadFile (in: hFile=0x18c, lpBuffer=0x28fe4d8, nNumberOfBytesToRead=0x6068, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28fe4d8*, lpNumberOfBytesRead=0x27e648*=0x6068, lpOverlapped=0x0) returned 1 [0114.941] CloseHandle (hObject=0x18c) returned 1 [0114.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0114.942] SetErrorMode (uMode=0x1) returned 0x0 [0114.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6068)) returned 1 [0114.942] SetErrorMode (uMode=0x0) returned 0x1 [0115.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0115.035] SetErrorMode (uMode=0x1) returned 0x0 [0115.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.036] GetFileType (hFile=0x18c) returned 0x1 [0115.036] SetErrorMode (uMode=0x0) returned 0x1 [0115.036] GetFileType (hFile=0x18c) returned 0x1 [0115.036] WriteFile (in: hFile=0x18c, lpBuffer=0x277c660*, nNumberOfBytesToWrite=0x6170, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x277c660*, lpNumberOfBytesWritten=0x27e6c8*=0x6170, lpOverlapped=0x0) returned 1 [0115.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0115.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1vs3EzvZqXvrRwFW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1vs3EzvZqXvrRwFW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0115.038] SetErrorMode (uMode=0x1) returned 0x0 [0115.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x153fa510, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6170)) returned 1 [0115.038] SetErrorMode (uMode=0x0) returned 0x1 [0115.038] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\1vs3EzvZqXvrRwFW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\1vs3ezvzqxvrrwfw_encrypted_by.whiterose")) returned 1 [0115.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0115.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0115.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0115.138] SetErrorMode (uMode=0x1) returned 0x0 [0115.138] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.138] GetFileType (hFile=0x18c) returned 0x1 [0115.138] SetErrorMode (uMode=0x0) returned 0x1 [0115.138] GetFileType (hFile=0x18c) returned 0x1 [0115.138] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x605a [0115.138] ReadFile (in: hFile=0x18c, lpBuffer=0x27843a8, nNumberOfBytesToRead=0x605a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27843a8*, lpNumberOfBytesRead=0x27e648*=0x605a, lpOverlapped=0x0) returned 1 [0115.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0115.140] SetErrorMode (uMode=0x1) returned 0x0 [0115.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x605a)) returned 1 [0115.141] SetErrorMode (uMode=0x0) returned 0x1 [0115.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0115.202] SetErrorMode (uMode=0x1) returned 0x0 [0115.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.204] GetFileType (hFile=0x18c) returned 0x1 [0115.204] SetErrorMode (uMode=0x0) returned 0x1 [0115.204] GetFileType (hFile=0x18c) returned 0x1 [0115.204] WriteFile (in: hFile=0x18c, lpBuffer=0x2803688*, nNumberOfBytesToWrite=0x6160, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2803688*, lpNumberOfBytesWritten=0x27e6c8*=0x6160, lpOverlapped=0x0) returned 1 [0115.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0115.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\45lmiZsPxO5Wp9LI_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\45lmiZsPxO5Wp9LI_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0115.205] SetErrorMode (uMode=0x1) returned 0x0 [0115.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1559d430, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6160)) returned 1 [0115.205] SetErrorMode (uMode=0x0) returned 0x1 [0115.206] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\45lmiZsPxO5Wp9LI_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\45lmizspxo5wp9li_encrypted_by.whiterose")) returned 1 [0115.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.309] SetErrorMode (uMode=0x1) returned 0x0 [0115.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.310] GetFileType (hFile=0x18c) returned 0x1 [0115.310] SetErrorMode (uMode=0x0) returned 0x1 [0115.310] GetFileType (hFile=0x18c) returned 0x1 [0115.310] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x608c [0115.310] ReadFile (in: hFile=0x18c, lpBuffer=0x280b420, nNumberOfBytesToRead=0x608c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x280b420*, lpNumberOfBytesRead=0x27e648*=0x608c, lpOverlapped=0x0) returned 1 [0115.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.312] SetErrorMode (uMode=0x1) returned 0x0 [0115.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x608c)) returned 1 [0115.312] SetErrorMode (uMode=0x0) returned 0x1 [0115.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.380] SetErrorMode (uMode=0x1) returned 0x0 [0115.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.382] GetFileType (hFile=0x18c) returned 0x1 [0115.382] SetErrorMode (uMode=0x0) returned 0x1 [0115.382] GetFileType (hFile=0x18c) returned 0x1 [0115.382] WriteFile (in: hFile=0x18c, lpBuffer=0x288a8d8*, nNumberOfBytesToWrite=0x6190, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x288a8d8*, lpNumberOfBytesWritten=0x27e6c8*=0x6190, lpOverlapped=0x0) returned 1 [0115.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Uxz6Yhx9PeMdEC*9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\Uxz6Yhx9PeMdEC*9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0115.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0115.385] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 1 [0115.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x66 [0115.389] SetErrorMode (uMode=0x1) returned 0x0 [0115.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.390] GetFileType (hFile=0x18c) returned 0x1 [0115.390] SetErrorMode (uMode=0x0) returned 0x1 [0115.390] GetFileType (hFile=0x18c) returned 0x1 [0115.392] WriteFile (in: hFile=0x18c, lpBuffer=0x28a3850*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28a3850*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0115.393] WriteFile (in: hFile=0x18c, lpBuffer=0x28a3850*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28a3850*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0115.393] CloseHandle (hObject=0x18c) returned 1 [0115.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", lpFilePart=0x0) returned 0x47 [0115.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", lpFilePart=0x0) returned 0x47 [0115.394] SetErrorMode (uMode=0x1) returned 0x0 [0115.394] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0115.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0 [0115.395] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.397] SetErrorMode (uMode=0x0) returned 0x1 [0115.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", lpFilePart=0x0) returned 0x47 [0115.398] SetErrorMode (uMode=0x1) returned 0x0 [0115.398] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.398] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.398] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0115.398] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0 [0115.398] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.399] SetErrorMode (uMode=0x0) returned 0x1 [0115.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", lpFilePart=0x0) returned 0x51 [0115.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", lpFilePart=0x0) returned 0x51 [0115.399] SetErrorMode (uMode=0x1) returned 0x0 [0115.399] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0115.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 0 [0115.400] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.400] SetErrorMode (uMode=0x0) returned 0x1 [0115.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", lpFilePart=0x0) returned 0x51 [0115.400] SetErrorMode (uMode=0x1) returned 0x0 [0115.400] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0115.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 0 [0115.401] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.401] SetErrorMode (uMode=0x0) returned 0x1 [0115.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", lpFilePart=0x0) returned 0x57 [0115.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", lpFilePart=0x0) returned 0x57 [0115.401] SetErrorMode (uMode=0x1) returned 0x0 [0115.401] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0115.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0115.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0115.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0115.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0115.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0115.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0115.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0115.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0115.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0115.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0115.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0115.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3c8900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1ff880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0115.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0115.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw32.clx", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4669e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw38.hsp", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57400, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw56.ths", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.fca", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.hyp", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn16.clx", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3b11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn47.hsp", cAlternateFileName="")) returned 1 [0115.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.fca", cAlternateFileName="")) returned 1 [0115.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.hyp", cAlternateFileName="")) returned 1 [0115.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xafcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol103.hsp", cAlternateFileName="")) returned 1 [0115.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol32.clx", cAlternateFileName="")) returned 1 [0115.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.fca", cAlternateFileName="")) returned 1 [0115.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.hyp", cAlternateFileName="")) returned 1 [0115.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt32.clx", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1766c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt39.hsp", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum.hyp", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum124.lex", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum32.clx", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2478, dwReserved0=0x0, dwReserved1=0x0, cFileName="rumphon.env", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x70ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus101.hsp", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8025, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus32.clx", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.fca", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.hyp", cAlternateFileName="")) returned 1 [0115.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9e2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr105.hsp", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr32.clx", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr96.ths", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.fca", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.hyp", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo113.hsp", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo32.clx", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv.hyp", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51800, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv137.lex", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv32.clx", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="slvphon.env", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1 [0115.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33c91, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn24.hsp", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn32.clx", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x84800, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn62.ths", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.fca", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.hyp", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd32.clx", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x821bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd43.hsp", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd58.ths", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.fca", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.hyp", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur111.hsp", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur32.clx", cAlternateFileName="")) returned 1 [0115.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa.fca", cAlternateFileName="")) returned 1 [0115.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.hsp", cAlternateFileName="")) returned 1 [0115.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.ths", cAlternateFileName="")) returned 1 [0115.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 1 [0115.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 0 [0115.419] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.420] SetErrorMode (uMode=0x0) returned 0x1 [0115.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", lpFilePart=0x0) returned 0x57 [0115.420] SetErrorMode (uMode=0x1) returned 0x0 [0115.420] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0115.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0115.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0115.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0115.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0115.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3c8900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0115.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1ff880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0115.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0115.427] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.428] SetErrorMode (uMode=0x0) returned 0x1 [0115.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", lpFilePart=0x0) returned 0x62 [0115.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", lpFilePart=0x0) returned 0x62 [0115.428] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.429] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.429] CoTaskMemFree (pv=0xffa70) [0115.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", lpFilePart=0x0) returned 0x61 [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", lpFilePart=0x0) returned 0x61 [0115.429] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.429] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.429] CoTaskMemFree (pv=0xffa70) [0115.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", lpFilePart=0x0) returned 0x63 [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", lpFilePart=0x0) returned 0x63 [0115.429] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.429] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.429] CoTaskMemFree (pv=0xffa70) [0115.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", lpFilePart=0x0) returned 0x5f [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", lpFilePart=0x0) returned 0x5f [0115.429] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.429] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.429] CoTaskMemFree (pv=0xffa70) [0115.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", lpFilePart=0x0) returned 0x5f [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", lpFilePart=0x0) returned 0x5f [0115.430] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.430] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.430] CoTaskMemFree (pv=0xffa70) [0115.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", lpFilePart=0x0) returned 0x61 [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", lpFilePart=0x0) returned 0x61 [0115.430] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.430] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.430] CoTaskMemFree (pv=0xffa70) [0115.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", lpFilePart=0x0) returned 0x61 [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", lpFilePart=0x0) returned 0x61 [0115.430] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.430] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.430] CoTaskMemFree (pv=0xffa70) [0115.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", lpFilePart=0x0) returned 0x61 [0115.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", lpFilePart=0x0) returned 0x61 [0115.430] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.430] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.431] CoTaskMemFree (pv=0xffa70) [0115.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", lpFilePart=0x0) returned 0x5f [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", lpFilePart=0x0) returned 0x5f [0115.431] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.431] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.431] CoTaskMemFree (pv=0xffa70) [0115.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", lpFilePart=0x0) returned 0x5f [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", lpFilePart=0x0) returned 0x5f [0115.431] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.431] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.431] CoTaskMemFree (pv=0xffa70) [0115.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", lpFilePart=0x0) returned 0x61 [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", lpFilePart=0x0) returned 0x61 [0115.431] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.431] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.431] CoTaskMemFree (pv=0xffa70) [0115.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", lpFilePart=0x0) returned 0x61 [0115.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", lpFilePart=0x0) returned 0x61 [0115.432] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.432] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.432] CoTaskMemFree (pv=0xffa70) [0115.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", lpFilePart=0x0) returned 0x5f [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", lpFilePart=0x0) returned 0x5f [0115.432] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.432] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.432] CoTaskMemFree (pv=0xffa70) [0115.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", lpFilePart=0x0) returned 0x62 [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", lpFilePart=0x0) returned 0x62 [0115.432] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.432] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.432] CoTaskMemFree (pv=0xffa70) [0115.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", lpFilePart=0x0) returned 0x61 [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", lpFilePart=0x0) returned 0x61 [0115.432] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.432] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.432] CoTaskMemFree (pv=0xffa70) [0115.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", lpFilePart=0x0) returned 0x63 [0115.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", lpFilePart=0x0) returned 0x63 [0115.433] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.433] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.433] CoTaskMemFree (pv=0xffa70) [0115.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", lpFilePart=0x0) returned 0x5f [0115.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", lpFilePart=0x0) returned 0x5f [0115.433] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.433] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.433] CoTaskMemFree (pv=0xffa70) [0115.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", lpFilePart=0x0) returned 0x5f [0115.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", lpFilePart=0x0) returned 0x5f [0115.433] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.433] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.433] CoTaskMemFree (pv=0xffa70) [0115.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", lpFilePart=0x0) returned 0x61 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", lpFilePart=0x0) returned 0x61 [0115.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.434] CoTaskMemFree (pv=0xffa70) [0115.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", lpFilePart=0x0) returned 0x62 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", lpFilePart=0x0) returned 0x62 [0115.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.434] CoTaskMemFree (pv=0xffa70) [0115.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", lpFilePart=0x0) returned 0x61 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", lpFilePart=0x0) returned 0x61 [0115.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.434] CoTaskMemFree (pv=0xffa70) [0115.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", lpFilePart=0x0) returned 0x5f [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", lpFilePart=0x0) returned 0x5f [0115.435] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.435] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.435] CoTaskMemFree (pv=0xffa70) [0115.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", lpFilePart=0x0) returned 0x5f [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", lpFilePart=0x0) returned 0x5f [0115.435] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.435] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.435] CoTaskMemFree (pv=0xffa70) [0115.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", lpFilePart=0x0) returned 0x61 [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", lpFilePart=0x0) returned 0x61 [0115.435] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.435] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.435] CoTaskMemFree (pv=0xffa70) [0115.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", lpFilePart=0x0) returned 0x61 [0115.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", lpFilePart=0x0) returned 0x61 [0115.435] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.435] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.436] CoTaskMemFree (pv=0xffa70) [0115.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", lpFilePart=0x0) returned 0x61 [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", lpFilePart=0x0) returned 0x61 [0115.436] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.436] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.436] CoTaskMemFree (pv=0xffa70) [0115.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", lpFilePart=0x0) returned 0x5f [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", lpFilePart=0x0) returned 0x5f [0115.436] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.436] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.436] CoTaskMemFree (pv=0xffa70) [0115.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", lpFilePart=0x0) returned 0x5f [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", lpFilePart=0x0) returned 0x5f [0115.436] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.436] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.436] CoTaskMemFree (pv=0xffa70) [0115.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", lpFilePart=0x0) returned 0x61 [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", lpFilePart=0x0) returned 0x61 [0115.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.437] CoTaskMemFree (pv=0xffa70) [0115.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", lpFilePart=0x0) returned 0x61 [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", lpFilePart=0x0) returned 0x61 [0115.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.437] CoTaskMemFree (pv=0xffa70) [0115.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", lpFilePart=0x0) returned 0x5f [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", lpFilePart=0x0) returned 0x5f [0115.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.437] CoTaskMemFree (pv=0xffa70) [0115.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", lpFilePart=0x0) returned 0x5f [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", lpFilePart=0x0) returned 0x5f [0115.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.437] CoTaskMemFree (pv=0xffa70) [0115.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", lpFilePart=0x0) returned 0x62 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", lpFilePart=0x0) returned 0x62 [0115.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.438] CoTaskMemFree (pv=0xffa70) [0115.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", lpFilePart=0x0) returned 0x61 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", lpFilePart=0x0) returned 0x61 [0115.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.438] CoTaskMemFree (pv=0xffa70) [0115.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", lpFilePart=0x0) returned 0x5f [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", lpFilePart=0x0) returned 0x5f [0115.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.438] CoTaskMemFree (pv=0xffa70) [0115.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", lpFilePart=0x0) returned 0x61 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", lpFilePart=0x0) returned 0x61 [0115.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.438] CoTaskMemFree (pv=0xffa70) [0115.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", lpFilePart=0x0) returned 0x61 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", lpFilePart=0x0) returned 0x61 [0115.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.439] CoTaskMemFree (pv=0xffa70) [0115.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", lpFilePart=0x0) returned 0x61 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", lpFilePart=0x0) returned 0x61 [0115.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.439] CoTaskMemFree (pv=0xffa70) [0115.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", lpFilePart=0x0) returned 0x63 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", lpFilePart=0x0) returned 0x63 [0115.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.439] CoTaskMemFree (pv=0xffa70) [0115.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", lpFilePart=0x0) returned 0x5f [0115.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", lpFilePart=0x0) returned 0x5f [0115.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.440] CoTaskMemFree (pv=0xffa70) [0115.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", lpFilePart=0x0) returned 0x5f [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", lpFilePart=0x0) returned 0x5f [0115.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.440] CoTaskMemFree (pv=0xffa70) [0115.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", lpFilePart=0x0) returned 0x62 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", lpFilePart=0x0) returned 0x62 [0115.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.440] CoTaskMemFree (pv=0xffa70) [0115.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", lpFilePart=0x0) returned 0x61 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", lpFilePart=0x0) returned 0x61 [0115.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.440] CoTaskMemFree (pv=0xffa70) [0115.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", lpFilePart=0x0) returned 0x61 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", lpFilePart=0x0) returned 0x61 [0115.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.441] CoTaskMemFree (pv=0xffa70) [0115.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", lpFilePart=0x0) returned 0x5f [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", lpFilePart=0x0) returned 0x5f [0115.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.441] CoTaskMemFree (pv=0xffa70) [0115.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", lpFilePart=0x0) returned 0x61 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", lpFilePart=0x0) returned 0x61 [0115.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.441] CoTaskMemFree (pv=0xffa70) [0115.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", lpFilePart=0x0) returned 0x63 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", lpFilePart=0x0) returned 0x63 [0115.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.441] CoTaskMemFree (pv=0xffa70) [0115.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", lpFilePart=0x0) returned 0x5f [0115.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", lpFilePart=0x0) returned 0x5f [0115.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.442] CoTaskMemFree (pv=0xffa70) [0115.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", lpFilePart=0x0) returned 0x62 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", lpFilePart=0x0) returned 0x62 [0115.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.442] CoTaskMemFree (pv=0xffa70) [0115.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", lpFilePart=0x0) returned 0x61 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", lpFilePart=0x0) returned 0x61 [0115.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.442] CoTaskMemFree (pv=0xffa70) [0115.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", lpFilePart=0x0) returned 0x63 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", lpFilePart=0x0) returned 0x63 [0115.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.442] CoTaskMemFree (pv=0xffa70) [0115.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", lpFilePart=0x0) returned 0x5f [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", lpFilePart=0x0) returned 0x5f [0115.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.443] CoTaskMemFree (pv=0xffa70) [0115.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", lpFilePart=0x0) returned 0x61 [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", lpFilePart=0x0) returned 0x61 [0115.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.443] CoTaskMemFree (pv=0xffa70) [0115.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", lpFilePart=0x0) returned 0x61 [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", lpFilePart=0x0) returned 0x61 [0115.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.443] CoTaskMemFree (pv=0xffa70) [0115.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", lpFilePart=0x0) returned 0x63 [0115.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", lpFilePart=0x0) returned 0x63 [0115.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.443] CoTaskMemFree (pv=0xffa70) [0115.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", lpFilePart=0x0) returned 0x5f [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", lpFilePart=0x0) returned 0x5f [0115.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.444] CoTaskMemFree (pv=0xffa70) [0115.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", lpFilePart=0x0) returned 0x5f [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", lpFilePart=0x0) returned 0x5f [0115.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.444] CoTaskMemFree (pv=0xffa70) [0115.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", lpFilePart=0x0) returned 0x61 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", lpFilePart=0x0) returned 0x61 [0115.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.444] CoTaskMemFree (pv=0xffa70) [0115.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", lpFilePart=0x0) returned 0x61 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", lpFilePart=0x0) returned 0x61 [0115.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.444] CoTaskMemFree (pv=0xffa70) [0115.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", lpFilePart=0x0) returned 0x61 [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", lpFilePart=0x0) returned 0x61 [0115.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.445] CoTaskMemFree (pv=0xffa70) [0115.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", lpFilePart=0x0) returned 0x5f [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", lpFilePart=0x0) returned 0x5f [0115.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.445] CoTaskMemFree (pv=0xffa70) [0115.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", lpFilePart=0x0) returned 0x5f [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", lpFilePart=0x0) returned 0x5f [0115.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.445] CoTaskMemFree (pv=0xffa70) [0115.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", lpFilePart=0x0) returned 0x62 [0115.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", lpFilePart=0x0) returned 0x62 [0115.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.446] CoTaskMemFree (pv=0xffa70) [0115.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", lpFilePart=0x0) returned 0x61 [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", lpFilePart=0x0) returned 0x61 [0115.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.446] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.446] CoTaskMemFree (pv=0xffa70) [0115.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", lpFilePart=0x0) returned 0x5f [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", lpFilePart=0x0) returned 0x5f [0115.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.446] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.446] CoTaskMemFree (pv=0xffa70) [0115.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", lpFilePart=0x0) returned 0x5f [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", lpFilePart=0x0) returned 0x5f [0115.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.446] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.446] CoTaskMemFree (pv=0xffa70) [0115.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", lpFilePart=0x0) returned 0x62 [0115.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", lpFilePart=0x0) returned 0x62 [0115.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.447] CoTaskMemFree (pv=0xffa70) [0115.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", lpFilePart=0x0) returned 0x61 [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", lpFilePart=0x0) returned 0x61 [0115.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.447] CoTaskMemFree (pv=0xffa70) [0115.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", lpFilePart=0x0) returned 0x61 [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", lpFilePart=0x0) returned 0x61 [0115.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.447] CoTaskMemFree (pv=0xffa70) [0115.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", lpFilePart=0x0) returned 0x5f [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", lpFilePart=0x0) returned 0x5f [0115.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.447] CoTaskMemFree (pv=0xffa70) [0115.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", lpFilePart=0x0) returned 0x5f [0115.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", lpFilePart=0x0) returned 0x5f [0115.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.448] CoTaskMemFree (pv=0xffa70) [0115.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", lpFilePart=0x0) returned 0x62 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", lpFilePart=0x0) returned 0x62 [0115.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.448] CoTaskMemFree (pv=0xffa70) [0115.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", lpFilePart=0x0) returned 0x61 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", lpFilePart=0x0) returned 0x61 [0115.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.448] CoTaskMemFree (pv=0xffa70) [0115.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", lpFilePart=0x0) returned 0x5f [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", lpFilePart=0x0) returned 0x5f [0115.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.448] CoTaskMemFree (pv=0xffa70) [0115.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", lpFilePart=0x0) returned 0x62 [0115.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", lpFilePart=0x0) returned 0x62 [0115.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.449] CoTaskMemFree (pv=0xffa70) [0115.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", lpFilePart=0x0) returned 0x61 [0115.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", lpFilePart=0x0) returned 0x61 [0115.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.449] CoTaskMemFree (pv=0xffa70) [0115.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", lpFilePart=0x0) returned 0x63 [0115.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", lpFilePart=0x0) returned 0x63 [0115.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.449] CoTaskMemFree (pv=0xffa70) [0115.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0115.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.449] CoTaskMemFree (pv=0xffa70) [0115.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.450] CoTaskMemFree (pv=0xffa70) [0115.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.451] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.452] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.453] CoTaskMemFree (pv=0xffa70) [0115.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.454] CoTaskMemFree (pv=0xffa70) [0115.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.455] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.456] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.457] CoTaskMemFree (pv=0xffa70) [0115.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.458] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.458] CoTaskMemFree (pv=0xffa70) [0115.458] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.459] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.459] CoTaskMemFree (pv=0xffa70) [0115.459] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.459] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.459] CoTaskMemFree (pv=0xffa70) [0115.459] SetErrorMode (uMode=0x1) returned 0x0 [0115.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.460] SetErrorMode (uMode=0x0) returned 0x1 [0115.460] GetFileType (hFile=0x18c) returned 0x1 [0115.464] WriteFile (in: hFile=0x18c, lpBuffer=0x2739cd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2739cd0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0115.466] SetErrorMode (uMode=0x1) returned 0x0 [0115.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.467] SetErrorMode (uMode=0x0) returned 0x1 [0115.467] GetFileType (hFile=0x18c) returned 0x1 [0115.468] SetErrorMode (uMode=0x1) returned 0x0 [0115.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.469] SetErrorMode (uMode=0x0) returned 0x1 [0115.469] GetFileType (hFile=0x18c) returned 0x1 [0115.470] SetErrorMode (uMode=0x1) returned 0x0 [0115.470] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.472] SetErrorMode (uMode=0x0) returned 0x1 [0115.472] GetFileType (hFile=0x18c) returned 0x1 [0115.473] SetErrorMode (uMode=0x1) returned 0x0 [0115.473] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.474] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.474] SetErrorMode (uMode=0x0) returned 0x1 [0115.474] SetErrorMode (uMode=0x1) returned 0x0 [0115.474] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.475] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.475] SetErrorMode (uMode=0x0) returned 0x1 [0115.475] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.475] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.475] CoTaskMemFree (pv=0xffa70) [0115.475] SetErrorMode (uMode=0x1) returned 0x0 [0115.475] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.476] SetErrorMode (uMode=0x0) returned 0x1 [0115.476] GetFileType (hFile=0x18c) returned 0x1 [0115.477] SetErrorMode (uMode=0x1) returned 0x0 [0115.477] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.478] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.478] SetErrorMode (uMode=0x0) returned 0x1 [0115.478] SetErrorMode (uMode=0x1) returned 0x0 [0115.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.478] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.478] SetErrorMode (uMode=0x0) returned 0x1 [0115.479] SetErrorMode (uMode=0x1) returned 0x0 [0115.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.479] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.479] SetErrorMode (uMode=0x0) returned 0x1 [0115.479] SetErrorMode (uMode=0x1) returned 0x0 [0115.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.480] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.480] SetErrorMode (uMode=0x0) returned 0x1 [0115.480] SetErrorMode (uMode=0x1) returned 0x0 [0115.480] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.481] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.481] SetErrorMode (uMode=0x0) returned 0x1 [0115.481] SetErrorMode (uMode=0x1) returned 0x0 [0115.481] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.481] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.481] SetErrorMode (uMode=0x0) returned 0x1 [0115.482] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0115.482] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.482] CoTaskMemFree (pv=0xffa70) [0115.482] SetErrorMode (uMode=0x1) returned 0x0 [0115.482] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.482] SetErrorMode (uMode=0x0) returned 0x1 [0115.482] GetFileType (hFile=0x18c) returned 0x1 [0115.482] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0x345f0 [0115.489] SetErrorMode (uMode=0x1) returned 0x0 [0115.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0)) returned 1 [0115.489] SetErrorMode (uMode=0x0) returned 0x1 [0115.606] SetErrorMode (uMode=0x1) returned 0x0 [0115.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.609] SetErrorMode (uMode=0x0) returned 0x1 [0115.609] GetFileType (hFile=0x18c) returned 0x1 [0115.609] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x34700, lpNumberOfBytesWritten=0x27e628, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e628*=0x34700, lpOverlapped=0x0) returned 1 [0115.612] SetErrorMode (uMode=0x1) returned 0x0 [0115.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1597b7f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x34700)) returned 1 [0115.613] SetErrorMode (uMode=0x0) returned 0x1 [0115.613] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\eI7zaJ0UZhLIczRV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ei7zaj0uzhliczrv_encrypted_by.whiterose")) returned 1 [0115.715] SetErrorMode (uMode=0x1) returned 0x0 [0115.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0115.717] SetErrorMode (uMode=0x0) returned 0x1 [0115.717] GetFileType (hFile=0x18c) returned 0x1 [0115.718] SetErrorMode (uMode=0x1) returned 0x0 [0115.718] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.718] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.718] SetErrorMode (uMode=0x0) returned 0x1 [0115.718] SetErrorMode (uMode=0x1) returned 0x0 [0115.718] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.719] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.719] SetErrorMode (uMode=0x0) returned 0x1 [0115.719] SetErrorMode (uMode=0x1) returned 0x0 [0115.719] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.721] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.722] SetErrorMode (uMode=0x0) returned 0x1 [0115.722] SetErrorMode (uMode=0x1) returned 0x0 [0115.722] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0115.723] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0115.724] SetErrorMode (uMode=0x0) returned 0x1 [0115.724] SetErrorMode (uMode=0x1) returned 0x0 [0115.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.725] SetErrorMode (uMode=0x0) returned 0x1 [0115.725] GetFileType (hFile=0x18c) returned 0x1 [0115.725] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x5f76c [0115.735] SetErrorMode (uMode=0x1) returned 0x0 [0115.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f76c)) returned 1 [0115.735] SetErrorMode (uMode=0x0) returned 0x1 [0115.816] SetErrorMode (uMode=0x1) returned 0x0 [0115.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.820] SetErrorMode (uMode=0x0) returned 0x1 [0115.820] GetFileType (hFile=0x18c) returned 0x1 [0115.820] WriteFile (in: hFile=0x18c, lpBuffer=0x12a87cb8*, nNumberOfBytesToWrite=0x5f870, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12a87cb8*, lpNumberOfBytesWritten=0x27e588*=0x5f870, lpOverlapped=0x0) returned 1 [0115.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", lpFilePart=0x0) returned 0x5e [0115.835] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 1 [0115.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0115.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0115.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0115.844] SetErrorMode (uMode=0x1) returned 0x0 [0115.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0115.845] GetFileType (hFile=0x18c) returned 0x1 [0115.845] SetErrorMode (uMode=0x0) returned 0x1 [0115.845] GetFileType (hFile=0x18c) returned 0x1 [0115.845] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3229c [0115.845] ReadFile (in: hFile=0x18c, lpBuffer=0x12ae7558, nNumberOfBytesToRead=0x3229c, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12ae7558*, lpNumberOfBytesRead=0x27e508*=0x3229c, lpOverlapped=0x0) returned 1 [0115.850] CloseHandle (hObject=0x18c) returned 1 [0115.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0115.863] SetErrorMode (uMode=0x1) returned 0x0 [0115.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3229c)) returned 1 [0115.863] SetErrorMode (uMode=0x0) returned 0x1 [0116.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0116.002] SetErrorMode (uMode=0x1) returned 0x0 [0116.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.003] GetFileType (hFile=0x18c) returned 0x1 [0116.003] SetErrorMode (uMode=0x0) returned 0x1 [0116.003] GetFileType (hFile=0x18c) returned 0x1 [0116.003] WriteFile (in: hFile=0x18c, lpBuffer=0x127cd6b8*, nNumberOfBytesToWrite=0x323a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127cd6b8*, lpNumberOfBytesWritten=0x27e588*=0x323a0, lpOverlapped=0x0) returned 1 [0116.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0116.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\N43cfs12oFf11l09_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\N43cfs12oFf11l09_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7c [0116.008] SetErrorMode (uMode=0x1) returned 0x0 [0116.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x15d33a50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x323a0)) returned 1 [0116.008] SetErrorMode (uMode=0x0) returned 0x1 [0116.008] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\N43cfs12oFf11l09_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\n43cfs12off11l09_encrypted_by.whiterose")) returned 1 [0116.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0116.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0116.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0116.105] SetErrorMode (uMode=0x1) returned 0x0 [0116.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.106] GetFileType (hFile=0x18c) returned 0x1 [0116.106] SetErrorMode (uMode=0x0) returned 0x1 [0116.106] GetFileType (hFile=0x18c) returned 0x1 [0116.106] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x19ea7 [0116.107] ReadFile (in: hFile=0x18c, lpBuffer=0x127ffa88, nNumberOfBytesToRead=0x19ea7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127ffa88*, lpNumberOfBytesRead=0x27e508*=0x19ea7, lpOverlapped=0x0) returned 1 [0116.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0116.111] SetErrorMode (uMode=0x1) returned 0x0 [0116.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19ea7)) returned 1 [0116.111] SetErrorMode (uMode=0x0) returned 0x1 [0116.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0116.175] SetErrorMode (uMode=0x1) returned 0x0 [0116.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.177] GetFileType (hFile=0x18c) returned 0x1 [0116.177] SetErrorMode (uMode=0x0) returned 0x1 [0116.177] GetFileType (hFile=0x18c) returned 0x1 [0116.177] WriteFile (in: hFile=0x18c, lpBuffer=0x1289b848*, nNumberOfBytesToWrite=0x19fb0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1289b848*, lpNumberOfBytesWritten=0x27e588*=0x19fb0, lpOverlapped=0x0) returned 1 [0116.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0116.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\eNgLT3JYanuTadDC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\eNgLT3JYanuTadDC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7c [0116.179] SetErrorMode (uMode=0x1) returned 0x0 [0116.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x15ed6970, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x19fb0)) returned 1 [0116.180] SetErrorMode (uMode=0x0) returned 0x1 [0116.180] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\eNgLT3JYanuTadDC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\englt3jyanutaddc_encrypted_by.whiterose")) returned 1 [0116.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0116.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0116.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0116.277] SetErrorMode (uMode=0x1) returned 0x0 [0116.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.277] GetFileType (hFile=0x18c) returned 0x1 [0116.277] SetErrorMode (uMode=0x0) returned 0x1 [0116.277] GetFileType (hFile=0x18c) returned 0x1 [0116.277] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x29ed0 [0116.279] ReadFile (in: hFile=0x18c, lpBuffer=0x128b5828, nNumberOfBytesToRead=0x29ed0, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x128b5828*, lpNumberOfBytesRead=0x27e508*=0x29ed0, lpOverlapped=0x0) returned 1 [0116.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0116.283] SetErrorMode (uMode=0x1) returned 0x0 [0116.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x29ed0)) returned 1 [0116.283] SetErrorMode (uMode=0x0) returned 0x1 [0116.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0116.349] SetErrorMode (uMode=0x1) returned 0x0 [0116.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.351] GetFileType (hFile=0x18c) returned 0x1 [0116.351] SetErrorMode (uMode=0x0) returned 0x1 [0116.351] GetFileType (hFile=0x18c) returned 0x1 [0116.351] WriteFile (in: hFile=0x18c, lpBuffer=0x129b16f8*, nNumberOfBytesToWrite=0x29fe0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x129b16f8*, lpNumberOfBytesWritten=0x27e588*=0x29fe0, lpOverlapped=0x0) returned 1 [0116.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0116.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\7gutylOfsOcapH33_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\7gutylOfsOcapH33_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7c [0116.355] SetErrorMode (uMode=0x1) returned 0x0 [0116.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1609f9f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x29fe0)) returned 1 [0116.355] SetErrorMode (uMode=0x0) returned 0x1 [0116.355] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\7gutylOfsOcapH33_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\7gutylofsocaph33_encrypted_by.whiterose")) returned 1 [0116.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.464] SetErrorMode (uMode=0x1) returned 0x0 [0116.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.464] GetFileType (hFile=0x18c) returned 0x1 [0116.464] SetErrorMode (uMode=0x0) returned 0x1 [0116.464] GetFileType (hFile=0x18c) returned 0x1 [0116.464] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x288d [0116.464] ReadFile (in: hFile=0x18c, lpBuffer=0x2808810, nNumberOfBytesToRead=0x288d, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2808810*, lpNumberOfBytesRead=0x27e508*=0x288d, lpOverlapped=0x0) returned 1 [0116.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.467] SetErrorMode (uMode=0x1) returned 0x0 [0116.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x288d)) returned 1 [0116.467] SetErrorMode (uMode=0x0) returned 0x1 [0116.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.568] SetErrorMode (uMode=0x1) returned 0x0 [0116.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.569] GetFileType (hFile=0x18c) returned 0x1 [0116.569] SetErrorMode (uMode=0x0) returned 0x1 [0116.569] GetFileType (hFile=0x18c) returned 0x1 [0116.569] WriteFile (in: hFile=0x18c, lpBuffer=0x2874570*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2874570*, lpNumberOfBytesWritten=0x27e588*=0x2990, lpOverlapped=0x0) returned 1 [0116.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\N0cnZLA5ALY*YZWP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\N0cnZLA5ALY*YZWP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7c [0116.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0116.582] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 1 [0116.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0116.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0116.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0116.585] SetErrorMode (uMode=0x1) returned 0x0 [0116.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.585] GetFileType (hFile=0x18c) returned 0x1 [0116.585] SetErrorMode (uMode=0x0) returned 0x1 [0116.585] GetFileType (hFile=0x18c) returned 0x1 [0116.585] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2e9c [0116.585] ReadFile (in: hFile=0x18c, lpBuffer=0x2878e68, nNumberOfBytesToRead=0x2e9c, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2878e68*, lpNumberOfBytesRead=0x27e508*=0x2e9c, lpOverlapped=0x0) returned 1 [0116.587] CloseHandle (hObject=0x18c) returned 1 [0116.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0116.589] SetErrorMode (uMode=0x1) returned 0x0 [0116.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c)) returned 1 [0116.589] SetErrorMode (uMode=0x0) returned 0x1 [0116.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0116.677] SetErrorMode (uMode=0x1) returned 0x0 [0116.677] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.678] GetFileType (hFile=0x18c) returned 0x1 [0116.678] SetErrorMode (uMode=0x0) returned 0x1 [0116.678] GetFileType (hFile=0x18c) returned 0x1 [0116.678] WriteFile (in: hFile=0x18c, lpBuffer=0x28ee1f0*, nNumberOfBytesToWrite=0x2fa0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28ee1f0*, lpNumberOfBytesWritten=0x27e588*=0x2fa0, lpOverlapped=0x0) returned 1 [0116.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0116.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\J9oEb2qK6YgfUHdT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\J9oEb2qK6YgfUHdT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7c [0116.680] SetErrorMode (uMode=0x1) returned 0x0 [0116.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x16399570, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1 [0116.680] SetErrorMode (uMode=0x0) returned 0x1 [0116.680] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\J9oEb2qK6YgfUHdT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\j9oeb2qk6ygfuhdt_encrypted_by.whiterose")) returned 1 [0116.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6e [0116.795] SetErrorMode (uMode=0x1) returned 0x0 [0116.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0116.795] GetFileType (hFile=0x18c) returned 0x1 [0116.795] SetErrorMode (uMode=0x0) returned 0x1 [0116.795] GetFileType (hFile=0x18c) returned 0x1 [0116.797] WriteFile (in: hFile=0x18c, lpBuffer=0x2714e98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2714e98*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0116.798] WriteFile (in: hFile=0x18c, lpBuffer=0x2714e98*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2714e98*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0116.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x52 [0116.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x52 [0116.799] SetErrorMode (uMode=0x1) returned 0x0 [0116.799] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0116.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0116.801] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0116.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0116.802] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0116.803] SetErrorMode (uMode=0x0) returned 0x1 [0116.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x52 [0116.803] SetErrorMode (uMode=0x1) returned 0x0 [0116.803] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0116.804] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.804] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0116.804] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0116.804] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0116.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0116.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0116.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0116.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0116.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0116.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0116.806] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0116.807] SetErrorMode (uMode=0x0) returned 0x1 [0116.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", lpFilePart=0x0) returned 0x5d [0116.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", lpFilePart=0x0) returned 0x5d [0116.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", lpFilePart=0x0) returned 0x5d [0116.808] SetErrorMode (uMode=0x1) returned 0x0 [0116.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.809] GetFileType (hFile=0x18c) returned 0x1 [0116.809] SetErrorMode (uMode=0x0) returned 0x1 [0116.809] GetFileType (hFile=0x18c) returned 0x1 [0116.809] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x5ce8 [0116.809] ReadFile (in: hFile=0x18c, lpBuffer=0x271e8c0, nNumberOfBytesToRead=0x5ce8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x271e8c0*, lpNumberOfBytesRead=0x27e508*=0x5ce8, lpOverlapped=0x0) returned 1 [0116.811] CloseHandle (hObject=0x18c) returned 1 [0116.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", lpFilePart=0x0) returned 0x5d [0116.812] SetErrorMode (uMode=0x1) returned 0x0 [0116.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8)) returned 1 [0116.812] SetErrorMode (uMode=0x0) returned 0x1 [0116.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", lpFilePart=0x0) returned 0x5d [0116.882] SetErrorMode (uMode=0x1) returned 0x0 [0116.882] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.883] GetFileType (hFile=0x18c) returned 0x1 [0116.883] SetErrorMode (uMode=0x0) returned 0x1 [0116.883] GetFileType (hFile=0x18c) returned 0x1 [0116.883] WriteFile (in: hFile=0x18c, lpBuffer=0x27a7c00*, nNumberOfBytesToWrite=0x5df0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a7c00*, lpNumberOfBytesWritten=0x27e588*=0x5df0, lpOverlapped=0x0) returned 1 [0116.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", lpFilePart=0x0) returned 0x5d [0116.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ZMXBQvg03fFXLq23_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ZMXBQvg03fFXLq23_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0116.891] SetErrorMode (uMode=0x1) returned 0x0 [0116.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x165ae8b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5df0)) returned 1 [0116.891] SetErrorMode (uMode=0x0) returned 0x1 [0116.891] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ZMXBQvg03fFXLq23_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\zmxbqvg03ffxlq23_encrypted_by.whiterose")) returned 1 [0116.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x5f [0116.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x5f [0116.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x5f [0116.994] SetErrorMode (uMode=0x1) returned 0x0 [0116.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0116.998] GetFileType (hFile=0x18c) returned 0x1 [0116.998] SetErrorMode (uMode=0x0) returned 0x1 [0116.998] GetFileType (hFile=0x18c) returned 0x1 [0116.998] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3294 [0116.998] ReadFile (in: hFile=0x18c, lpBuffer=0x27af4c8, nNumberOfBytesToRead=0x3294, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27af4c8*, lpNumberOfBytesRead=0x27e508*=0x3294, lpOverlapped=0x0) returned 1 [0117.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x5f [0117.001] SetErrorMode (uMode=0x1) returned 0x0 [0117.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294)) returned 1 [0117.001] SetErrorMode (uMode=0x0) returned 0x1 [0117.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x5f [0117.064] SetErrorMode (uMode=0x1) returned 0x0 [0117.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.065] GetFileType (hFile=0x18c) returned 0x1 [0117.065] SetErrorMode (uMode=0x0) returned 0x1 [0117.065] GetFileType (hFile=0x18c) returned 0x1 [0117.065] WriteFile (in: hFile=0x18c, lpBuffer=0x282c9a8*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x282c9a8*, lpNumberOfBytesWritten=0x27e588*=0x33a0, lpOverlapped=0x0) returned 1 [0117.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x5f [0117.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\bWmJIOvshzaJ1eCr_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\bWmJIOvshzaJ1eCr_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0117.066] SetErrorMode (uMode=0x1) returned 0x0 [0117.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x167517d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a0)) returned 1 [0117.066] SetErrorMode (uMode=0x0) returned 0x1 [0117.067] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\bWmJIOvshzaJ1eCr_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\bwmjiovshzaj1ecr_encrypted_by.whiterose")) returned 1 [0117.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.166] SetErrorMode (uMode=0x1) returned 0x0 [0117.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.167] GetFileType (hFile=0x18c) returned 0x1 [0117.167] SetErrorMode (uMode=0x0) returned 0x1 [0117.167] GetFileType (hFile=0x18c) returned 0x1 [0117.167] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x31aa5 [0117.167] ReadFile (in: hFile=0x18c, lpBuffer=0x126d2418, nNumberOfBytesToRead=0x31aa5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesRead=0x27e508*=0x31aa5, lpOverlapped=0x0) returned 1 [0117.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.173] SetErrorMode (uMode=0x1) returned 0x0 [0117.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5)) returned 1 [0117.173] SetErrorMode (uMode=0x0) returned 0x1 [0117.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.247] SetErrorMode (uMode=0x1) returned 0x0 [0117.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.249] GetFileType (hFile=0x18c) returned 0x1 [0117.249] SetErrorMode (uMode=0x0) returned 0x1 [0117.249] GetFileType (hFile=0x18c) returned 0x1 [0117.249] WriteFile (in: hFile=0x18c, lpBuffer=0x127fc9d8*, nNumberOfBytesToWrite=0x31bb0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127fc9d8*, lpNumberOfBytesWritten=0x27e588*=0x31bb0, lpOverlapped=0x0) returned 1 [0117.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\w8TdVe9frD*dycje_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\w8TdVe9frD*dycje_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0117.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", lpFilePart=0x0) returned 0x5f [0117.255] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt")) returned 1 [0117.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", lpFilePart=0x0) returned 0x5f [0117.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", lpFilePart=0x0) returned 0x5f [0117.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", lpFilePart=0x0) returned 0x5f [0117.260] SetErrorMode (uMode=0x1) returned 0x0 [0117.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.261] GetFileType (hFile=0x18c) returned 0x1 [0117.261] SetErrorMode (uMode=0x0) returned 0x1 [0117.261] GetFileType (hFile=0x18c) returned 0x1 [0117.261] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x520b7 [0117.261] ReadFile (in: hFile=0x18c, lpBuffer=0x1282e5b8, nNumberOfBytesToRead=0x520b7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1282e5b8*, lpNumberOfBytesRead=0x27e508*=0x520b7, lpOverlapped=0x0) returned 1 [0117.269] CloseHandle (hObject=0x18c) returned 1 [0117.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", lpFilePart=0x0) returned 0x5f [0117.273] SetErrorMode (uMode=0x1) returned 0x0 [0117.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7)) returned 1 [0117.273] SetErrorMode (uMode=0x0) returned 0x1 [0117.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", lpFilePart=0x0) returned 0x5f [0117.399] SetErrorMode (uMode=0x1) returned 0x0 [0117.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.404] GetFileType (hFile=0x18c) returned 0x1 [0117.404] SetErrorMode (uMode=0x0) returned 0x1 [0117.404] GetFileType (hFile=0x18c) returned 0x1 [0117.404] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x521c0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x521c0, lpOverlapped=0x0) returned 1 [0117.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", lpFilePart=0x0) returned 0x5f [0117.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DHBhmoep5ipCa88W_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DHBhmoep5ipCa88W_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0117.410] SetErrorMode (uMode=0x1) returned 0x0 [0117.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x16a97610, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x521c0)) returned 1 [0117.410] SetErrorMode (uMode=0x0) returned 0x1 [0117.410] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DHBhmoep5ipCa88W_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\dhbhmoep5ipca88w_encrypted_by.whiterose")) returned 1 [0117.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x5f [0117.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x5f [0117.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x5f [0117.525] SetErrorMode (uMode=0x1) returned 0x0 [0117.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.525] GetFileType (hFile=0x18c) returned 0x1 [0117.525] SetErrorMode (uMode=0x0) returned 0x1 [0117.525] GetFileType (hFile=0x18c) returned 0x1 [0117.525] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4a08 [0117.525] ReadFile (in: hFile=0x18c, lpBuffer=0x26f50a0, nNumberOfBytesToRead=0x4a08, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x26f50a0*, lpNumberOfBytesRead=0x27e508*=0x4a08, lpOverlapped=0x0) returned 1 [0117.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x5f [0117.528] SetErrorMode (uMode=0x1) returned 0x0 [0117.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08)) returned 1 [0117.528] SetErrorMode (uMode=0x0) returned 0x1 [0117.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x5f [0117.601] SetErrorMode (uMode=0x1) returned 0x0 [0117.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.602] GetFileType (hFile=0x18c) returned 0x1 [0117.602] SetErrorMode (uMode=0x0) returned 0x1 [0117.602] GetFileType (hFile=0x18c) returned 0x1 [0117.602] WriteFile (in: hFile=0x18c, lpBuffer=0x2770f58*, nNumberOfBytesToWrite=0x4b10, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2770f58*, lpNumberOfBytesWritten=0x27e588*=0x4b10, lpOverlapped=0x0) returned 1 [0117.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x5f [0117.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\6sPR1YZlR2DvlZBr_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\6sPR1YZlR2DvlZBr_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0117.604] SetErrorMode (uMode=0x1) returned 0x0 [0117.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x16c867f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4b10)) returned 1 [0117.604] SetErrorMode (uMode=0x0) returned 0x1 [0117.604] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\6sPR1YZlR2DvlZBr_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\6spr1yzlr2dvlzbr_encrypted_by.whiterose")) returned 1 [0117.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x5f [0117.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x5f [0117.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x5f [0117.712] SetErrorMode (uMode=0x1) returned 0x0 [0117.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.712] GetFileType (hFile=0x18c) returned 0x1 [0117.712] SetErrorMode (uMode=0x0) returned 0x1 [0117.712] GetFileType (hFile=0x18c) returned 0x1 [0117.712] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x34f0 [0117.712] ReadFile (in: hFile=0x18c, lpBuffer=0x2777548, nNumberOfBytesToRead=0x34f0, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2777548*, lpNumberOfBytesRead=0x27e508*=0x34f0, lpOverlapped=0x0) returned 1 [0117.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x5f [0117.714] SetErrorMode (uMode=0x1) returned 0x0 [0117.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0)) returned 1 [0117.714] SetErrorMode (uMode=0x0) returned 0x1 [0117.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x5f [0117.777] SetErrorMode (uMode=0x1) returned 0x0 [0117.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.778] GetFileType (hFile=0x18c) returned 0x1 [0117.778] SetErrorMode (uMode=0x0) returned 0x1 [0117.778] GetFileType (hFile=0x18c) returned 0x1 [0117.778] WriteFile (in: hFile=0x18c, lpBuffer=0x27f3758*, nNumberOfBytesToWrite=0x3600, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27f3758*, lpNumberOfBytesWritten=0x27e588*=0x3600, lpOverlapped=0x0) returned 1 [0117.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x5f [0117.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\MjxLqoLaZYpuUgud_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\MjxLqoLaZYpuUgud_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0117.779] SetErrorMode (uMode=0x1) returned 0x0 [0117.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x16e29710, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3600)) returned 1 [0117.779] SetErrorMode (uMode=0x0) returned 0x1 [0117.779] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\MjxLqoLaZYpuUgud_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\mjxlqolazypuugud_encrypted_by.whiterose")) returned 1 [0117.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.883] SetErrorMode (uMode=0x1) returned 0x0 [0117.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.884] GetFileType (hFile=0x18c) returned 0x1 [0117.884] SetErrorMode (uMode=0x0) returned 0x1 [0117.884] GetFileType (hFile=0x18c) returned 0x1 [0117.884] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3478 [0117.884] ReadFile (in: hFile=0x18c, lpBuffer=0x27f8838, nNumberOfBytesToRead=0x3478, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27f8838*, lpNumberOfBytesRead=0x27e508*=0x3478, lpOverlapped=0x0) returned 1 [0117.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.886] SetErrorMode (uMode=0x1) returned 0x0 [0117.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478)) returned 1 [0117.886] SetErrorMode (uMode=0x0) returned 0x1 [0117.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.943] SetErrorMode (uMode=0x1) returned 0x0 [0117.943] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.944] GetFileType (hFile=0x18c) returned 0x1 [0117.944] SetErrorMode (uMode=0x0) returned 0x1 [0117.944] GetFileType (hFile=0x18c) returned 0x1 [0117.944] WriteFile (in: hFile=0x18c, lpBuffer=0x2871ca0*, nNumberOfBytesToWrite=0x3580, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2871ca0*, lpNumberOfBytesWritten=0x27e588*=0x3580, lpOverlapped=0x0) returned 1 [0117.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DNMt6HPsgo9M*KTE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DNMt6HPsgo9M*KTE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0117.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x5f [0117.955] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt")) returned 1 [0117.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", lpFilePart=0x0) returned 0x5c [0117.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", lpFilePart=0x0) returned 0x5c [0117.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", lpFilePart=0x0) returned 0x5c [0117.957] SetErrorMode (uMode=0x1) returned 0x0 [0117.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0117.985] GetFileType (hFile=0x18c) returned 0x1 [0117.985] SetErrorMode (uMode=0x0) returned 0x1 [0117.985] GetFileType (hFile=0x18c) returned 0x1 [0117.985] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x6145 [0117.985] ReadFile (in: hFile=0x18c, lpBuffer=0x2877148, nNumberOfBytesToRead=0x6145, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2877148*, lpNumberOfBytesRead=0x27e508*=0x6145, lpOverlapped=0x0) returned 1 [0117.987] CloseHandle (hObject=0x18c) returned 1 [0117.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", lpFilePart=0x0) returned 0x5c [0117.988] SetErrorMode (uMode=0x1) returned 0x0 [0117.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145)) returned 1 [0117.988] SetErrorMode (uMode=0x0) returned 0x1 [0118.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", lpFilePart=0x0) returned 0x5c [0118.090] SetErrorMode (uMode=0x1) returned 0x0 [0118.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.092] GetFileType (hFile=0x18c) returned 0x1 [0118.092] SetErrorMode (uMode=0x0) returned 0x1 [0118.092] GetFileType (hFile=0x18c) returned 0x1 [0118.092] WriteFile (in: hFile=0x18c, lpBuffer=0x2903f68*, nNumberOfBytesToWrite=0x6250, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2903f68*, lpNumberOfBytesWritten=0x27e588*=0x6250, lpOverlapped=0x0) returned 1 [0118.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", lpFilePart=0x0) returned 0x5c [0118.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\2Z8I6TByWfOaM1hm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\2Z8I6TByWfOaM1hm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0118.093] SetErrorMode (uMode=0x1) returned 0x0 [0118.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x17123290, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6250)) returned 1 [0118.094] SetErrorMode (uMode=0x0) returned 0x1 [0118.094] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\2Z8I6TByWfOaM1hm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\2z8i6tbywfoam1hm_encrypted_by.whiterose")) returned 1 [0118.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x5c [0118.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x5c [0118.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x5c [0118.199] SetErrorMode (uMode=0x1) returned 0x0 [0118.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.199] GetFileType (hFile=0x18c) returned 0x1 [0118.199] SetErrorMode (uMode=0x0) returned 0x1 [0118.199] GetFileType (hFile=0x18c) returned 0x1 [0118.199] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x342b [0118.199] ReadFile (in: hFile=0x18c, lpBuffer=0x290bc78, nNumberOfBytesToRead=0x342b, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x290bc78*, lpNumberOfBytesRead=0x27e508*=0x342b, lpOverlapped=0x0) returned 1 [0118.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x5c [0118.201] SetErrorMode (uMode=0x1) returned 0x0 [0118.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b)) returned 1 [0118.201] SetErrorMode (uMode=0x0) returned 0x1 [0118.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x5c [0118.277] SetErrorMode (uMode=0x1) returned 0x0 [0118.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.278] GetFileType (hFile=0x18c) returned 0x1 [0118.279] SetErrorMode (uMode=0x0) returned 0x1 [0118.279] GetFileType (hFile=0x18c) returned 0x1 [0118.279] WriteFile (in: hFile=0x18c, lpBuffer=0x278a588*, nNumberOfBytesToWrite=0x3530, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x278a588*, lpNumberOfBytesWritten=0x27e588*=0x3530, lpOverlapped=0x0) returned 1 [0118.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x5c [0118.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DkR6XmCZSrZmD5hu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DkR6XmCZSrZmD5hu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0118.280] SetErrorMode (uMode=0x1) returned 0x0 [0118.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x172ec310, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3530)) returned 1 [0118.280] SetErrorMode (uMode=0x0) returned 0x1 [0118.280] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\DkR6XmCZSrZmD5hu_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\dkr6xmczsrzmd5hu_encrypted_by.whiterose")) returned 1 [0118.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", lpFilePart=0x0) returned 0x5d [0118.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", lpFilePart=0x0) returned 0x5d [0118.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", lpFilePart=0x0) returned 0x5d [0118.383] SetErrorMode (uMode=0x1) returned 0x0 [0118.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.383] GetFileType (hFile=0x18c) returned 0x1 [0118.383] SetErrorMode (uMode=0x0) returned 0x1 [0118.383] GetFileType (hFile=0x18c) returned 0x1 [0118.383] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x5d43 [0118.383] ReadFile (in: hFile=0x18c, lpBuffer=0x278f578, nNumberOfBytesToRead=0x5d43, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x278f578*, lpNumberOfBytesRead=0x27e508*=0x5d43, lpOverlapped=0x0) returned 1 [0118.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", lpFilePart=0x0) returned 0x5d [0118.385] SetErrorMode (uMode=0x1) returned 0x0 [0118.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43)) returned 1 [0118.385] SetErrorMode (uMode=0x0) returned 0x1 [0118.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", lpFilePart=0x0) returned 0x5d [0118.449] SetErrorMode (uMode=0x1) returned 0x0 [0118.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.450] GetFileType (hFile=0x18c) returned 0x1 [0118.450] SetErrorMode (uMode=0x0) returned 0x1 [0118.450] GetFileType (hFile=0x18c) returned 0x1 [0118.450] WriteFile (in: hFile=0x18c, lpBuffer=0x280feb8*, nNumberOfBytesToWrite=0x5e50, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x280feb8*, lpNumberOfBytesWritten=0x27e588*=0x5e50, lpOverlapped=0x0) returned 1 [0118.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", lpFilePart=0x0) returned 0x5d [0118.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\jczZnMpN1oLlbmah_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\jczZnMpN1oLlbmah_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0118.452] SetErrorMode (uMode=0x1) returned 0x0 [0118.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1748f230, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5e50)) returned 1 [0118.452] SetErrorMode (uMode=0x0) returned 0x1 [0118.452] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\jczZnMpN1oLlbmah_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\jczznmpn1ollbmah_encrypted_by.whiterose")) returned 1 [0118.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x5e [0118.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x5e [0118.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x5e [0118.564] SetErrorMode (uMode=0x1) returned 0x0 [0118.564] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.564] GetFileType (hFile=0x18c) returned 0x1 [0118.564] SetErrorMode (uMode=0x0) returned 0x1 [0118.564] GetFileType (hFile=0x18c) returned 0x1 [0118.564] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x377c [0118.564] ReadFile (in: hFile=0x18c, lpBuffer=0x28177c8, nNumberOfBytesToRead=0x377c, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28177c8*, lpNumberOfBytesRead=0x27e508*=0x377c, lpOverlapped=0x0) returned 1 [0118.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x5e [0118.566] SetErrorMode (uMode=0x1) returned 0x0 [0118.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c)) returned 1 [0118.567] SetErrorMode (uMode=0x0) returned 0x1 [0118.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x5e [0118.628] SetErrorMode (uMode=0x1) returned 0x0 [0118.628] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.629] GetFileType (hFile=0x18c) returned 0x1 [0118.629] SetErrorMode (uMode=0x0) returned 0x1 [0118.629] GetFileType (hFile=0x18c) returned 0x1 [0118.629] WriteFile (in: hFile=0x18c, lpBuffer=0x2884f28*, nNumberOfBytesToWrite=0x3880, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2884f28*, lpNumberOfBytesWritten=0x27e588*=0x3880, lpOverlapped=0x0) returned 1 [0118.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x5e [0118.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\aGNH37t7hPtDqQzH_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\aGNH37t7hPtDqQzH_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0118.631] SetErrorMode (uMode=0x1) returned 0x0 [0118.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x17632150, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3880)) returned 1 [0118.631] SetErrorMode (uMode=0x0) returned 0x1 [0118.631] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\aGNH37t7hPtDqQzH_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\agnh37t7hptdqqzh_encrypted_by.whiterose")) returned 1 [0118.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", lpFilePart=0x0) returned 0x5f [0118.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", lpFilePart=0x0) returned 0x5f [0118.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", lpFilePart=0x0) returned 0x5f [0118.741] SetErrorMode (uMode=0x1) returned 0x0 [0118.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.742] GetFileType (hFile=0x18c) returned 0x1 [0118.743] SetErrorMode (uMode=0x0) returned 0x1 [0118.743] GetFileType (hFile=0x18c) returned 0x1 [0118.743] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x320dc [0118.744] ReadFile (in: hFile=0x18c, lpBuffer=0x12724608, nNumberOfBytesToRead=0x320dc, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12724608*, lpNumberOfBytesRead=0x27e508*=0x320dc, lpOverlapped=0x0) returned 1 [0118.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", lpFilePart=0x0) returned 0x5f [0118.748] SetErrorMode (uMode=0x1) returned 0x0 [0118.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc)) returned 1 [0118.748] SetErrorMode (uMode=0x0) returned 0x1 [0118.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", lpFilePart=0x0) returned 0x5f [0118.815] SetErrorMode (uMode=0x1) returned 0x0 [0118.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.817] GetFileType (hFile=0x18c) returned 0x1 [0118.817] SetErrorMode (uMode=0x0) returned 0x1 [0118.817] GetFileType (hFile=0x18c) returned 0x1 [0118.817] WriteFile (in: hFile=0x18c, lpBuffer=0x128d2870*, nNumberOfBytesToWrite=0x321e0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x128d2870*, lpNumberOfBytesWritten=0x27e588*=0x321e0, lpOverlapped=0x0) returned 1 [0118.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", lpFilePart=0x0) returned 0x5f [0118.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SxvCsvgUpMeDZ9st_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SxvCsvgUpMeDZ9st_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0118.822] SetErrorMode (uMode=0x1) returned 0x0 [0118.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x17821330, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x321e0)) returned 1 [0118.822] SetErrorMode (uMode=0x0) returned 0x1 [0118.822] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SxvCsvgUpMeDZ9st_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\sxvcsvgupmedz9st_encrypted_by.whiterose")) returned 1 [0118.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", lpFilePart=0x0) returned 0x5d [0118.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", lpFilePart=0x0) returned 0x5d [0118.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", lpFilePart=0x0) returned 0x5d [0118.929] SetErrorMode (uMode=0x1) returned 0x0 [0118.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0118.929] GetFileType (hFile=0x18c) returned 0x1 [0118.929] SetErrorMode (uMode=0x0) returned 0x1 [0118.929] GetFileType (hFile=0x18c) returned 0x1 [0118.929] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x591cf [0118.932] ReadFile (in: hFile=0x18c, lpBuffer=0x12904a80, nNumberOfBytesToRead=0x591cf, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12904a80*, lpNumberOfBytesRead=0x27e508*=0x591cf, lpOverlapped=0x0) returned 1 [0118.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", lpFilePart=0x0) returned 0x5d [0118.941] SetErrorMode (uMode=0x1) returned 0x0 [0118.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf)) returned 1 [0118.941] SetErrorMode (uMode=0x0) returned 0x1 [0119.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", lpFilePart=0x0) returned 0x5d [0119.043] SetErrorMode (uMode=0x1) returned 0x0 [0119.043] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.046] GetFileType (hFile=0x18c) returned 0x1 [0119.046] SetErrorMode (uMode=0x0) returned 0x1 [0119.046] GetFileType (hFile=0x18c) returned 0x1 [0119.046] WriteFile (in: hFile=0x18c, lpBuffer=0x127849c8*, nNumberOfBytesToWrite=0x592d0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127849c8*, lpNumberOfBytesWritten=0x27e588*=0x592d0, lpOverlapped=0x0) returned 1 [0119.052] CloseHandle (hObject=0x18c) returned 1 [0119.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", lpFilePart=0x0) returned 0x5d [0119.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\zpcwTV4IyK2Cxpmg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\zpcwTV4IyK2Cxpmg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0119.056] SetErrorMode (uMode=0x1) returned 0x0 [0119.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x17a5c7d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x592d0)) returned 1 [0119.056] SetErrorMode (uMode=0x0) returned 0x1 [0119.057] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\zpcwTV4IyK2Cxpmg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\zpcwtv4iyk2cxpmg_encrypted_by.whiterose")) returned 1 [0119.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.162] SetErrorMode (uMode=0x1) returned 0x0 [0119.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.163] GetFileType (hFile=0x18c) returned 0x1 [0119.163] SetErrorMode (uMode=0x0) returned 0x1 [0119.163] GetFileType (hFile=0x18c) returned 0x1 [0119.163] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3857 [0119.163] ReadFile (in: hFile=0x18c, lpBuffer=0x26f5508, nNumberOfBytesToRead=0x3857, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x26f5508*, lpNumberOfBytesRead=0x27e508*=0x3857, lpOverlapped=0x0) returned 1 [0119.165] CloseHandle (hObject=0x18c) returned 1 [0119.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.165] SetErrorMode (uMode=0x1) returned 0x0 [0119.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857)) returned 1 [0119.166] SetErrorMode (uMode=0x0) returned 0x1 [0119.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.232] SetErrorMode (uMode=0x1) returned 0x0 [0119.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.236] GetFileType (hFile=0x18c) returned 0x1 [0119.236] SetErrorMode (uMode=0x0) returned 0x1 [0119.236] GetFileType (hFile=0x18c) returned 0x1 [0119.237] WriteFile (in: hFile=0x18c, lpBuffer=0x2769820*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2769820*, lpNumberOfBytesWritten=0x27e588*=0x3960, lpOverlapped=0x0) returned 1 [0119.238] CloseHandle (hObject=0x18c) returned 1 [0119.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\O6MtxpT8v3pjo**p_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\O6MtxpT8v3pjo**p_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0119.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x5c [0119.246] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt")) returned 1 [0119.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.249] SetErrorMode (uMode=0x1) returned 0x0 [0119.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.250] GetFileType (hFile=0x18c) returned 0x1 [0119.250] SetErrorMode (uMode=0x0) returned 0x1 [0119.250] GetFileType (hFile=0x18c) returned 0x1 [0119.250] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x39c8 [0119.250] ReadFile (in: hFile=0x18c, lpBuffer=0x276f0b8, nNumberOfBytesToRead=0x39c8, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x276f0b8*, lpNumberOfBytesRead=0x27e508*=0x39c8, lpOverlapped=0x0) returned 1 [0119.253] CloseHandle (hObject=0x18c) returned 1 [0119.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.254] SetErrorMode (uMode=0x1) returned 0x0 [0119.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8)) returned 1 [0119.254] SetErrorMode (uMode=0x0) returned 0x1 [0119.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.360] SetErrorMode (uMode=0x1) returned 0x0 [0119.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.362] GetFileType (hFile=0x18c) returned 0x1 [0119.362] SetErrorMode (uMode=0x0) returned 0x1 [0119.362] GetFileType (hFile=0x18c) returned 0x1 [0119.362] WriteFile (in: hFile=0x18c, lpBuffer=0x27eb288*, nNumberOfBytesToWrite=0x3ad0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27eb288*, lpNumberOfBytesWritten=0x27e588*=0x3ad0, lpOverlapped=0x0) returned 1 [0119.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\zYi9KAQe*NSc2JK8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\zYi9KAQe*NSc2JK8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0119.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x5f [0119.366] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt")) returned 1 [0119.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x5d [0119.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x5d [0119.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x5d [0119.500] SetErrorMode (uMode=0x1) returned 0x0 [0119.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.500] GetFileType (hFile=0x18c) returned 0x1 [0119.500] SetErrorMode (uMode=0x0) returned 0x1 [0119.501] GetFileType (hFile=0x18c) returned 0x1 [0119.501] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3d73 [0119.501] ReadFile (in: hFile=0x18c, lpBuffer=0x27f0c80, nNumberOfBytesToRead=0x3d73, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27f0c80*, lpNumberOfBytesRead=0x27e508*=0x3d73, lpOverlapped=0x0) returned 1 [0119.507] CloseHandle (hObject=0x18c) returned 1 [0119.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x5d [0119.508] SetErrorMode (uMode=0x1) returned 0x0 [0119.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73)) returned 1 [0119.508] SetErrorMode (uMode=0x0) returned 0x1 [0119.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x5d [0119.603] SetErrorMode (uMode=0x1) returned 0x0 [0119.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.604] GetFileType (hFile=0x18c) returned 0x1 [0119.605] SetErrorMode (uMode=0x0) returned 0x1 [0119.605] GetFileType (hFile=0x18c) returned 0x1 [0119.605] WriteFile (in: hFile=0x18c, lpBuffer=0x286eaf8*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x286eaf8*, lpNumberOfBytesWritten=0x27e588*=0x3e80, lpOverlapped=0x0) returned 1 [0119.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x5d [0119.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\dkRdpO2ZBMKhX7ra_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\dkRdpO2ZBMKhX7ra_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0119.607] SetErrorMode (uMode=0x1) returned 0x0 [0119.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x17e86e50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3e80)) returned 1 [0119.607] SetErrorMode (uMode=0x0) returned 0x1 [0119.607] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\dkRdpO2ZBMKhX7ra_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\dkrdpo2zbmkhx7ra_encrypted_by.whiterose")) returned 1 [0119.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", lpFilePart=0x0) returned 0x5b [0119.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", lpFilePart=0x0) returned 0x5b [0119.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", lpFilePart=0x0) returned 0x5b [0119.709] SetErrorMode (uMode=0x1) returned 0x0 [0119.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.709] GetFileType (hFile=0x18c) returned 0x1 [0119.709] SetErrorMode (uMode=0x0) returned 0x1 [0119.709] GetFileType (hFile=0x18c) returned 0x1 [0119.709] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3bc5 [0119.709] ReadFile (in: hFile=0x18c, lpBuffer=0x2874420, nNumberOfBytesToRead=0x3bc5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2874420*, lpNumberOfBytesRead=0x27e508*=0x3bc5, lpOverlapped=0x0) returned 1 [0119.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", lpFilePart=0x0) returned 0x5b [0119.711] SetErrorMode (uMode=0x1) returned 0x0 [0119.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5)) returned 1 [0119.711] SetErrorMode (uMode=0x0) returned 0x1 [0119.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", lpFilePart=0x0) returned 0x5b [0119.788] SetErrorMode (uMode=0x1) returned 0x0 [0119.788] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.790] GetFileType (hFile=0x18c) returned 0x1 [0119.790] SetErrorMode (uMode=0x0) returned 0x1 [0119.790] GetFileType (hFile=0x18c) returned 0x1 [0119.790] WriteFile (in: hFile=0x18c, lpBuffer=0x28f1c08*, nNumberOfBytesToWrite=0x3cd0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28f1c08*, lpNumberOfBytesWritten=0x27e588*=0x3cd0, lpOverlapped=0x0) returned 1 [0119.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", lpFilePart=0x0) returned 0x5b [0119.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\8ieKQjHlzamtOv4j_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\8ieKQjHlzamtOv4j_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0119.791] SetErrorMode (uMode=0x1) returned 0x0 [0119.791] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1804fed0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3cd0)) returned 1 [0119.791] SetErrorMode (uMode=0x0) returned 0x1 [0119.792] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\8ieKQjHlzamtOv4j_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\8iekqjhlzamtov4j_encrypted_by.whiterose")) returned 1 [0119.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0119.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0119.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0119.896] SetErrorMode (uMode=0x1) returned 0x0 [0119.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.897] GetFileType (hFile=0x18c) returned 0x1 [0119.897] SetErrorMode (uMode=0x0) returned 0x1 [0119.897] GetFileType (hFile=0x18c) returned 0x1 [0119.897] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3219 [0119.897] ReadFile (in: hFile=0x18c, lpBuffer=0x28f7380, nNumberOfBytesToRead=0x3219, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28f7380*, lpNumberOfBytesRead=0x27e508*=0x3219, lpOverlapped=0x0) returned 1 [0119.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0119.899] SetErrorMode (uMode=0x1) returned 0x0 [0119.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219)) returned 1 [0119.899] SetErrorMode (uMode=0x0) returned 0x1 [0119.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0119.989] SetErrorMode (uMode=0x1) returned 0x0 [0119.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0119.991] GetFileType (hFile=0x18c) returned 0x1 [0119.991] SetErrorMode (uMode=0x0) returned 0x1 [0119.991] GetFileType (hFile=0x18c) returned 0x1 [0119.991] WriteFile (in: hFile=0x18c, lpBuffer=0x2770338*, nNumberOfBytesToWrite=0x3320, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2770338*, lpNumberOfBytesWritten=0x27e588*=0x3320, lpOverlapped=0x0) returned 1 [0119.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0119.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\OaWFgJt*H99tmNW8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\OaWFgJt*H99tmNW8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0119.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x5e [0120.000] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt")) returned 1 [0120.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x5e [0120.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x5e [0120.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x5e [0120.003] SetErrorMode (uMode=0x1) returned 0x0 [0120.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.003] GetFileType (hFile=0x18c) returned 0x1 [0120.003] SetErrorMode (uMode=0x0) returned 0x1 [0120.003] GetFileType (hFile=0x18c) returned 0x1 [0120.003] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x121a [0120.003] ReadFile (in: hFile=0x18c, lpBuffer=0x2775578, nNumberOfBytesToRead=0x121a, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2775578*, lpNumberOfBytesRead=0x27e508*=0x121a, lpOverlapped=0x0) returned 1 [0120.005] CloseHandle (hObject=0x18c) returned 1 [0120.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x5e [0120.006] SetErrorMode (uMode=0x1) returned 0x0 [0120.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1 [0120.006] SetErrorMode (uMode=0x0) returned 0x1 [0120.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x5e [0120.150] SetErrorMode (uMode=0x1) returned 0x0 [0120.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.151] GetFileType (hFile=0x18c) returned 0x1 [0120.151] SetErrorMode (uMode=0x0) returned 0x1 [0120.151] GetFileType (hFile=0x18c) returned 0x1 [0120.151] WriteFile (in: hFile=0x18c, lpBuffer=0x27d53f0*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27d53f0*, lpNumberOfBytesWritten=0x27e588*=0x1320, lpOverlapped=0x0) returned 1 [0120.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x5e [0120.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\VKEJHSBjkNnRZHJO_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\VKEJHSBjkNnRZHJO_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0120.152] SetErrorMode (uMode=0x1) returned 0x0 [0120.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x183bbe70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1320)) returned 1 [0120.153] SetErrorMode (uMode=0x0) returned 0x1 [0120.153] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\VKEJHSBjkNnRZHJO_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\vkejhsbjknnrzhjo_encrypted_by.whiterose")) returned 1 [0120.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6c [0120.270] SetErrorMode (uMode=0x1) returned 0x0 [0120.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0120.272] GetFileType (hFile=0x18c) returned 0x1 [0120.273] SetErrorMode (uMode=0x0) returned 0x1 [0120.273] GetFileType (hFile=0x18c) returned 0x1 [0120.274] WriteFile (in: hFile=0x18c, lpBuffer=0x27e8ff8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27e8ff8*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0120.276] WriteFile (in: hFile=0x18c, lpBuffer=0x27e8ff8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27e8ff8*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0120.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x52 [0120.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x52 [0120.277] SetErrorMode (uMode=0x1) returned 0x0 [0120.277] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0120.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0120.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0120.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0120.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0120.281] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0120.281] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0120.281] SetErrorMode (uMode=0x0) returned 0x1 [0120.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x52 [0120.282] SetErrorMode (uMode=0x1) returned 0x0 [0120.282] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0120.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0120.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0120.284] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0120.285] SetErrorMode (uMode=0x0) returned 0x1 [0120.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x5d [0120.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x5d [0120.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x5d [0120.286] SetErrorMode (uMode=0x1) returned 0x0 [0120.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.287] GetFileType (hFile=0x18c) returned 0x1 [0120.287] SetErrorMode (uMode=0x0) returned 0x1 [0120.287] GetFileType (hFile=0x18c) returned 0x1 [0120.287] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2664 [0120.287] ReadFile (in: hFile=0x18c, lpBuffer=0x27f2250, nNumberOfBytesToRead=0x2664, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27f2250*, lpNumberOfBytesRead=0x27e508*=0x2664, lpOverlapped=0x0) returned 1 [0120.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x5d [0120.289] SetErrorMode (uMode=0x1) returned 0x0 [0120.289] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664)) returned 1 [0120.290] SetErrorMode (uMode=0x0) returned 0x1 [0120.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x5d [0120.351] SetErrorMode (uMode=0x1) returned 0x0 [0120.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.353] GetFileType (hFile=0x18c) returned 0x1 [0120.353] SetErrorMode (uMode=0x0) returned 0x1 [0120.353] GetFileType (hFile=0x18c) returned 0x1 [0120.353] WriteFile (in: hFile=0x18c, lpBuffer=0x285e860*, nNumberOfBytesToWrite=0x2770, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x285e860*, lpNumberOfBytesWritten=0x27e588*=0x2770, lpOverlapped=0x0) returned 1 [0120.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x5d [0120.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\yByUlydPXWrXtHVF_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\yByUlydPXWrXtHVF_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0120.354] SetErrorMode (uMode=0x1) returned 0x0 [0120.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x185ab050, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2770)) returned 1 [0120.354] SetErrorMode (uMode=0x0) returned 0x1 [0120.354] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\yByUlydPXWrXtHVF_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\ybyulydpxwrxthvf_encrypted_by.whiterose")) returned 1 [0120.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x5d [0120.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x5d [0120.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x5d [0120.457] SetErrorMode (uMode=0x1) returned 0x0 [0120.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.458] GetFileType (hFile=0x18c) returned 0x1 [0120.458] SetErrorMode (uMode=0x0) returned 0x1 [0120.458] GetFileType (hFile=0x18c) returned 0x1 [0120.458] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x251f [0120.458] ReadFile (in: hFile=0x18c, lpBuffer=0x2862a90, nNumberOfBytesToRead=0x251f, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2862a90*, lpNumberOfBytesRead=0x27e508*=0x251f, lpOverlapped=0x0) returned 1 [0120.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x5d [0120.460] SetErrorMode (uMode=0x1) returned 0x0 [0120.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1 [0120.460] SetErrorMode (uMode=0x0) returned 0x1 [0120.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x5d [0120.518] SetErrorMode (uMode=0x1) returned 0x0 [0120.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.519] GetFileType (hFile=0x18c) returned 0x1 [0120.519] SetErrorMode (uMode=0x0) returned 0x1 [0120.519] GetFileType (hFile=0x18c) returned 0x1 [0120.519] WriteFile (in: hFile=0x18c, lpBuffer=0x28cb830*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28cb830*, lpNumberOfBytesWritten=0x27e588*=0x2620, lpOverlapped=0x0) returned 1 [0120.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x5d [0120.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\p5MC1Rh8emaeIaj6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\p5MC1Rh8emaeIaj6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0120.521] SetErrorMode (uMode=0x1) returned 0x0 [0120.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1874df70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2620)) returned 1 [0120.521] SetErrorMode (uMode=0x0) returned 0x1 [0120.521] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\p5MC1Rh8emaeIaj6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\p5mc1rh8emaeiaj6_encrypted_by.whiterose")) returned 1 [0120.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x5d [0120.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x5d [0120.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x5d [0120.629] SetErrorMode (uMode=0x1) returned 0x0 [0120.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.629] GetFileType (hFile=0x18c) returned 0x1 [0120.629] SetErrorMode (uMode=0x0) returned 0x1 [0120.629] GetFileType (hFile=0x18c) returned 0x1 [0120.629] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x25b5 [0120.629] ReadFile (in: hFile=0x18c, lpBuffer=0x28cf910, nNumberOfBytesToRead=0x25b5, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28cf910*, lpNumberOfBytesRead=0x27e508*=0x25b5, lpOverlapped=0x0) returned 1 [0120.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x5d [0120.632] SetErrorMode (uMode=0x1) returned 0x0 [0120.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5)) returned 1 [0120.632] SetErrorMode (uMode=0x0) returned 0x1 [0120.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x5d [0120.709] SetErrorMode (uMode=0x1) returned 0x0 [0120.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.710] GetFileType (hFile=0x18c) returned 0x1 [0120.710] SetErrorMode (uMode=0x0) returned 0x1 [0120.710] GetFileType (hFile=0x18c) returned 0x1 [0120.710] WriteFile (in: hFile=0x18c, lpBuffer=0x2738cb0*, nNumberOfBytesToWrite=0x26c0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2738cb0*, lpNumberOfBytesWritten=0x27e588*=0x26c0, lpOverlapped=0x0) returned 1 [0120.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x5d [0120.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\Kei8ciUUnq0Kg02S_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\Kei8ciUUnq0Kg02S_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0120.711] SetErrorMode (uMode=0x1) returned 0x0 [0120.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x18916ff0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x26c0)) returned 1 [0120.712] SetErrorMode (uMode=0x0) returned 0x1 [0120.712] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\Kei8ciUUnq0Kg02S_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\kei8ciuunq0kg02s_encrypted_by.whiterose")) returned 1 [0120.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x5d [0120.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x5d [0120.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x5d [0120.816] SetErrorMode (uMode=0x1) returned 0x0 [0120.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.816] GetFileType (hFile=0x18c) returned 0x1 [0120.816] SetErrorMode (uMode=0x0) returned 0x1 [0120.816] GetFileType (hFile=0x18c) returned 0x1 [0120.816] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2414 [0120.816] ReadFile (in: hFile=0x18c, lpBuffer=0x273ce30, nNumberOfBytesToRead=0x2414, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x273ce30*, lpNumberOfBytesRead=0x27e508*=0x2414, lpOverlapped=0x0) returned 1 [0120.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x5d [0120.818] SetErrorMode (uMode=0x1) returned 0x0 [0120.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414)) returned 1 [0120.819] SetErrorMode (uMode=0x0) returned 0x1 [0120.876] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x5d [0120.876] SetErrorMode (uMode=0x1) returned 0x0 [0120.876] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.877] GetFileType (hFile=0x18c) returned 0x1 [0120.877] SetErrorMode (uMode=0x0) returned 0x1 [0120.877] GetFileType (hFile=0x18c) returned 0x1 [0120.877] WriteFile (in: hFile=0x18c, lpBuffer=0x27a5580*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27a5580*, lpNumberOfBytesWritten=0x27e588*=0x2520, lpOverlapped=0x0) returned 1 [0120.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x5d [0120.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\YpIe6A0cEKEvvXBh_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\YpIe6A0cEKEvvXBh_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0120.879] SetErrorMode (uMode=0x1) returned 0x0 [0120.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x18ab9f10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2520)) returned 1 [0120.879] SetErrorMode (uMode=0x0) returned 0x1 [0120.879] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\YpIe6A0cEKEvvXBh_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\ypie6a0cekevvxbh_encrypted_by.whiterose")) returned 1 [0120.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x5d [0120.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x5d [0120.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x5d [0120.995] SetErrorMode (uMode=0x1) returned 0x0 [0120.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0120.995] GetFileType (hFile=0x18c) returned 0x1 [0120.995] SetErrorMode (uMode=0x0) returned 0x1 [0120.995] GetFileType (hFile=0x18c) returned 0x1 [0120.995] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x25ac [0120.995] ReadFile (in: hFile=0x18c, lpBuffer=0x27a9560, nNumberOfBytesToRead=0x25ac, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27a9560*, lpNumberOfBytesRead=0x27e508*=0x25ac, lpOverlapped=0x0) returned 1 [0120.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x5d [0120.997] SetErrorMode (uMode=0x1) returned 0x0 [0120.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac)) returned 1 [0120.997] SetErrorMode (uMode=0x0) returned 0x1 [0121.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x5d [0121.053] SetErrorMode (uMode=0x1) returned 0x0 [0121.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.054] GetFileType (hFile=0x18c) returned 0x1 [0121.054] SetErrorMode (uMode=0x0) returned 0x1 [0121.054] GetFileType (hFile=0x18c) returned 0x1 [0121.054] WriteFile (in: hFile=0x18c, lpBuffer=0x2812960*, nNumberOfBytesToWrite=0x26b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2812960*, lpNumberOfBytesWritten=0x27e588*=0x26b0, lpOverlapped=0x0) returned 1 [0121.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x5d [0121.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\iAeKh3L1NOD25Vi6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\iAeKh3L1NOD25Vi6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0121.056] SetErrorMode (uMode=0x1) returned 0x0 [0121.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x18c5ce30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1 [0121.056] SetErrorMode (uMode=0x0) returned 0x1 [0121.056] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\iAeKh3L1NOD25Vi6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\iaekh3l1nod25vi6_encrypted_by.whiterose")) returned 1 [0121.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.159] SetErrorMode (uMode=0x1) returned 0x0 [0121.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.160] GetFileType (hFile=0x18c) returned 0x1 [0121.160] SetErrorMode (uMode=0x0) returned 0x1 [0121.160] GetFileType (hFile=0x18c) returned 0x1 [0121.160] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x219a [0121.160] ReadFile (in: hFile=0x18c, lpBuffer=0x2816ad0, nNumberOfBytesToRead=0x219a, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2816ad0*, lpNumberOfBytesRead=0x27e508*=0x219a, lpOverlapped=0x0) returned 1 [0121.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.162] SetErrorMode (uMode=0x1) returned 0x0 [0121.162] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a)) returned 1 [0121.162] SetErrorMode (uMode=0x0) returned 0x1 [0121.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.217] SetErrorMode (uMode=0x1) returned 0x0 [0121.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.219] GetFileType (hFile=0x18c) returned 0x1 [0121.219] SetErrorMode (uMode=0x0) returned 0x1 [0121.219] GetFileType (hFile=0x18c) returned 0x1 [0121.219] WriteFile (in: hFile=0x18c, lpBuffer=0x287e0c0*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x287e0c0*, lpNumberOfBytesWritten=0x27e588*=0x22a0, lpOverlapped=0x0) returned 1 [0121.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*4srWkPh6eliioHv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*4srWkPh6eliioHv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0121.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", lpFilePart=0x0) returned 0x5d [0121.222] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt")) returned 1 [0121.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", lpFilePart=0x0) returned 0x5d [0121.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", lpFilePart=0x0) returned 0x5d [0121.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", lpFilePart=0x0) returned 0x5d [0121.225] SetErrorMode (uMode=0x1) returned 0x0 [0121.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.225] GetFileType (hFile=0x18c) returned 0x1 [0121.225] SetErrorMode (uMode=0x0) returned 0x1 [0121.226] GetFileType (hFile=0x18c) returned 0x1 [0121.226] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x22fb [0121.226] ReadFile (in: hFile=0x18c, lpBuffer=0x2882280, nNumberOfBytesToRead=0x22fb, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2882280*, lpNumberOfBytesRead=0x27e508*=0x22fb, lpOverlapped=0x0) returned 1 [0121.227] CloseHandle (hObject=0x18c) returned 1 [0121.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", lpFilePart=0x0) returned 0x5d [0121.228] SetErrorMode (uMode=0x1) returned 0x0 [0121.228] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb)) returned 1 [0121.228] SetErrorMode (uMode=0x0) returned 0x1 [0121.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", lpFilePart=0x0) returned 0x5d [0121.342] SetErrorMode (uMode=0x1) returned 0x0 [0121.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.344] GetFileType (hFile=0x18c) returned 0x1 [0121.344] SetErrorMode (uMode=0x0) returned 0x1 [0121.344] GetFileType (hFile=0x18c) returned 0x1 [0121.344] WriteFile (in: hFile=0x18c, lpBuffer=0x28ea640*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28ea640*, lpNumberOfBytesWritten=0x27e588*=0x2400, lpOverlapped=0x0) returned 1 [0121.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", lpFilePart=0x0) returned 0x5d [0121.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\xeOGWwBoK73HWE7d_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\xeOGWwBoK73HWE7d_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0121.345] SetErrorMode (uMode=0x1) returned 0x0 [0121.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x18f0a6f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0121.345] SetErrorMode (uMode=0x0) returned 0x1 [0121.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\xeOGWwBoK73HWE7d_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\xeogwwbok73hwe7d_encrypted_by.whiterose")) returned 1 [0121.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x5d [0121.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x5d [0121.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x5d [0121.470] SetErrorMode (uMode=0x1) returned 0x0 [0121.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.471] GetFileType (hFile=0x18c) returned 0x1 [0121.471] SetErrorMode (uMode=0x0) returned 0x1 [0121.471] GetFileType (hFile=0x18c) returned 0x1 [0121.471] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x252c [0121.471] ReadFile (in: hFile=0x18c, lpBuffer=0x28ee500, nNumberOfBytesToRead=0x252c, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28ee500*, lpNumberOfBytesRead=0x27e508*=0x252c, lpOverlapped=0x0) returned 1 [0121.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x5d [0121.474] SetErrorMode (uMode=0x1) returned 0x0 [0121.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c)) returned 1 [0121.474] SetErrorMode (uMode=0x0) returned 0x1 [0121.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x5d [0121.537] SetErrorMode (uMode=0x1) returned 0x0 [0121.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.538] GetFileType (hFile=0x18c) returned 0x1 [0121.538] SetErrorMode (uMode=0x0) returned 0x1 [0121.538] GetFileType (hFile=0x18c) returned 0x1 [0121.538] WriteFile (in: hFile=0x18c, lpBuffer=0x27576b0*, nNumberOfBytesToWrite=0x2630, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27576b0*, lpNumberOfBytesWritten=0x27e588*=0x2630, lpOverlapped=0x0) returned 1 [0121.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x5d [0121.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\NUmDA2rNHnqoNoTm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\NUmDA2rNHnqoNoTm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0121.539] SetErrorMode (uMode=0x1) returned 0x0 [0121.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x190f98d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2630)) returned 1 [0121.540] SetErrorMode (uMode=0x0) returned 0x1 [0121.540] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\NUmDA2rNHnqoNoTm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\numda2rnhnqonotm_encrypted_by.whiterose")) returned 1 [0121.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x5d [0121.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x5d [0121.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x5d [0121.643] SetErrorMode (uMode=0x1) returned 0x0 [0121.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.643] GetFileType (hFile=0x18c) returned 0x1 [0121.644] SetErrorMode (uMode=0x0) returned 0x1 [0121.644] GetFileType (hFile=0x18c) returned 0x1 [0121.644] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2522 [0121.644] ReadFile (in: hFile=0x18c, lpBuffer=0x275b7a0, nNumberOfBytesToRead=0x2522, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x275b7a0*, lpNumberOfBytesRead=0x27e508*=0x2522, lpOverlapped=0x0) returned 1 [0121.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x5d [0121.646] SetErrorMode (uMode=0x1) returned 0x0 [0121.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522)) returned 1 [0121.646] SetErrorMode (uMode=0x0) returned 0x1 [0121.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x5d [0121.714] SetErrorMode (uMode=0x1) returned 0x0 [0121.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.715] GetFileType (hFile=0x18c) returned 0x1 [0121.715] SetErrorMode (uMode=0x0) returned 0x1 [0121.715] GetFileType (hFile=0x18c) returned 0x1 [0121.715] WriteFile (in: hFile=0x18c, lpBuffer=0x27c46d0*, nNumberOfBytesToWrite=0x2630, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27c46d0*, lpNumberOfBytesWritten=0x27e588*=0x2630, lpOverlapped=0x0) returned 1 [0121.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x5d [0121.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\uM6x2qeBQkbnlGN0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\uM6x2qeBQkbnlGN0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0121.717] SetErrorMode (uMode=0x1) returned 0x0 [0121.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1929c7f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2630)) returned 1 [0121.717] SetErrorMode (uMode=0x0) returned 0x1 [0121.717] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\uM6x2qeBQkbnlGN0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\um6x2qebqkbnlgn0_encrypted_by.whiterose")) returned 1 [0121.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", lpFilePart=0x0) returned 0x5c [0121.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", lpFilePart=0x0) returned 0x5c [0121.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", lpFilePart=0x0) returned 0x5c [0121.814] SetErrorMode (uMode=0x1) returned 0x0 [0121.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.815] GetFileType (hFile=0x18c) returned 0x1 [0121.815] SetErrorMode (uMode=0x0) returned 0x1 [0121.815] GetFileType (hFile=0x18c) returned 0x1 [0121.815] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2221 [0121.815] ReadFile (in: hFile=0x18c, lpBuffer=0x27c87c0, nNumberOfBytesToRead=0x2221, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27c87c0*, lpNumberOfBytesRead=0x27e508*=0x2221, lpOverlapped=0x0) returned 1 [0121.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", lpFilePart=0x0) returned 0x5c [0121.817] SetErrorMode (uMode=0x1) returned 0x0 [0121.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221)) returned 1 [0121.817] SetErrorMode (uMode=0x0) returned 0x1 [0121.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", lpFilePart=0x0) returned 0x5c [0121.883] SetErrorMode (uMode=0x1) returned 0x0 [0121.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.884] GetFileType (hFile=0x18c) returned 0x1 [0121.884] SetErrorMode (uMode=0x0) returned 0x1 [0121.884] GetFileType (hFile=0x18c) returned 0x1 [0121.885] WriteFile (in: hFile=0x18c, lpBuffer=0x2830250*, nNumberOfBytesToWrite=0x2330, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2830250*, lpNumberOfBytesWritten=0x27e588*=0x2330, lpOverlapped=0x0) returned 1 [0121.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", lpFilePart=0x0) returned 0x5c [0121.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\leifFKiT8LVFAaay_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\leifFKiT8LVFAaay_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0121.886] SetErrorMode (uMode=0x1) returned 0x0 [0121.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1943f710, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2330)) returned 1 [0121.886] SetErrorMode (uMode=0x0) returned 0x1 [0121.886] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\leifFKiT8LVFAaay_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\leiffkit8lvfaaay_encrypted_by.whiterose")) returned 1 [0121.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", lpFilePart=0x0) returned 0x5c [0121.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", lpFilePart=0x0) returned 0x5c [0121.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", lpFilePart=0x0) returned 0x5c [0121.986] SetErrorMode (uMode=0x1) returned 0x0 [0121.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0121.987] GetFileType (hFile=0x18c) returned 0x1 [0121.987] SetErrorMode (uMode=0x0) returned 0x1 [0121.987] GetFileType (hFile=0x18c) returned 0x1 [0121.987] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4a0f2 [0121.990] ReadFile (in: hFile=0x18c, lpBuffer=0x127ddcc8, nNumberOfBytesToRead=0x4a0f2, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x127ddcc8*, lpNumberOfBytesRead=0x27e508*=0x4a0f2, lpOverlapped=0x0) returned 1 [0122.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", lpFilePart=0x0) returned 0x5c [0122.007] SetErrorMode (uMode=0x1) returned 0x0 [0122.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2)) returned 1 [0122.007] SetErrorMode (uMode=0x0) returned 0x1 [0122.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", lpFilePart=0x0) returned 0x5c [0122.108] SetErrorMode (uMode=0x1) returned 0x0 [0122.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.108] GetFileType (hFile=0x18c) returned 0x1 [0122.108] SetErrorMode (uMode=0x0) returned 0x1 [0122.108] GetFileType (hFile=0x18c) returned 0x1 [0122.109] WriteFile (in: hFile=0x18c, lpBuffer=0x1299a868*, nNumberOfBytesToWrite=0x4a200, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x1299a868*, lpNumberOfBytesWritten=0x27e588*=0x4a200, lpOverlapped=0x0) returned 1 [0122.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", lpFilePart=0x0) returned 0x5c [0122.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\cHwYj4mbobDXPEzZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\cHwYj4mbobDXPEzZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0122.114] SetErrorMode (uMode=0x1) returned 0x0 [0122.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1967abb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4a200)) returned 1 [0122.114] SetErrorMode (uMode=0x0) returned 0x1 [0122.114] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\cHwYj4mbobDXPEzZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\chwyj4mbobdxpezz_encrypted_by.whiterose")) returned 1 [0122.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", lpFilePart=0x0) returned 0x5c [0122.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", lpFilePart=0x0) returned 0x5c [0122.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", lpFilePart=0x0) returned 0x5c [0122.220] SetErrorMode (uMode=0x1) returned 0x0 [0122.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.220] GetFileType (hFile=0x18c) returned 0x1 [0122.220] SetErrorMode (uMode=0x0) returned 0x1 [0122.220] GetFileType (hFile=0x18c) returned 0x1 [0122.220] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xccee7 [0122.246] ReadFile (in: hFile=0x18c, lpBuffer=0x126d2418, nNumberOfBytesToRead=0xccee7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesRead=0x27e508*=0xccee7, lpOverlapped=0x0) returned 1 [0122.259] CloseHandle (hObject=0x18c) returned 1 [0122.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", lpFilePart=0x0) returned 0x5c [0122.268] SetErrorMode (uMode=0x1) returned 0x0 [0122.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7)) returned 1 [0122.268] SetErrorMode (uMode=0x0) returned 0x1 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", lpFilePart=0x0) returned 0x5c [0122.421] SetErrorMode (uMode=0x1) returned 0x0 [0122.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.428] GetFileType (hFile=0x18c) returned 0x1 [0122.428] SetErrorMode (uMode=0x0) returned 0x1 [0122.428] GetFileType (hFile=0x18c) returned 0x1 [0122.428] WriteFile (in: hFile=0x18c, lpBuffer=0x12ba0340*, nNumberOfBytesToWrite=0xccff0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x12ba0340*, lpNumberOfBytesWritten=0x27e588*=0xccff0, lpOverlapped=0x0) returned 1 [0122.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", lpFilePart=0x0) returned 0x5c [0122.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\rm7VYxdzlt3DHom8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\rm7VYxdzlt3DHom8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0122.441] SetErrorMode (uMode=0x1) returned 0x0 [0122.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1999a890, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xccff0)) returned 1 [0122.441] SetErrorMode (uMode=0x0) returned 0x1 [0122.441] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\rm7VYxdzlt3DHom8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\rm7vyxdzlt3dhom8_encrypted_by.whiterose")) returned 1 [0122.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", lpFilePart=0x0) returned 0x5c [0122.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", lpFilePart=0x0) returned 0x5c [0122.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", lpFilePart=0x0) returned 0x5c [0122.548] SetErrorMode (uMode=0x1) returned 0x0 [0122.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.549] GetFileType (hFile=0x18c) returned 0x1 [0122.549] SetErrorMode (uMode=0x0) returned 0x1 [0122.549] GetFileType (hFile=0x18c) returned 0x1 [0122.549] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xc5492 [0122.550] ReadFile (in: hFile=0x18c, lpBuffer=0x12c6d360, nNumberOfBytesToRead=0xc5492, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x12c6d360*, lpNumberOfBytesRead=0x27e508*=0xc5492, lpOverlapped=0x0) returned 1 [0122.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", lpFilePart=0x0) returned 0x5c [0122.579] SetErrorMode (uMode=0x1) returned 0x0 [0122.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492)) returned 1 [0122.580] SetErrorMode (uMode=0x0) returned 0x1 [0122.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", lpFilePart=0x0) returned 0x5c [0122.736] SetErrorMode (uMode=0x1) returned 0x0 [0122.736] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.743] GetFileType (hFile=0x18c) returned 0x1 [0122.743] SetErrorMode (uMode=0x0) returned 0x1 [0122.743] GetFileType (hFile=0x18c) returned 0x1 [0122.743] WriteFile (in: hFile=0x18c, lpBuffer=0x127979c8*, nNumberOfBytesToWrite=0xc55a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x127979c8*, lpNumberOfBytesWritten=0x27e588*=0xc55a0, lpOverlapped=0x0) returned 1 [0122.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", lpFilePart=0x0) returned 0x5c [0122.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\hjFIBiJDN5WWuvfk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\hjFIBiJDN5WWuvfk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0122.756] SetErrorMode (uMode=0x1) returned 0x0 [0122.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x19c94410, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xc55a0)) returned 1 [0122.756] SetErrorMode (uMode=0x0) returned 0x1 [0122.756] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\hjFIBiJDN5WWuvfk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\hjfibijdn5wwuvfk_encrypted_by.whiterose")) returned 1 [0122.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0122.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0122.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0122.860] SetErrorMode (uMode=0x1) returned 0x0 [0122.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.860] GetFileType (hFile=0x18c) returned 0x1 [0122.860] SetErrorMode (uMode=0x0) returned 0x1 [0122.860] GetFileType (hFile=0x18c) returned 0x1 [0122.860] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x7fa1b [0122.863] ReadFile (in: hFile=0x18c, lpBuffer=0x1285cf98, nNumberOfBytesToRead=0x7fa1b, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x1285cf98*, lpNumberOfBytesRead=0x27e508*=0x7fa1b, lpOverlapped=0x0) returned 1 [0122.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0122.881] SetErrorMode (uMode=0x1) returned 0x0 [0122.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b)) returned 1 [0122.881] SetErrorMode (uMode=0x0) returned 0x1 [0122.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0122.985] SetErrorMode (uMode=0x1) returned 0x0 [0122.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0122.990] GetFileType (hFile=0x18c) returned 0x1 [0122.990] SetErrorMode (uMode=0x0) returned 0x1 [0122.990] GetFileType (hFile=0x18c) returned 0x1 [0122.990] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x7fb20, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e588*=0x7fb20, lpOverlapped=0x0) returned 1 [0122.998] CloseHandle (hObject=0x18c) returned 1 [0123.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0123.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\gRKitYw*o8NvYQEb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\gRKitYw*o8NvYQEb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x7a [0123.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", lpFilePart=0x0) returned 0x5c [0123.016] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt")) returned 1 [0123.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6c [0123.022] SetErrorMode (uMode=0x1) returned 0x0 [0123.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.023] GetFileType (hFile=0x18c) returned 0x1 [0123.023] SetErrorMode (uMode=0x0) returned 0x1 [0123.023] GetFileType (hFile=0x18c) returned 0x1 [0123.025] WriteFile (in: hFile=0x18c, lpBuffer=0x2705de8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2705de8*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0123.026] WriteFile (in: hFile=0x18c, lpBuffer=0x2705de8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2705de8*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0123.027] CloseHandle (hObject=0x18c) returned 1 [0123.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0123.027] SetErrorMode (uMode=0x1) returned 0x0 [0123.027] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.028] GetFileType (hFile=0x18c) returned 0x1 [0123.028] SetErrorMode (uMode=0x0) returned 0x1 [0123.028] GetFileType (hFile=0x18c) returned 0x1 [0123.030] WriteFile (in: hFile=0x18c, lpBuffer=0x271bf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x271bf48*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0123.032] CloseHandle (hObject=0x18c) returned 1 [0123.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0123.032] SetErrorMode (uMode=0x1) returned 0x0 [0123.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.033] GetFileType (hFile=0x18c) returned 0x1 [0123.033] SetErrorMode (uMode=0x0) returned 0x1 [0123.033] GetFileType (hFile=0x18c) returned 0x1 [0123.034] CloseHandle (hObject=0x18c) returned 1 [0123.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0123.035] SetErrorMode (uMode=0x1) returned 0x0 [0123.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.035] GetFileType (hFile=0x18c) returned 0x1 [0123.035] SetErrorMode (uMode=0x0) returned 0x1 [0123.035] GetFileType (hFile=0x18c) returned 0x1 [0123.037] CloseHandle (hObject=0x18c) returned 1 [0123.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0123.037] SetErrorMode (uMode=0x1) returned 0x0 [0123.037] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.038] GetFileType (hFile=0x18c) returned 0x1 [0123.038] SetErrorMode (uMode=0x0) returned 0x1 [0123.038] GetFileType (hFile=0x18c) returned 0x1 [0123.039] CloseHandle (hObject=0x18c) returned 1 [0123.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", lpFilePart=0x0) returned 0x34 [0123.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", lpFilePart=0x0) returned 0x34 [0123.040] SetErrorMode (uMode=0x1) returned 0x0 [0123.040] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0 [0123.041] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.041] SetErrorMode (uMode=0x0) returned 0x1 [0123.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", lpFilePart=0x0) returned 0x34 [0123.041] SetErrorMode (uMode=0x1) returned 0x0 [0123.042] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.042] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0 [0123.042] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.042] SetErrorMode (uMode=0x0) returned 0x1 [0123.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpFilePart=0x0) returned 0x5b [0123.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpFilePart=0x0) returned 0x5b [0123.043] SetErrorMode (uMode=0x1) returned 0x0 [0123.043] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.054] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.054] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0123.054] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0123.054] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0123.054] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0123.055] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0123.056] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc69b0a00, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4c1e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc69b0a00, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0123.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0123.057] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.058] SetErrorMode (uMode=0x0) returned 0x1 [0123.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpFilePart=0x0) returned 0x5b [0123.059] SetErrorMode (uMode=0x1) returned 0x0 [0123.059] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0123.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0123.061] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0123.062] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0123.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0123.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0123.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0123.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0123.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0123.063] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0123.064] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0123.064] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc69b0a00, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4c1e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc69b0a00, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0123.064] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0123.064] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0123.064] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0123.064] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.065] SetErrorMode (uMode=0x0) returned 0x1 [0123.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", lpFilePart=0x0) returned 0x64 [0123.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", lpFilePart=0x0) returned 0x64 [0123.065] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.065] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.066] CoTaskMemFree (pv=0xffa70) [0123.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", lpFilePart=0x0) returned 0x64 [0123.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", lpFilePart=0x0) returned 0x64 [0123.066] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.066] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.066] CoTaskMemFree (pv=0xffa70) [0123.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", lpFilePart=0x0) returned 0x64 [0123.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", lpFilePart=0x0) returned 0x64 [0123.067] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.067] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.067] CoTaskMemFree (pv=0xffa70) [0123.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", lpFilePart=0x0) returned 0x64 [0123.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", lpFilePart=0x0) returned 0x64 [0123.067] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.067] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.067] CoTaskMemFree (pv=0xffa70) [0123.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", lpFilePart=0x0) returned 0x64 [0123.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", lpFilePart=0x0) returned 0x64 [0123.068] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.068] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.068] CoTaskMemFree (pv=0xffa70) [0123.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", lpFilePart=0x0) returned 0x64 [0123.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", lpFilePart=0x0) returned 0x64 [0123.068] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.068] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.068] CoTaskMemFree (pv=0xffa70) [0123.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", lpFilePart=0x0) returned 0x64 [0123.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", lpFilePart=0x0) returned 0x64 [0123.069] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.069] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.069] CoTaskMemFree (pv=0xffa70) [0123.069] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", lpFilePart=0x0) returned 0x64 [0123.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", lpFilePart=0x0) returned 0x64 [0123.069] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.069] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.069] CoTaskMemFree (pv=0xffa70) [0123.069] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", lpFilePart=0x0) returned 0x64 [0123.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", lpFilePart=0x0) returned 0x64 [0123.070] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.070] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.070] CoTaskMemFree (pv=0xffa70) [0123.070] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", lpFilePart=0x0) returned 0x64 [0123.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", lpFilePart=0x0) returned 0x64 [0123.070] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.070] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.071] CoTaskMemFree (pv=0xffa70) [0123.071] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", lpFilePart=0x0) returned 0x64 [0123.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", lpFilePart=0x0) returned 0x64 [0123.071] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.071] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.071] CoTaskMemFree (pv=0xffa70) [0123.071] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", lpFilePart=0x0) returned 0x64 [0123.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", lpFilePart=0x0) returned 0x64 [0123.072] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.072] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.072] CoTaskMemFree (pv=0xffa70) [0123.072] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", lpFilePart=0x0) returned 0x64 [0123.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", lpFilePart=0x0) returned 0x64 [0123.072] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.072] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.072] CoTaskMemFree (pv=0xffa70) [0123.072] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", lpFilePart=0x0) returned 0x64 [0123.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", lpFilePart=0x0) returned 0x64 [0123.073] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.073] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.073] CoTaskMemFree (pv=0xffa70) [0123.073] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", lpFilePart=0x0) returned 0x64 [0123.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", lpFilePart=0x0) returned 0x64 [0123.073] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.073] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.073] CoTaskMemFree (pv=0xffa70) [0123.073] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", lpFilePart=0x0) returned 0x64 [0123.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", lpFilePart=0x0) returned 0x64 [0123.074] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.074] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.074] CoTaskMemFree (pv=0xffa70) [0123.074] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", lpFilePart=0x0) returned 0x64 [0123.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", lpFilePart=0x0) returned 0x64 [0123.074] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.074] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.074] CoTaskMemFree (pv=0xffa70) [0123.074] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", lpFilePart=0x0) returned 0x64 [0123.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", lpFilePart=0x0) returned 0x64 [0123.075] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.075] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.075] CoTaskMemFree (pv=0xffa70) [0123.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", lpFilePart=0x0) returned 0x64 [0123.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", lpFilePart=0x0) returned 0x64 [0123.075] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.075] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.075] CoTaskMemFree (pv=0xffa70) [0123.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", lpFilePart=0x0) returned 0x64 [0123.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", lpFilePart=0x0) returned 0x64 [0123.076] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.076] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.076] CoTaskMemFree (pv=0xffa70) [0123.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", lpFilePart=0x0) returned 0x64 [0123.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", lpFilePart=0x0) returned 0x64 [0123.076] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.077] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.077] CoTaskMemFree (pv=0xffa70) [0123.077] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", lpFilePart=0x0) returned 0x64 [0123.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", lpFilePart=0x0) returned 0x64 [0123.077] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.077] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.077] CoTaskMemFree (pv=0xffa70) [0123.077] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", lpFilePart=0x0) returned 0x64 [0123.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", lpFilePart=0x0) returned 0x64 [0123.078] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.078] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.079] CoTaskMemFree (pv=0xffa70) [0123.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", lpFilePart=0x0) returned 0x64 [0123.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", lpFilePart=0x0) returned 0x64 [0123.079] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.079] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.079] CoTaskMemFree (pv=0xffa70) [0123.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", lpFilePart=0x0) returned 0x64 [0123.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", lpFilePart=0x0) returned 0x64 [0123.080] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.080] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.080] CoTaskMemFree (pv=0xffa70) [0123.080] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", lpFilePart=0x0) returned 0x64 [0123.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", lpFilePart=0x0) returned 0x64 [0123.080] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.080] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.080] CoTaskMemFree (pv=0xffa70) [0123.080] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", lpFilePart=0x0) returned 0x64 [0123.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", lpFilePart=0x0) returned 0x64 [0123.081] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.081] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.081] CoTaskMemFree (pv=0xffa70) [0123.081] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", lpFilePart=0x0) returned 0x65 [0123.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", lpFilePart=0x0) returned 0x65 [0123.081] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.081] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.081] CoTaskMemFree (pv=0xffa70) [0123.081] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", lpFilePart=0x0) returned 0x68 [0123.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", lpFilePart=0x0) returned 0x68 [0123.082] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.082] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.082] CoTaskMemFree (pv=0xffa70) [0123.082] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", lpFilePart=0x0) returned 0x65 [0123.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", lpFilePart=0x0) returned 0x65 [0123.083] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.083] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.083] CoTaskMemFree (pv=0xffa70) [0123.083] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", lpFilePart=0x0) returned 0x65 [0123.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", lpFilePart=0x0) returned 0x65 [0123.083] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.083] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.083] CoTaskMemFree (pv=0xffa70) [0123.083] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", lpFilePart=0x0) returned 0x65 [0123.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", lpFilePart=0x0) returned 0x65 [0123.084] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.084] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.084] CoTaskMemFree (pv=0xffa70) [0123.084] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x75 [0123.084] SetErrorMode (uMode=0x1) returned 0x0 [0123.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.085] GetFileType (hFile=0x18c) returned 0x1 [0123.086] SetErrorMode (uMode=0x0) returned 0x1 [0123.086] GetFileType (hFile=0x18c) returned 0x1 [0123.087] CloseHandle (hObject=0x18c) returned 1 [0123.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0123.088] SetErrorMode (uMode=0x1) returned 0x0 [0123.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.088] GetFileType (hFile=0x18c) returned 0x1 [0123.088] SetErrorMode (uMode=0x0) returned 0x1 [0123.088] GetFileType (hFile=0x18c) returned 0x1 [0123.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x42 [0123.090] SetErrorMode (uMode=0x1) returned 0x0 [0123.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.090] SetErrorMode (uMode=0x0) returned 0x1 [0123.090] GetFileType (hFile=0x18c) returned 0x1 [0123.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x36 [0123.092] SetErrorMode (uMode=0x1) returned 0x0 [0123.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\adobe\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.092] SetErrorMode (uMode=0x0) returned 0x1 [0123.092] GetFileType (hFile=0x18c) returned 0x1 [0123.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files", lpFilePart=0x0) returned 0x23 [0123.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files", lpFilePart=0x0) returned 0x23 [0123.095] SetErrorMode (uMode=0x1) returned 0x0 [0123.095] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.095] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.095] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b71ed0, ftCreationTime.dwHighDateTime=0x1d4d276, ftLastAccessTime.dwLowDateTime=0xb650a7f0, ftLastAccessTime.dwHighDateTime=0x1d4fd05, ftLastWriteTime.dwLowDateTime=0xb650a7f0, ftLastWriteTime.dwHighDateTime=0x1d4fd05, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="belt beam awful.exe", cAlternateFileName="BELTBE~1.EXE")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0123.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0123.096] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.096] SetErrorMode (uMode=0x0) returned 0x1 [0123.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files", lpFilePart=0x0) returned 0x23 [0123.096] SetErrorMode (uMode=0x1) returned 0x0 [0123.096] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b71ed0, ftCreationTime.dwHighDateTime=0x1d4d276, ftLastAccessTime.dwLowDateTime=0xb650a7f0, ftLastAccessTime.dwHighDateTime=0x1d4fd05, ftLastWriteTime.dwLowDateTime=0xb650a7f0, ftLastWriteTime.dwHighDateTime=0x1d4fd05, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="belt beam awful.exe", cAlternateFileName="BELTBE~1.EXE")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0123.097] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0123.097] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.097] SetErrorMode (uMode=0x0) returned 0x1 [0123.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\belt beam awful.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\belt beam awful.exe", lpFilePart=0x0) returned 0x37 [0123.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\belt beam awful.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\belt beam awful.exe", lpFilePart=0x0) returned 0x37 [0123.098] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.098] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.098] CoTaskMemFree (pv=0xffa70) [0123.098] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe", lpFilePart=0x0) returned 0x29 [0123.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe", lpFilePart=0x0) returned 0x29 [0123.098] SetErrorMode (uMode=0x1) returned 0x0 [0123.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.098] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.098] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0123.098] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0123.098] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0123.098] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0123.099] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.099] SetErrorMode (uMode=0x0) returned 0x1 [0123.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe", lpFilePart=0x0) returned 0x29 [0123.099] SetErrorMode (uMode=0x1) returned 0x0 [0123.099] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.099] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.099] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0123.099] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0123.099] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0123.099] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0123.099] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.100] SetErrorMode (uMode=0x0) returned 0x1 [0123.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0123.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0123.100] SetErrorMode (uMode=0x1) returned 0x0 [0123.100] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0123.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0123.101] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.101] SetErrorMode (uMode=0x0) returned 0x1 [0123.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0123.101] SetErrorMode (uMode=0x1) returned 0x0 [0123.101] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0123.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0123.101] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.102] SetErrorMode (uMode=0x0) returned 0x1 [0123.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", lpFilePart=0x0) returned 0x39 [0123.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", lpFilePart=0x0) returned 0x39 [0123.102] SetErrorMode (uMode=0x1) returned 0x0 [0123.102] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.103] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0123.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0123.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0123.106] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0123.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0123.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0123.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0123.108] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.109] SetErrorMode (uMode=0x0) returned 0x1 [0123.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", lpFilePart=0x0) returned 0x39 [0123.109] SetErrorMode (uMode=0x1) returned 0x0 [0123.109] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0123.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0123.113] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.114] SetErrorMode (uMode=0x0) returned 0x1 [0123.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll", lpFilePart=0x0) returned 0x4a [0123.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll", lpFilePart=0x0) returned 0x4a [0123.114] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.114] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.114] CoTaskMemFree (pv=0xffa70) [0123.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll", lpFilePart=0x0) returned 0x4e [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll", lpFilePart=0x0) returned 0x4e [0123.115] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.115] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.115] CoTaskMemFree (pv=0xffa70) [0123.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", lpFilePart=0x0) returned 0x45 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", lpFilePart=0x0) returned 0x45 [0123.115] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.115] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.115] CoTaskMemFree (pv=0xffa70) [0123.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", lpFilePart=0x0) returned 0x45 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", lpFilePart=0x0) returned 0x45 [0123.115] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.115] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.115] CoTaskMemFree (pv=0xffa70) [0123.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", lpFilePart=0x0) returned 0x45 [0123.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", lpFilePart=0x0) returned 0x45 [0123.116] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.116] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.116] CoTaskMemFree (pv=0xffa70) [0123.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", lpFilePart=0x0) returned 0x45 [0123.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", lpFilePart=0x0) returned 0x45 [0123.116] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.116] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.116] CoTaskMemFree (pv=0xffa70) [0123.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", lpFilePart=0x0) returned 0x45 [0123.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", lpFilePart=0x0) returned 0x45 [0123.116] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.116] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.116] CoTaskMemFree (pv=0xffa70) [0123.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", lpFilePart=0x0) returned 0x45 [0123.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", lpFilePart=0x0) returned 0x45 [0123.116] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.116] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.116] CoTaskMemFree (pv=0xffa70) [0123.117] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll", lpFilePart=0x0) returned 0x45 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll", lpFilePart=0x0) returned 0x45 [0123.117] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.117] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.117] CoTaskMemFree (pv=0xffa70) [0123.117] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", lpFilePart=0x0) returned 0x45 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", lpFilePart=0x0) returned 0x45 [0123.117] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.117] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.117] CoTaskMemFree (pv=0xffa70) [0123.117] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", lpFilePart=0x0) returned 0x45 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", lpFilePart=0x0) returned 0x45 [0123.117] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.117] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.117] CoTaskMemFree (pv=0xffa70) [0123.117] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", lpFilePart=0x0) returned 0x45 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", lpFilePart=0x0) returned 0x45 [0123.118] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.118] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.118] CoTaskMemFree (pv=0xffa70) [0123.118] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", lpFilePart=0x0) returned 0x45 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", lpFilePart=0x0) returned 0x45 [0123.118] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.118] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.118] CoTaskMemFree (pv=0xffa70) [0123.118] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", lpFilePart=0x0) returned 0x45 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", lpFilePart=0x0) returned 0x45 [0123.118] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.118] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.118] CoTaskMemFree (pv=0xffa70) [0123.118] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", lpFilePart=0x0) returned 0x45 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", lpFilePart=0x0) returned 0x45 [0123.118] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.118] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.119] CoTaskMemFree (pv=0xffa70) [0123.119] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", lpFilePart=0x0) returned 0x45 [0123.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", lpFilePart=0x0) returned 0x45 [0123.119] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.119] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.119] CoTaskMemFree (pv=0xffa70) [0123.119] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", lpFilePart=0x0) returned 0x45 [0123.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", lpFilePart=0x0) returned 0x45 [0123.119] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.119] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.119] CoTaskMemFree (pv=0xffa70) [0123.119] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", lpFilePart=0x0) returned 0x45 [0123.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", lpFilePart=0x0) returned 0x45 [0123.119] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.119] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.119] CoTaskMemFree (pv=0xffa70) [0123.119] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", lpFilePart=0x0) returned 0x45 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", lpFilePart=0x0) returned 0x45 [0123.120] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.120] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.120] CoTaskMemFree (pv=0xffa70) [0123.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", lpFilePart=0x0) returned 0x45 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", lpFilePart=0x0) returned 0x45 [0123.120] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.120] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.120] CoTaskMemFree (pv=0xffa70) [0123.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", lpFilePart=0x0) returned 0x45 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", lpFilePart=0x0) returned 0x45 [0123.120] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.120] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.120] CoTaskMemFree (pv=0xffa70) [0123.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", lpFilePart=0x0) returned 0x45 [0123.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", lpFilePart=0x0) returned 0x45 [0123.121] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.121] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.121] CoTaskMemFree (pv=0xffa70) [0123.121] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", lpFilePart=0x0) returned 0x45 [0123.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", lpFilePart=0x0) returned 0x45 [0123.121] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.121] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.121] CoTaskMemFree (pv=0xffa70) [0123.121] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", lpFilePart=0x0) returned 0x45 [0123.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", lpFilePart=0x0) returned 0x45 [0123.121] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.121] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.121] CoTaskMemFree (pv=0xffa70) [0123.121] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", lpFilePart=0x0) returned 0x45 [0123.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", lpFilePart=0x0) returned 0x45 [0123.121] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.121] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.121] CoTaskMemFree (pv=0xffa70) [0123.122] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", lpFilePart=0x0) returned 0x45 [0123.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", lpFilePart=0x0) returned 0x45 [0123.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", lpFilePart=0x0) returned 0x45 [0123.122] SetErrorMode (uMode=0x1) returned 0x0 [0123.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.123] SetErrorMode (uMode=0x0) returned 0x1 [0123.124] GetFileType (hFile=0x18c) returned 0x1 [0123.124] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4c400 [0123.125] ReadFile (in: hFile=0x18c, lpBuffer=0x12751f68, nNumberOfBytesToRead=0x4c400, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x12751f68*, lpNumberOfBytesRead=0x27e6e8*=0x4c400, lpOverlapped=0x0) returned 1 [0123.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", lpFilePart=0x0) returned 0x45 [0123.130] SetErrorMode (uMode=0x1) returned 0x0 [0123.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400)) returned 1 [0123.131] SetErrorMode (uMode=0x0) returned 0x1 [0123.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", lpFilePart=0x0) returned 0x45 [0123.229] SetErrorMode (uMode=0x1) returned 0x0 [0123.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.234] SetErrorMode (uMode=0x0) returned 0x1 [0123.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", lpFilePart=0x0) returned 0x45 [0123.235] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo")) returned 0 [0123.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", lpFilePart=0x0) returned 0x45 [0123.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", lpFilePart=0x0) returned 0x45 [0123.238] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.238] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.239] CoTaskMemFree (pv=0xffa70) [0123.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", lpFilePart=0x0) returned 0x45 [0123.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", lpFilePart=0x0) returned 0x45 [0123.239] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.239] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.239] CoTaskMemFree (pv=0xffa70) [0123.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", lpFilePart=0x0) returned 0x45 [0123.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", lpFilePart=0x0) returned 0x45 [0123.239] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.239] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.239] CoTaskMemFree (pv=0xffa70) [0123.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", lpFilePart=0x0) returned 0x46 [0123.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", lpFilePart=0x0) returned 0x46 [0123.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.240] CoTaskMemFree (pv=0xffa70) [0123.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", lpFilePart=0x0) returned 0x46 [0123.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", lpFilePart=0x0) returned 0x46 [0123.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.240] CoTaskMemFree (pv=0xffa70) [0123.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", lpFilePart=0x0) returned 0x46 [0123.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", lpFilePart=0x0) returned 0x46 [0123.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.240] CoTaskMemFree (pv=0xffa70) [0123.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", lpFilePart=0x0) returned 0x46 [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", lpFilePart=0x0) returned 0x46 [0123.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.241] CoTaskMemFree (pv=0xffa70) [0123.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", lpFilePart=0x0) returned 0x46 [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", lpFilePart=0x0) returned 0x46 [0123.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.241] CoTaskMemFree (pv=0xffa70) [0123.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", lpFilePart=0x0) returned 0x46 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", lpFilePart=0x0) returned 0x46 [0123.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.242] CoTaskMemFree (pv=0xffa70) [0123.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll", lpFilePart=0x0) returned 0x46 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll", lpFilePart=0x0) returned 0x46 [0123.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.242] CoTaskMemFree (pv=0xffa70) [0123.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", lpFilePart=0x0) returned 0x46 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", lpFilePart=0x0) returned 0x46 [0123.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.242] CoTaskMemFree (pv=0xffa70) [0123.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", lpFilePart=0x0) returned 0x46 [0123.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", lpFilePart=0x0) returned 0x46 [0123.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.243] CoTaskMemFree (pv=0xffa70) [0123.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", lpFilePart=0x0) returned 0x46 [0123.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", lpFilePart=0x0) returned 0x46 [0123.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.243] CoTaskMemFree (pv=0xffa70) [0123.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", lpFilePart=0x0) returned 0x46 [0123.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", lpFilePart=0x0) returned 0x46 [0123.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.244] CoTaskMemFree (pv=0xffa70) [0123.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.244] CoTaskMemFree (pv=0xffa70) [0123.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.244] CoTaskMemFree (pv=0xffa70) [0123.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.245] CoTaskMemFree (pv=0xffa70) [0123.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.245] CoTaskMemFree (pv=0xffa70) [0123.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.245] CoTaskMemFree (pv=0xffa70) [0123.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.246] CoTaskMemFree (pv=0xffa70) [0123.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.246] CoTaskMemFree (pv=0xffa70) [0123.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.246] CoTaskMemFree (pv=0xffa70) [0123.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.247] CoTaskMemFree (pv=0xffa70) [0123.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.247] CoTaskMemFree (pv=0xffa70) [0123.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.247] CoTaskMemFree (pv=0xffa70) [0123.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.248] CoTaskMemFree (pv=0xffa70) [0123.248] SetErrorMode (uMode=0x1) returned 0x0 [0123.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.248] GetFileType (hFile=0x18c) returned 0x1 [0123.248] SetErrorMode (uMode=0x0) returned 0x1 [0123.249] GetFileType (hFile=0x18c) returned 0x1 [0123.249] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x49600 [0123.251] ReadFile (in: hFile=0x18c, lpBuffer=0x12968298, nNumberOfBytesToRead=0x49600, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x12968298*, lpNumberOfBytesRead=0x27e6e8*=0x49600, lpOverlapped=0x0) returned 1 [0123.255] CloseHandle (hObject=0x18c) returned 1 [0123.258] SetErrorMode (uMode=0x1) returned 0x0 [0123.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600)) returned 1 [0123.259] SetErrorMode (uMode=0x0) returned 0x1 [0123.372] SetErrorMode (uMode=0x1) returned 0x0 [0123.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.375] SetErrorMode (uMode=0x0) returned 0x1 [0123.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", lpFilePart=0x0) returned 0x46 [0123.377] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo")) returned 0 [0123.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", lpFilePart=0x0) returned 0x46 [0123.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", lpFilePart=0x0) returned 0x46 [0123.385] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.385] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.385] CoTaskMemFree (pv=0xffa70) [0123.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", lpFilePart=0x0) returned 0x46 [0123.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", lpFilePart=0x0) returned 0x46 [0123.385] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.385] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.385] CoTaskMemFree (pv=0xffa70) [0123.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", lpFilePart=0x0) returned 0x46 [0123.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", lpFilePart=0x0) returned 0x46 [0123.386] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.386] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.386] CoTaskMemFree (pv=0xffa70) [0123.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0123.386] SetErrorMode (uMode=0x1) returned 0x0 [0123.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.395] SetErrorMode (uMode=0x0) returned 0x1 [0123.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0123.398] SetErrorMode (uMode=0x1) returned 0x0 [0123.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.399] GetFileType (hFile=0x18c) returned 0x1 [0123.399] SetErrorMode (uMode=0x0) returned 0x1 [0123.399] GetFileType (hFile=0x18c) returned 0x1 [0123.400] WriteFile (in: hFile=0x18c, lpBuffer=0x28e7378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x28e7378*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0123.402] WriteFile (in: hFile=0x18c, lpBuffer=0x28e7378*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x28e7378*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0123.402] CloseHandle (hObject=0x18c) returned 1 [0123.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", lpFilePart=0x0) returned 0x2d [0123.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", lpFilePart=0x0) returned 0x2d [0123.403] SetErrorMode (uMode=0x1) returned 0x0 [0123.403] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0123.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0123.403] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.403] SetErrorMode (uMode=0x0) returned 0x1 [0123.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", lpFilePart=0x0) returned 0x2d [0123.404] SetErrorMode (uMode=0x1) returned 0x0 [0123.404] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0123.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0123.404] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.404] SetErrorMode (uMode=0x0) returned 0x1 [0123.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", lpFilePart=0x0) returned 0x31 [0123.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", lpFilePart=0x0) returned 0x31 [0123.405] SetErrorMode (uMode=0x1) returned 0x0 [0123.405] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x838958c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="ACROBA~1.EXE")) returned 1 [0123.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0123.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="ADOBEE~1.DLL")) returned 1 [0123.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0123.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 0 [0123.406] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.406] SetErrorMode (uMode=0x0) returned 0x1 [0123.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", lpFilePart=0x0) returned 0x31 [0123.406] SetErrorMode (uMode=0x1) returned 0x0 [0123.406] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x838958c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="ACROBA~1.EXE")) returned 1 [0123.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0123.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="ADOBEE~1.DLL")) returned 1 [0123.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0123.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 0 [0123.407] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.407] SetErrorMode (uMode=0x0) returned 0x1 [0123.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe", lpFilePart=0x0) returned 0x44 [0123.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe", lpFilePart=0x0) returned 0x44 [0123.413] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.413] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.413] CoTaskMemFree (pv=0xffa70) [0123.413] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe", lpFilePart=0x0) returned 0x3e [0123.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe", lpFilePart=0x0) returned 0x3e [0123.413] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.413] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.414] CoTaskMemFree (pv=0xffa70) [0123.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll", lpFilePart=0x0) returned 0x47 [0123.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll", lpFilePart=0x0) returned 0x47 [0123.414] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.414] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.414] CoTaskMemFree (pv=0xffa70) [0123.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe", lpFilePart=0x0) returned 0x43 [0123.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe", lpFilePart=0x0) returned 0x43 [0123.414] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.414] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.414] CoTaskMemFree (pv=0xffa70) [0123.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0123.415] SetErrorMode (uMode=0x1) returned 0x0 [0123.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.415] GetFileType (hFile=0x18c) returned 0x1 [0123.415] SetErrorMode (uMode=0x0) returned 0x1 [0123.415] GetFileType (hFile=0x18c) returned 0x1 [0123.417] WriteFile (in: hFile=0x18c, lpBuffer=0x2707b30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2707b30*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0123.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x47 [0123.419] SetErrorMode (uMode=0x1) returned 0x0 [0123.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.419] GetFileType (hFile=0x18c) returned 0x1 [0123.419] SetErrorMode (uMode=0x0) returned 0x1 [0123.419] GetFileType (hFile=0x18c) returned 0x1 [0123.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", lpFilePart=0x0) returned 0x31 [0123.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", lpFilePart=0x0) returned 0x31 [0123.421] SetErrorMode (uMode=0x1) returned 0x0 [0123.421] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0123.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0123.426] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.426] SetErrorMode (uMode=0x0) returned 0x1 [0123.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", lpFilePart=0x0) returned 0x31 [0123.427] SetErrorMode (uMode=0x1) returned 0x0 [0123.427] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0123.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0123.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0123.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0123.430] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.431] SetErrorMode (uMode=0x0) returned 0x1 [0123.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", lpFilePart=0x0) returned 0x37 [0123.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", lpFilePart=0x0) returned 0x37 [0123.431] SetErrorMode (uMode=0x1) returned 0x0 [0123.431] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.433] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.433] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.433] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.433] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.433] SetErrorMode (uMode=0x0) returned 0x1 [0123.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", lpFilePart=0x0) returned 0x37 [0123.433] SetErrorMode (uMode=0x1) returned 0x0 [0123.434] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.434] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.434] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.434] SetErrorMode (uMode=0x0) returned 0x1 [0123.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.435] CoTaskMemFree (pv=0xffa70) [0123.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.435] SetErrorMode (uMode=0x1) returned 0x0 [0123.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.435] GetFileType (hFile=0x18c) returned 0x1 [0123.435] SetErrorMode (uMode=0x0) returned 0x1 [0123.435] GetFileType (hFile=0x18c) returned 0x1 [0123.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", lpFilePart=0x0) returned 0x37 [0123.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", lpFilePart=0x0) returned 0x37 [0123.437] SetErrorMode (uMode=0x1) returned 0x0 [0123.437] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.438] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.438] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.438] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.438] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.438] SetErrorMode (uMode=0x0) returned 0x1 [0123.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", lpFilePart=0x0) returned 0x37 [0123.438] SetErrorMode (uMode=0x1) returned 0x0 [0123.438] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.439] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.439] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.439] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.439] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.439] SetErrorMode (uMode=0x0) returned 0x1 [0123.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.439] CoTaskMemFree (pv=0xffa70) [0123.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.440] SetErrorMode (uMode=0x1) returned 0x0 [0123.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.440] GetFileType (hFile=0x18c) returned 0x1 [0123.440] SetErrorMode (uMode=0x0) returned 0x1 [0123.440] GetFileType (hFile=0x18c) returned 0x1 [0123.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", lpFilePart=0x0) returned 0x37 [0123.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", lpFilePart=0x0) returned 0x37 [0123.441] SetErrorMode (uMode=0x1) returned 0x0 [0123.442] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.442] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.443] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.443] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.443] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.443] SetErrorMode (uMode=0x0) returned 0x1 [0123.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", lpFilePart=0x0) returned 0x37 [0123.443] SetErrorMode (uMode=0x1) returned 0x0 [0123.443] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.443] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.444] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.444] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.444] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.444] SetErrorMode (uMode=0x0) returned 0x1 [0123.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.444] CoTaskMemFree (pv=0xffa70) [0123.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.444] SetErrorMode (uMode=0x1) returned 0x0 [0123.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.445] SetErrorMode (uMode=0x0) returned 0x1 [0123.445] GetFileType (hFile=0x18c) returned 0x1 [0123.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", lpFilePart=0x0) returned 0x37 [0123.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", lpFilePart=0x0) returned 0x37 [0123.446] SetErrorMode (uMode=0x1) returned 0x0 [0123.446] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.447] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.447] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.447] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.447] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.447] SetErrorMode (uMode=0x0) returned 0x1 [0123.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", lpFilePart=0x0) returned 0x37 [0123.448] SetErrorMode (uMode=0x1) returned 0x0 [0123.448] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.448] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.448] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.448] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.448] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.448] SetErrorMode (uMode=0x0) returned 0x1 [0123.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.449] CoTaskMemFree (pv=0xffa70) [0123.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.449] SetErrorMode (uMode=0x1) returned 0x0 [0123.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.449] SetErrorMode (uMode=0x0) returned 0x1 [0123.449] GetFileType (hFile=0x18c) returned 0x1 [0123.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", lpFilePart=0x0) returned 0x37 [0123.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", lpFilePart=0x0) returned 0x37 [0123.451] SetErrorMode (uMode=0x1) returned 0x0 [0123.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.451] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.451] SetErrorMode (uMode=0x0) returned 0x1 [0123.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", lpFilePart=0x0) returned 0x37 [0123.451] SetErrorMode (uMode=0x1) returned 0x0 [0123.452] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.452] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.452] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.452] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.452] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.452] SetErrorMode (uMode=0x0) returned 0x1 [0123.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.452] CoTaskMemFree (pv=0xffa70) [0123.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.453] SetErrorMode (uMode=0x1) returned 0x0 [0123.453] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.455] SetErrorMode (uMode=0x0) returned 0x1 [0123.455] GetFileType (hFile=0x18c) returned 0x1 [0123.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", lpFilePart=0x0) returned 0x37 [0123.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", lpFilePart=0x0) returned 0x37 [0123.457] SetErrorMode (uMode=0x1) returned 0x0 [0123.457] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.458] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.458] SetErrorMode (uMode=0x0) returned 0x1 [0123.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", lpFilePart=0x0) returned 0x37 [0123.458] SetErrorMode (uMode=0x1) returned 0x0 [0123.458] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.459] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.459] SetErrorMode (uMode=0x0) returned 0x1 [0123.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.459] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.459] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.459] CoTaskMemFree (pv=0xffa70) [0123.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.459] SetErrorMode (uMode=0x1) returned 0x0 [0123.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.460] SetErrorMode (uMode=0x0) returned 0x1 [0123.460] GetFileType (hFile=0x18c) returned 0x1 [0123.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", lpFilePart=0x0) returned 0x37 [0123.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", lpFilePart=0x0) returned 0x37 [0123.461] SetErrorMode (uMode=0x1) returned 0x0 [0123.461] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.461] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.461] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.461] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.462] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.462] SetErrorMode (uMode=0x0) returned 0x1 [0123.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", lpFilePart=0x0) returned 0x37 [0123.462] SetErrorMode (uMode=0x1) returned 0x0 [0123.462] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.462] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.462] SetErrorMode (uMode=0x0) returned 0x1 [0123.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.463] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.463] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.463] CoTaskMemFree (pv=0xffa70) [0123.463] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.463] SetErrorMode (uMode=0x1) returned 0x0 [0123.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.463] SetErrorMode (uMode=0x0) returned 0x1 [0123.463] GetFileType (hFile=0x18c) returned 0x1 [0123.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", lpFilePart=0x0) returned 0x37 [0123.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", lpFilePart=0x0) returned 0x37 [0123.465] SetErrorMode (uMode=0x1) returned 0x0 [0123.465] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.465] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.466] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.466] SetErrorMode (uMode=0x0) returned 0x1 [0123.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", lpFilePart=0x0) returned 0x37 [0123.466] SetErrorMode (uMode=0x1) returned 0x0 [0123.466] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.467] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.467] SetErrorMode (uMode=0x0) returned 0x1 [0123.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.467] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.467] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.467] CoTaskMemFree (pv=0xffa70) [0123.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.467] SetErrorMode (uMode=0x1) returned 0x0 [0123.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.468] SetErrorMode (uMode=0x0) returned 0x1 [0123.468] GetFileType (hFile=0x18c) returned 0x1 [0123.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", lpFilePart=0x0) returned 0x37 [0123.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", lpFilePart=0x0) returned 0x37 [0123.469] SetErrorMode (uMode=0x1) returned 0x0 [0123.469] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.470] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.470] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.470] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.470] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.470] SetErrorMode (uMode=0x0) returned 0x1 [0123.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", lpFilePart=0x0) returned 0x37 [0123.471] SetErrorMode (uMode=0x1) returned 0x0 [0123.471] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.471] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.471] SetErrorMode (uMode=0x0) returned 0x1 [0123.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.471] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.471] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.471] CoTaskMemFree (pv=0xffa70) [0123.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.472] SetErrorMode (uMode=0x1) returned 0x0 [0123.472] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.472] SetErrorMode (uMode=0x0) returned 0x1 [0123.472] GetFileType (hFile=0x18c) returned 0x1 [0123.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", lpFilePart=0x0) returned 0x37 [0123.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", lpFilePart=0x0) returned 0x37 [0123.474] SetErrorMode (uMode=0x1) returned 0x0 [0123.474] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.474] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.474] SetErrorMode (uMode=0x0) returned 0x1 [0123.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", lpFilePart=0x0) returned 0x37 [0123.474] SetErrorMode (uMode=0x1) returned 0x0 [0123.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.475] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.475] SetErrorMode (uMode=0x0) returned 0x1 [0123.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.475] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.475] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.475] CoTaskMemFree (pv=0xffa70) [0123.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.476] SetErrorMode (uMode=0x1) returned 0x0 [0123.476] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.476] SetErrorMode (uMode=0x0) returned 0x1 [0123.476] GetFileType (hFile=0x18c) returned 0x1 [0123.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", lpFilePart=0x0) returned 0x37 [0123.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", lpFilePart=0x0) returned 0x37 [0123.477] SetErrorMode (uMode=0x1) returned 0x0 [0123.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.478] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.478] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.479] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.479] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.479] SetErrorMode (uMode=0x0) returned 0x1 [0123.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", lpFilePart=0x0) returned 0x37 [0123.479] SetErrorMode (uMode=0x1) returned 0x0 [0123.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.479] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.479] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.479] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.479] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.480] SetErrorMode (uMode=0x0) returned 0x1 [0123.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.480] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.480] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.480] CoTaskMemFree (pv=0xffa70) [0123.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.480] SetErrorMode (uMode=0x1) returned 0x0 [0123.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.481] SetErrorMode (uMode=0x0) returned 0x1 [0123.481] GetFileType (hFile=0x18c) returned 0x1 [0123.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", lpFilePart=0x0) returned 0x37 [0123.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", lpFilePart=0x0) returned 0x37 [0123.482] SetErrorMode (uMode=0x1) returned 0x0 [0123.482] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.483] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.483] SetErrorMode (uMode=0x0) returned 0x1 [0123.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", lpFilePart=0x0) returned 0x37 [0123.483] SetErrorMode (uMode=0x1) returned 0x0 [0123.483] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.484] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.484] SetErrorMode (uMode=0x0) returned 0x1 [0123.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.484] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.484] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.484] CoTaskMemFree (pv=0xffa70) [0123.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.485] SetErrorMode (uMode=0x1) returned 0x0 [0123.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.485] SetErrorMode (uMode=0x0) returned 0x1 [0123.485] GetFileType (hFile=0x18c) returned 0x1 [0123.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", lpFilePart=0x0) returned 0x37 [0123.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", lpFilePart=0x0) returned 0x37 [0123.486] SetErrorMode (uMode=0x1) returned 0x0 [0123.486] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.487] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.487] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.487] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.487] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.487] SetErrorMode (uMode=0x0) returned 0x1 [0123.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", lpFilePart=0x0) returned 0x37 [0123.487] SetErrorMode (uMode=0x1) returned 0x0 [0123.487] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.488] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.488] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.488] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.488] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.488] SetErrorMode (uMode=0x0) returned 0x1 [0123.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.488] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.488] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.488] CoTaskMemFree (pv=0xffa70) [0123.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.488] SetErrorMode (uMode=0x1) returned 0x0 [0123.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.489] SetErrorMode (uMode=0x0) returned 0x1 [0123.489] GetFileType (hFile=0x18c) returned 0x1 [0123.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", lpFilePart=0x0) returned 0x37 [0123.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", lpFilePart=0x0) returned 0x37 [0123.490] SetErrorMode (uMode=0x1) returned 0x0 [0123.490] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.491] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.491] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.491] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.491] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.492] SetErrorMode (uMode=0x0) returned 0x1 [0123.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", lpFilePart=0x0) returned 0x37 [0123.492] SetErrorMode (uMode=0x1) returned 0x0 [0123.492] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.492] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.492] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.492] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.492] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.492] SetErrorMode (uMode=0x0) returned 0x1 [0123.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.493] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.493] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.493] CoTaskMemFree (pv=0xffa70) [0123.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.493] SetErrorMode (uMode=0x1) returned 0x0 [0123.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.493] SetErrorMode (uMode=0x0) returned 0x1 [0123.493] GetFileType (hFile=0x18c) returned 0x1 [0123.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", lpFilePart=0x0) returned 0x37 [0123.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", lpFilePart=0x0) returned 0x37 [0123.495] SetErrorMode (uMode=0x1) returned 0x0 [0123.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.495] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.495] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.495] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.495] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.495] SetErrorMode (uMode=0x0) returned 0x1 [0123.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", lpFilePart=0x0) returned 0x37 [0123.496] SetErrorMode (uMode=0x1) returned 0x0 [0123.496] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.496] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.496] SetErrorMode (uMode=0x0) returned 0x1 [0123.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.497] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.497] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.497] CoTaskMemFree (pv=0xffa70) [0123.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.497] SetErrorMode (uMode=0x1) returned 0x0 [0123.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.497] SetErrorMode (uMode=0x0) returned 0x1 [0123.497] GetFileType (hFile=0x18c) returned 0x1 [0123.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", lpFilePart=0x0) returned 0x37 [0123.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", lpFilePart=0x0) returned 0x37 [0123.499] SetErrorMode (uMode=0x1) returned 0x0 [0123.499] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.499] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.499] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.499] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.499] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.499] SetErrorMode (uMode=0x0) returned 0x1 [0123.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", lpFilePart=0x0) returned 0x37 [0123.500] SetErrorMode (uMode=0x1) returned 0x0 [0123.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.500] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.500] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.500] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.500] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.500] SetErrorMode (uMode=0x0) returned 0x1 [0123.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.500] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.500] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.500] CoTaskMemFree (pv=0xffa70) [0123.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.501] SetErrorMode (uMode=0x1) returned 0x0 [0123.501] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.501] SetErrorMode (uMode=0x0) returned 0x1 [0123.501] GetFileType (hFile=0x18c) returned 0x1 [0123.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", lpFilePart=0x0) returned 0x37 [0123.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", lpFilePart=0x0) returned 0x37 [0123.502] SetErrorMode (uMode=0x1) returned 0x0 [0123.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.503] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.503] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.503] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.503] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.503] SetErrorMode (uMode=0x0) returned 0x1 [0123.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", lpFilePart=0x0) returned 0x37 [0123.503] SetErrorMode (uMode=0x1) returned 0x0 [0123.503] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.503] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.504] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.504] SetErrorMode (uMode=0x0) returned 0x1 [0123.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.504] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.504] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.504] CoTaskMemFree (pv=0xffa70) [0123.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.504] SetErrorMode (uMode=0x1) returned 0x0 [0123.504] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.505] SetErrorMode (uMode=0x0) returned 0x1 [0123.505] GetFileType (hFile=0x18c) returned 0x1 [0123.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", lpFilePart=0x0) returned 0x37 [0123.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", lpFilePart=0x0) returned 0x37 [0123.506] SetErrorMode (uMode=0x1) returned 0x0 [0123.506] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.507] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.507] SetErrorMode (uMode=0x0) returned 0x1 [0123.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", lpFilePart=0x0) returned 0x37 [0123.507] SetErrorMode (uMode=0x1) returned 0x0 [0123.507] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.508] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.508] SetErrorMode (uMode=0x0) returned 0x1 [0123.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.508] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.508] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.508] CoTaskMemFree (pv=0xffa70) [0123.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.508] SetErrorMode (uMode=0x1) returned 0x0 [0123.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.509] SetErrorMode (uMode=0x0) returned 0x1 [0123.509] GetFileType (hFile=0x18c) returned 0x1 [0123.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", lpFilePart=0x0) returned 0x37 [0123.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", lpFilePart=0x0) returned 0x37 [0123.510] SetErrorMode (uMode=0x1) returned 0x0 [0123.510] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.511] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.511] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.511] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.511] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.511] SetErrorMode (uMode=0x0) returned 0x1 [0123.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", lpFilePart=0x0) returned 0x37 [0123.511] SetErrorMode (uMode=0x1) returned 0x0 [0123.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.512] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.512] SetErrorMode (uMode=0x0) returned 0x1 [0123.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.512] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.512] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.512] CoTaskMemFree (pv=0xffa70) [0123.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.514] SetErrorMode (uMode=0x1) returned 0x0 [0123.514] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.515] SetErrorMode (uMode=0x0) returned 0x1 [0123.515] GetFileType (hFile=0x18c) returned 0x1 [0123.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", lpFilePart=0x0) returned 0x37 [0123.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", lpFilePart=0x0) returned 0x37 [0123.516] SetErrorMode (uMode=0x1) returned 0x0 [0123.516] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.516] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.516] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.516] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.516] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.517] SetErrorMode (uMode=0x0) returned 0x1 [0123.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", lpFilePart=0x0) returned 0x37 [0123.517] SetErrorMode (uMode=0x1) returned 0x0 [0123.517] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.517] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.517] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.517] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.517] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.517] SetErrorMode (uMode=0x0) returned 0x1 [0123.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.518] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.518] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.518] CoTaskMemFree (pv=0xffa70) [0123.518] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.518] SetErrorMode (uMode=0x1) returned 0x0 [0123.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.518] SetErrorMode (uMode=0x0) returned 0x1 [0123.519] GetFileType (hFile=0x18c) returned 0x1 [0123.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", lpFilePart=0x0) returned 0x37 [0123.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", lpFilePart=0x0) returned 0x37 [0123.520] SetErrorMode (uMode=0x1) returned 0x0 [0123.520] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.521] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.521] SetErrorMode (uMode=0x0) returned 0x1 [0123.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", lpFilePart=0x0) returned 0x37 [0123.521] SetErrorMode (uMode=0x1) returned 0x0 [0123.522] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.522] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.522] SetErrorMode (uMode=0x0) returned 0x1 [0123.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.522] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.522] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.522] CoTaskMemFree (pv=0xffa70) [0123.522] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.523] SetErrorMode (uMode=0x1) returned 0x0 [0123.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.523] SetErrorMode (uMode=0x0) returned 0x1 [0123.523] GetFileType (hFile=0x18c) returned 0x1 [0123.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", lpFilePart=0x0) returned 0x37 [0123.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", lpFilePart=0x0) returned 0x37 [0123.524] SetErrorMode (uMode=0x1) returned 0x0 [0123.525] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.525] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.525] SetErrorMode (uMode=0x0) returned 0x1 [0123.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", lpFilePart=0x0) returned 0x37 [0123.525] SetErrorMode (uMode=0x1) returned 0x0 [0123.525] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.526] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.526] SetErrorMode (uMode=0x0) returned 0x1 [0123.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.526] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.526] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.526] CoTaskMemFree (pv=0xffa70) [0123.526] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.527] SetErrorMode (uMode=0x1) returned 0x0 [0123.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.527] SetErrorMode (uMode=0x0) returned 0x1 [0123.527] GetFileType (hFile=0x18c) returned 0x1 [0123.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", lpFilePart=0x0) returned 0x37 [0123.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", lpFilePart=0x0) returned 0x37 [0123.528] SetErrorMode (uMode=0x1) returned 0x0 [0123.528] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.529] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.529] SetErrorMode (uMode=0x0) returned 0x1 [0123.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", lpFilePart=0x0) returned 0x37 [0123.529] SetErrorMode (uMode=0x1) returned 0x0 [0123.529] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.530] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.530] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.530] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.530] SetErrorMode (uMode=0x0) returned 0x1 [0123.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.530] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.530] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.530] CoTaskMemFree (pv=0xffa70) [0123.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.531] SetErrorMode (uMode=0x1) returned 0x0 [0123.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.531] SetErrorMode (uMode=0x0) returned 0x1 [0123.531] GetFileType (hFile=0x18c) returned 0x1 [0123.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", lpFilePart=0x0) returned 0x37 [0123.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", lpFilePart=0x0) returned 0x37 [0123.532] SetErrorMode (uMode=0x1) returned 0x0 [0123.532] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.534] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.534] SetErrorMode (uMode=0x0) returned 0x1 [0123.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", lpFilePart=0x0) returned 0x37 [0123.534] SetErrorMode (uMode=0x1) returned 0x0 [0123.534] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.534] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.535] SetErrorMode (uMode=0x0) returned 0x1 [0123.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.535] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.535] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.535] CoTaskMemFree (pv=0xffa70) [0123.535] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.535] SetErrorMode (uMode=0x1) returned 0x0 [0123.535] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.536] SetErrorMode (uMode=0x0) returned 0x1 [0123.536] GetFileType (hFile=0x18c) returned 0x1 [0123.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", lpFilePart=0x0) returned 0x37 [0123.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", lpFilePart=0x0) returned 0x37 [0123.537] SetErrorMode (uMode=0x1) returned 0x0 [0123.537] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.538] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.538] SetErrorMode (uMode=0x0) returned 0x1 [0123.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", lpFilePart=0x0) returned 0x37 [0123.538] SetErrorMode (uMode=0x1) returned 0x0 [0123.538] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.538] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.538] SetErrorMode (uMode=0x0) returned 0x1 [0123.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.539] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.539] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.539] CoTaskMemFree (pv=0xffa70) [0123.539] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.539] SetErrorMode (uMode=0x1) returned 0x0 [0123.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.540] SetErrorMode (uMode=0x0) returned 0x1 [0123.540] GetFileType (hFile=0x18c) returned 0x1 [0123.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", lpFilePart=0x0) returned 0x37 [0123.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", lpFilePart=0x0) returned 0x37 [0123.541] SetErrorMode (uMode=0x1) returned 0x0 [0123.541] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.541] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.542] SetErrorMode (uMode=0x0) returned 0x1 [0123.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", lpFilePart=0x0) returned 0x37 [0123.542] SetErrorMode (uMode=0x1) returned 0x0 [0123.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.542] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.542] SetErrorMode (uMode=0x0) returned 0x1 [0123.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.543] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.543] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.543] CoTaskMemFree (pv=0xffa70) [0123.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.543] SetErrorMode (uMode=0x1) returned 0x0 [0123.543] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.543] SetErrorMode (uMode=0x0) returned 0x1 [0123.543] GetFileType (hFile=0x18c) returned 0x1 [0123.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", lpFilePart=0x0) returned 0x37 [0123.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", lpFilePart=0x0) returned 0x37 [0123.545] SetErrorMode (uMode=0x1) returned 0x0 [0123.545] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.545] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.545] SetErrorMode (uMode=0x0) returned 0x1 [0123.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", lpFilePart=0x0) returned 0x37 [0123.546] SetErrorMode (uMode=0x1) returned 0x0 [0123.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0123.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0123.546] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.546] SetErrorMode (uMode=0x0) returned 0x1 [0123.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", lpFilePart=0x0) returned 0x4b [0123.546] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.546] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.546] CoTaskMemFree (pv=0xffa70) [0123.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0123.547] SetErrorMode (uMode=0x1) returned 0x0 [0123.547] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.547] SetErrorMode (uMode=0x0) returned 0x1 [0123.547] GetFileType (hFile=0x18c) returned 0x1 [0123.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0123.548] SetErrorMode (uMode=0x1) returned 0x0 [0123.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.550] SetErrorMode (uMode=0x0) returned 0x1 [0123.550] GetFileType (hFile=0x18c) returned 0x1 [0123.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x43 [0123.551] SetErrorMode (uMode=0x1) returned 0x0 [0123.551] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\adobe\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.552] SetErrorMode (uMode=0x0) returned 0x1 [0123.552] GetFileType (hFile=0x18c) returned 0x1 [0123.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java", lpFilePart=0x0) returned 0x28 [0123.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java", lpFilePart=0x0) returned 0x28 [0123.553] SetErrorMode (uMode=0x1) returned 0x0 [0123.553] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0123.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0123.554] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.554] SetErrorMode (uMode=0x0) returned 0x1 [0123.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java", lpFilePart=0x0) returned 0x28 [0123.554] SetErrorMode (uMode=0x1) returned 0x0 [0123.554] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0123.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0123.554] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.554] SetErrorMode (uMode=0x0) returned 0x1 [0123.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", lpFilePart=0x0) returned 0x34 [0123.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", lpFilePart=0x0) returned 0x34 [0123.555] SetErrorMode (uMode=0x1) returned 0x0 [0123.555] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa1fc00, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xaa1fc00, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1 [0123.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83fa200, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83fa200, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0123.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd4800, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x5dd4800, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0123.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x249c100, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x249c100, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0123.556] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.557] SetErrorMode (uMode=0x0) returned 0x1 [0123.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", lpFilePart=0x0) returned 0x34 [0123.557] SetErrorMode (uMode=0x1) returned 0x0 [0123.557] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.558] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.559] SetErrorMode (uMode=0x0) returned 0x1 [0123.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe", lpFilePart=0x0) returned 0x41 [0123.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe", lpFilePart=0x0) returned 0x41 [0123.559] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.559] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.559] CoTaskMemFree (pv=0xffa70) [0123.559] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe", lpFilePart=0x0) returned 0x3f [0123.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe", lpFilePart=0x0) returned 0x3f [0123.559] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.559] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.559] CoTaskMemFree (pv=0xffa70) [0123.559] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe", lpFilePart=0x0) returned 0x40 [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe", lpFilePart=0x0) returned 0x40 [0123.560] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.560] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.560] CoTaskMemFree (pv=0xffa70) [0123.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", lpFilePart=0x0) returned 0x40 [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", lpFilePart=0x0) returned 0x40 [0123.560] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.560] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.560] CoTaskMemFree (pv=0xffa70) [0123.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0123.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0123.560] SetErrorMode (uMode=0x1) returned 0x0 [0123.560] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.562] SetErrorMode (uMode=0x0) returned 0x1 [0123.562] GetFileType (hFile=0x18c) returned 0x1 [0123.562] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x583 [0123.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0123.564] SetErrorMode (uMode=0x1) returned 0x0 [0123.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x583)) returned 1 [0123.564] SetErrorMode (uMode=0x0) returned 0x1 [0123.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0123.647] SetErrorMode (uMode=0x1) returned 0x0 [0123.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.648] SetErrorMode (uMode=0x0) returned 0x1 [0123.648] GetFileType (hFile=0x18c) returned 0x1 [0123.649] SetErrorMode (uMode=0x1) returned 0x0 [0123.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1a50f270, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0123.649] SetErrorMode (uMode=0x0) returned 0x1 [0123.649] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\brXWDkkOorWSffxe_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\brxwdkkoorwsffxe_encrypted_by.whiterose")) returned 1 [0123.748] SetErrorMode (uMode=0x1) returned 0x0 [0123.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.749] SetErrorMode (uMode=0x0) returned 0x1 [0123.749] GetFileType (hFile=0x18c) returned 0x1 [0123.749] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x588 [0123.752] SetErrorMode (uMode=0x1) returned 0x0 [0123.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588)) returned 1 [0123.752] SetErrorMode (uMode=0x0) returned 0x1 [0123.810] SetErrorMode (uMode=0x1) returned 0x0 [0123.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.811] SetErrorMode (uMode=0x0) returned 0x1 [0123.811] GetFileType (hFile=0x18c) returned 0x1 [0123.812] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml")) returned 1 [0123.813] SetErrorMode (uMode=0x1) returned 0x0 [0123.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.814] SetErrorMode (uMode=0x0) returned 0x1 [0123.814] GetFileType (hFile=0x18c) returned 0x1 [0123.821] SetErrorMode (uMode=0x1) returned 0x0 [0123.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\java\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.824] SetErrorMode (uMode=0x0) returned 0x1 [0123.824] GetFileType (hFile=0x18c) returned 0x1 [0123.827] SetErrorMode (uMode=0x1) returned 0x0 [0123.828] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.828] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.828] SetErrorMode (uMode=0x0) returned 0x1 [0123.828] SetErrorMode (uMode=0x1) returned 0x0 [0123.828] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.829] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.829] SetErrorMode (uMode=0x0) returned 0x1 [0123.829] SetErrorMode (uMode=0x1) returned 0x0 [0123.829] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.830] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.830] SetErrorMode (uMode=0x0) returned 0x1 [0123.830] SetErrorMode (uMode=0x1) returned 0x0 [0123.830] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.830] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.830] SetErrorMode (uMode=0x0) returned 0x1 [0123.831] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.831] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.831] CoTaskMemFree (pv=0xffa70) [0123.831] SetErrorMode (uMode=0x1) returned 0x0 [0123.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.831] SetErrorMode (uMode=0x0) returned 0x1 [0123.831] GetFileType (hFile=0x18c) returned 0x1 [0123.832] SetErrorMode (uMode=0x1) returned 0x0 [0123.833] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.836] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.836] SetErrorMode (uMode=0x0) returned 0x1 [0123.837] SetErrorMode (uMode=0x1) returned 0x0 [0123.837] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.838] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.838] SetErrorMode (uMode=0x0) returned 0x1 [0123.839] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.839] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.839] CoTaskMemFree (pv=0xffa70) [0123.839] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.839] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.839] CoTaskMemFree (pv=0xffa70) [0123.839] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.839] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.839] CoTaskMemFree (pv=0xffa70) [0123.839] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.839] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.839] CoTaskMemFree (pv=0xffa70) [0123.839] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.839] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.839] CoTaskMemFree (pv=0xffa70) [0123.839] SetErrorMode (uMode=0x1) returned 0x0 [0123.839] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.841] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.841] SetErrorMode (uMode=0x0) returned 0x1 [0123.841] SetErrorMode (uMode=0x1) returned 0x0 [0123.841] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.842] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.842] SetErrorMode (uMode=0x0) returned 0x1 [0123.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.842] CoTaskMemFree (pv=0xffa70) [0123.842] SetErrorMode (uMode=0x1) returned 0x0 [0123.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.843] SetErrorMode (uMode=0x0) returned 0x1 [0123.843] GetFileType (hFile=0x18c) returned 0x1 [0123.844] SetErrorMode (uMode=0x1) returned 0x0 [0123.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.845] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.846] SetErrorMode (uMode=0x0) returned 0x1 [0123.846] SetErrorMode (uMode=0x1) returned 0x0 [0123.847] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.847] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.847] SetErrorMode (uMode=0x0) returned 0x1 [0123.847] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.847] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.847] CoTaskMemFree (pv=0xffa70) [0123.847] SetErrorMode (uMode=0x1) returned 0x0 [0123.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.848] SetErrorMode (uMode=0x0) returned 0x1 [0123.848] GetFileType (hFile=0x18c) returned 0x1 [0123.849] SetErrorMode (uMode=0x1) returned 0x0 [0123.849] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.850] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.850] SetErrorMode (uMode=0x0) returned 0x1 [0123.850] SetErrorMode (uMode=0x1) returned 0x0 [0123.850] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.851] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.851] SetErrorMode (uMode=0x0) returned 0x1 [0123.851] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.851] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.851] CoTaskMemFree (pv=0xffa70) [0123.851] SetErrorMode (uMode=0x1) returned 0x0 [0123.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.852] SetErrorMode (uMode=0x0) returned 0x1 [0123.852] GetFileType (hFile=0x18c) returned 0x1 [0123.853] SetErrorMode (uMode=0x1) returned 0x0 [0123.853] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.854] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.854] SetErrorMode (uMode=0x0) returned 0x1 [0123.854] SetErrorMode (uMode=0x1) returned 0x0 [0123.854] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.854] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.854] SetErrorMode (uMode=0x0) returned 0x1 [0123.855] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.855] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.855] CoTaskMemFree (pv=0xffa70) [0123.855] SetErrorMode (uMode=0x1) returned 0x0 [0123.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.855] SetErrorMode (uMode=0x0) returned 0x1 [0123.855] GetFileType (hFile=0x18c) returned 0x1 [0123.856] SetErrorMode (uMode=0x1) returned 0x0 [0123.857] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.857] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.857] SetErrorMode (uMode=0x0) returned 0x1 [0123.857] SetErrorMode (uMode=0x1) returned 0x0 [0123.857] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.858] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.858] SetErrorMode (uMode=0x0) returned 0x1 [0123.858] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.858] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.858] CoTaskMemFree (pv=0xffa70) [0123.858] SetErrorMode (uMode=0x1) returned 0x0 [0123.858] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.859] SetErrorMode (uMode=0x0) returned 0x1 [0123.859] GetFileType (hFile=0x18c) returned 0x1 [0123.860] SetErrorMode (uMode=0x1) returned 0x0 [0123.860] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.861] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.861] SetErrorMode (uMode=0x0) returned 0x1 [0123.862] SetErrorMode (uMode=0x1) returned 0x0 [0123.862] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.862] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.862] SetErrorMode (uMode=0x0) returned 0x1 [0123.862] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.862] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.862] CoTaskMemFree (pv=0xffa70) [0123.862] SetErrorMode (uMode=0x1) returned 0x0 [0123.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.863] SetErrorMode (uMode=0x0) returned 0x1 [0123.863] GetFileType (hFile=0x18c) returned 0x1 [0123.864] SetErrorMode (uMode=0x1) returned 0x0 [0123.864] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.864] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.865] SetErrorMode (uMode=0x0) returned 0x1 [0123.865] SetErrorMode (uMode=0x1) returned 0x0 [0123.865] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.865] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.865] SetErrorMode (uMode=0x0) returned 0x1 [0123.865] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.865] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.865] CoTaskMemFree (pv=0xffa70) [0123.866] SetErrorMode (uMode=0x1) returned 0x0 [0123.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.866] SetErrorMode (uMode=0x0) returned 0x1 [0123.866] GetFileType (hFile=0x18c) returned 0x1 [0123.867] SetErrorMode (uMode=0x1) returned 0x0 [0123.867] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.868] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.868] SetErrorMode (uMode=0x0) returned 0x1 [0123.868] SetErrorMode (uMode=0x1) returned 0x0 [0123.868] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.869] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.869] SetErrorMode (uMode=0x0) returned 0x1 [0123.869] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.869] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.869] CoTaskMemFree (pv=0xffa70) [0123.869] SetErrorMode (uMode=0x1) returned 0x0 [0123.869] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.870] SetErrorMode (uMode=0x0) returned 0x1 [0123.870] GetFileType (hFile=0x18c) returned 0x1 [0123.871] SetErrorMode (uMode=0x1) returned 0x0 [0123.871] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.871] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.871] SetErrorMode (uMode=0x0) returned 0x1 [0123.871] SetErrorMode (uMode=0x1) returned 0x0 [0123.872] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.872] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.872] SetErrorMode (uMode=0x0) returned 0x1 [0123.872] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.872] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.872] CoTaskMemFree (pv=0xffa70) [0123.872] SetErrorMode (uMode=0x1) returned 0x0 [0123.872] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.876] SetErrorMode (uMode=0x0) returned 0x1 [0123.876] GetFileType (hFile=0x18c) returned 0x1 [0123.879] SetErrorMode (uMode=0x1) returned 0x0 [0123.879] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.879] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.879] SetErrorMode (uMode=0x0) returned 0x1 [0123.879] SetErrorMode (uMode=0x1) returned 0x0 [0123.879] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.880] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.880] SetErrorMode (uMode=0x0) returned 0x1 [0123.880] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.880] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.880] CoTaskMemFree (pv=0xffa70) [0123.880] SetErrorMode (uMode=0x1) returned 0x0 [0123.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.881] SetErrorMode (uMode=0x0) returned 0x1 [0123.881] GetFileType (hFile=0x18c) returned 0x1 [0123.882] SetErrorMode (uMode=0x1) returned 0x0 [0123.882] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.882] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.882] SetErrorMode (uMode=0x0) returned 0x1 [0123.883] SetErrorMode (uMode=0x1) returned 0x0 [0123.883] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.883] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.883] SetErrorMode (uMode=0x0) returned 0x1 [0123.883] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.883] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.883] CoTaskMemFree (pv=0xffa70) [0123.883] SetErrorMode (uMode=0x1) returned 0x0 [0123.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.884] SetErrorMode (uMode=0x0) returned 0x1 [0123.884] GetFileType (hFile=0x18c) returned 0x1 [0123.885] SetErrorMode (uMode=0x1) returned 0x0 [0123.885] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.885] SetErrorMode (uMode=0x0) returned 0x1 [0123.885] GetFileType (hFile=0x18c) returned 0x1 [0123.886] SetErrorMode (uMode=0x1) returned 0x0 [0123.886] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.888] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.889] SetErrorMode (uMode=0x0) returned 0x1 [0123.889] SetErrorMode (uMode=0x1) returned 0x0 [0123.889] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.890] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.891] SetErrorMode (uMode=0x0) returned 0x1 [0123.891] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.891] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.891] CoTaskMemFree (pv=0xffa70) [0123.891] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.891] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.891] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.892] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.892] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.892] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.892] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.892] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.892] CoTaskMemFree (pv=0xffa70) [0123.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.893] CoTaskMemFree (pv=0xffa70) [0123.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.894] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.894] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.894] CoTaskMemFree (pv=0xffa70) [0123.895] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.895] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.895] CoTaskMemFree (pv=0xffa70) [0123.895] SetErrorMode (uMode=0x1) returned 0x0 [0123.895] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.896] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.897] SetErrorMode (uMode=0x0) returned 0x1 [0123.897] SetErrorMode (uMode=0x1) returned 0x0 [0123.897] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.897] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.897] SetErrorMode (uMode=0x0) returned 0x1 [0123.897] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.897] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.897] CoTaskMemFree (pv=0xffa70) [0123.898] SetErrorMode (uMode=0x1) returned 0x0 [0123.899] SetErrorMode (uMode=0x0) returned 0x1 [0123.899] GetFileType (hFile=0x18c) returned 0x1 [0123.900] SetErrorMode (uMode=0x1) returned 0x0 [0123.900] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.900] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.900] SetErrorMode (uMode=0x0) returned 0x1 [0123.901] SetErrorMode (uMode=0x1) returned 0x0 [0123.901] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.901] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.901] SetErrorMode (uMode=0x0) returned 0x1 [0123.901] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.901] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.901] CoTaskMemFree (pv=0xffa70) [0123.901] SetErrorMode (uMode=0x1) returned 0x0 [0123.902] SetErrorMode (uMode=0x0) returned 0x1 [0123.902] GetFileType (hFile=0x18c) returned 0x1 [0123.903] SetErrorMode (uMode=0x1) returned 0x0 [0123.903] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.905] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.905] SetErrorMode (uMode=0x0) returned 0x1 [0123.906] SetErrorMode (uMode=0x1) returned 0x0 [0123.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.907] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.907] SetErrorMode (uMode=0x0) returned 0x1 [0123.907] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.907] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.907] CoTaskMemFree (pv=0xffa70) [0123.908] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.908] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.908] CoTaskMemFree (pv=0xffa70) [0123.908] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.908] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.908] CoTaskMemFree (pv=0xffa70) [0123.908] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.908] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.908] CoTaskMemFree (pv=0xffa70) [0123.908] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.908] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.908] CoTaskMemFree (pv=0xffa70) [0123.908] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.908] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.908] CoTaskMemFree (pv=0xffa70) [0123.908] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.908] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.908] CoTaskMemFree (pv=0xffa70) [0123.909] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.909] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.909] CoTaskMemFree (pv=0xffa70) [0123.909] SetErrorMode (uMode=0x1) returned 0x0 [0123.910] SetErrorMode (uMode=0x0) returned 0x1 [0123.910] GetFileType (hFile=0x18c) returned 0x1 [0123.911] SetErrorMode (uMode=0x1) returned 0x0 [0123.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.911] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.911] SetErrorMode (uMode=0x0) returned 0x1 [0123.912] SetErrorMode (uMode=0x1) returned 0x0 [0123.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.912] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.912] SetErrorMode (uMode=0x0) returned 0x1 [0123.912] SetErrorMode (uMode=0x1) returned 0x0 [0123.913] SetErrorMode (uMode=0x0) returned 0x1 [0123.913] GetFileType (hFile=0x18c) returned 0x1 [0123.914] WriteFile (in: hFile=0x18c, lpBuffer=0x28c7c70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28c7c70*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0123.916] WriteFile (in: hFile=0x18c, lpBuffer=0x28c7c70*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x28c7c70*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0123.916] CloseHandle (hObject=0x18c) returned 1 [0123.917] SetErrorMode (uMode=0x1) returned 0x0 [0123.917] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.917] GetFileType (hFile=0x18c) returned 0x1 [0123.917] SetErrorMode (uMode=0x0) returned 0x1 [0123.917] GetFileType (hFile=0x18c) returned 0x1 [0123.919] WriteFile (in: hFile=0x18c, lpBuffer=0x28ddd70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x28ddd70*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0123.920] SetErrorMode (uMode=0x1) returned 0x0 [0123.920] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0123.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 0 [0123.922] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.923] SetErrorMode (uMode=0x0) returned 0x1 [0123.923] SetErrorMode (uMode=0x1) returned 0x0 [0123.923] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0123.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 0 [0123.923] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.923] SetErrorMode (uMode=0x0) returned 0x1 [0123.924] SetErrorMode (uMode=0x1) returned 0x0 [0123.924] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1 [0123.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 0 [0123.925] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.925] SetErrorMode (uMode=0x0) returned 0x1 [0123.925] SetErrorMode (uMode=0x1) returned 0x0 [0123.925] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1 [0123.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 0 [0123.926] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.926] SetErrorMode (uMode=0x0) returned 0x1 [0123.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.926] CoTaskMemFree (pv=0xffa70) [0123.927] SetErrorMode (uMode=0x1) returned 0x0 [0123.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.927] GetFileType (hFile=0x18c) returned 0x1 [0123.927] SetErrorMode (uMode=0x0) returned 0x1 [0123.927] GetFileType (hFile=0x18c) returned 0x1 [0123.932] SetErrorMode (uMode=0x1) returned 0x0 [0123.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.933] GetFileType (hFile=0x18c) returned 0x1 [0123.933] SetErrorMode (uMode=0x0) returned 0x1 [0123.933] GetFileType (hFile=0x18c) returned 0x1 [0123.934] SetErrorMode (uMode=0x1) returned 0x0 [0123.934] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0123.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0123.936] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.936] SetErrorMode (uMode=0x0) returned 0x1 [0123.936] SetErrorMode (uMode=0x1) returned 0x0 [0123.936] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.936] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.936] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.936] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0123.937] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0123.937] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.937] SetErrorMode (uMode=0x0) returned 0x1 [0123.937] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.937] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.937] CoTaskMemFree (pv=0xffa70) [0123.937] SetErrorMode (uMode=0x1) returned 0x0 [0123.937] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0123.938] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0123.938] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.938] SetErrorMode (uMode=0x0) returned 0x1 [0123.938] SetErrorMode (uMode=0x1) returned 0x0 [0123.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0123.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0123.939] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.939] SetErrorMode (uMode=0x0) returned 0x1 [0123.939] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.939] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.939] CoTaskMemFree (pv=0xffa70) [0123.939] SetErrorMode (uMode=0x1) returned 0x0 [0123.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.940] GetFileType (hFile=0x18c) returned 0x1 [0123.940] SetErrorMode (uMode=0x0) returned 0x1 [0123.940] GetFileType (hFile=0x18c) returned 0x1 [0123.941] SetErrorMode (uMode=0x1) returned 0x0 [0123.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.941] GetFileType (hFile=0x18c) returned 0x1 [0123.942] SetErrorMode (uMode=0x0) returned 0x1 [0123.942] GetFileType (hFile=0x18c) returned 0x1 [0123.943] SetErrorMode (uMode=0x1) returned 0x0 [0123.943] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0123.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a395f00, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xae3504c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a395f00, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x35afb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0123.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf72d00, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xae376620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf72d00, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x129b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0123.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c46c00, ftCreationTime.dwHighDateTime=0x1cbdfac, ftLastAccessTime.dwLowDateTime=0xacfacf40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb1c46c00, ftLastWriteTime.dwHighDateTime=0x1cbdfac, nFileSizeHigh=0x0, nFileSizeLow=0x11e9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf201500, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xb34d7640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf201500, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec942b00, ftCreationTime.dwHighDateTime=0x1cbc467, ftLastAccessTime.dwLowDateTime=0xae1f9860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec942b00, ftLastWriteTime.dwHighDateTime=0x1cbc467, nFileSizeHigh=0x0, nFileSizeLow=0xf1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ff800, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd09ff800, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xbf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96cba700, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x30cd96d0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x96cba700, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x4588, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0123.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 0 [0123.944] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.944] SetErrorMode (uMode=0x0) returned 0x1 [0123.945] SetErrorMode (uMode=0x1) returned 0x0 [0123.945] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0123.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a395f00, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xae3504c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a395f00, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x35afb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0123.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf72d00, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xae376620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf72d00, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x129b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0123.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c46c00, ftCreationTime.dwHighDateTime=0x1cbdfac, ftLastAccessTime.dwLowDateTime=0xacfacf40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb1c46c00, ftLastWriteTime.dwHighDateTime=0x1cbdfac, nFileSizeHigh=0x0, nFileSizeLow=0x11e9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf201500, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xb34d7640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf201500, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec942b00, ftCreationTime.dwHighDateTime=0x1cbc467, ftLastAccessTime.dwLowDateTime=0xae1f9860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec942b00, ftLastWriteTime.dwHighDateTime=0x1cbc467, nFileSizeHigh=0x0, nFileSizeLow=0xf1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ff800, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd09ff800, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xbf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96cba700, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x30cd96d0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x96cba700, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x4588, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0123.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 0 [0123.946] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.946] SetErrorMode (uMode=0x0) returned 0x1 [0123.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.947] CoTaskMemFree (pv=0xffa70) [0123.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.947] CoTaskMemFree (pv=0xffa70) [0123.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.947] CoTaskMemFree (pv=0xffa70) [0123.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.947] CoTaskMemFree (pv=0xffa70) [0123.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.948] CoTaskMemFree (pv=0xffa70) [0123.948] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.948] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.948] CoTaskMemFree (pv=0xffa70) [0123.948] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.948] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.948] CoTaskMemFree (pv=0xffa70) [0123.948] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.948] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.948] CoTaskMemFree (pv=0xffa70) [0123.948] SetErrorMode (uMode=0x1) returned 0x0 [0123.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdeee800, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xba7d7d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdeee800, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x262180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0123.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0123.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0123.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 0 [0123.950] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.950] SetErrorMode (uMode=0x0) returned 0x1 [0123.950] SetErrorMode (uMode=0x1) returned 0x0 [0123.950] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdeee800, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xba7d7d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdeee800, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x262180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0123.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0123.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0123.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 0 [0123.951] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.951] SetErrorMode (uMode=0x0) returned 0x1 [0123.951] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.951] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.951] CoTaskMemFree (pv=0xffa70) [0123.952] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.952] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.952] CoTaskMemFree (pv=0xffa70) [0123.952] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0123.952] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0123.952] CoTaskMemFree (pv=0xffa70) [0123.952] SetErrorMode (uMode=0x1) returned 0x0 [0123.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0123.954] GetFileType (hFile=0x18c) returned 0x1 [0123.954] SetErrorMode (uMode=0x0) returned 0x1 [0123.954] GetFileType (hFile=0x18c) returned 0x1 [0123.955] SetErrorMode (uMode=0x1) returned 0x0 [0123.955] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0123.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0123.956] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.956] SetErrorMode (uMode=0x0) returned 0x1 [0123.957] SetErrorMode (uMode=0x1) returned 0x0 [0123.957] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0123.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0123.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0123.957] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0123.957] SetErrorMode (uMode=0x0) returned 0x1 [0123.958] SetErrorMode (uMode=0x1) returned 0x0 [0123.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0123.958] GetFileType (hFile=0x18c) returned 0x1 [0123.958] SetErrorMode (uMode=0x0) returned 0x1 [0123.958] GetFileType (hFile=0x18c) returned 0x1 [0123.958] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x419360 [0123.968] ReadFile (in: hFile=0x18c, lpBuffer=0x129fafe0, nNumberOfBytesToRead=0x419360, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x129fafe0*, lpNumberOfBytesRead=0x27e6e8*=0x419360, lpOverlapped=0x0) returned 1 [0124.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpFilePart=0x0) returned 0x51 [0124.181] SetErrorMode (uMode=0x1) returned 0x0 [0124.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360)) returned 1 [0124.182] SetErrorMode (uMode=0x0) returned 0x1 [0124.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpFilePart=0x0) returned 0x51 [0124.551] SetErrorMode (uMode=0x1) returned 0x0 [0124.551] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0124.555] GetFileType (hFile=0x18c) returned 0x1 [0124.555] SetErrorMode (uMode=0x0) returned 0x1 [0124.555] GetFileType (hFile=0x18c) returned 0x1 [0124.555] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x419470, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e768*=0x419470, lpOverlapped=0x0) returned 1 [0124.631] CloseHandle (hObject=0x18c) returned 1 [0124.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpFilePart=0x0) returned 0x51 [0124.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\Lg3nufN1uMi4FX2*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\Lg3nufN1uMi4FX2*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x6e [0124.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpFilePart=0x0) returned 0x51 [0124.754] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 1 [0124.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x60 [0124.757] SetErrorMode (uMode=0x1) returned 0x0 [0124.757] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0124.757] GetFileType (hFile=0x18c) returned 0x1 [0124.757] SetErrorMode (uMode=0x0) returned 0x1 [0124.757] GetFileType (hFile=0x18c) returned 0x1 [0124.759] WriteFile (in: hFile=0x18c, lpBuffer=0x2702190*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2702190*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0124.760] WriteFile (in: hFile=0x18c, lpBuffer=0x2702190*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2702190*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0124.761] CloseHandle (hObject=0x18c) returned 1 [0124.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x55 [0124.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x55 [0124.761] SetErrorMode (uMode=0x1) returned 0x0 [0124.761] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.763] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.763] SetErrorMode (uMode=0x0) returned 0x1 [0124.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x55 [0124.763] SetErrorMode (uMode=0x1) returned 0x0 [0124.763] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.763] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.763] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.764] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.764] SetErrorMode (uMode=0x0) returned 0x1 [0124.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6f [0124.764] SetErrorMode (uMode=0x1) returned 0x0 [0124.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\office setup controller\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0124.765] GetFileType (hFile=0x18c) returned 0x1 [0124.765] SetErrorMode (uMode=0x0) returned 0x1 [0124.765] GetFileType (hFile=0x18c) returned 0x1 [0124.766] WriteFile (in: hFile=0x18c, lpBuffer=0x271aa28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x271aa28*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0124.768] CloseHandle (hObject=0x18c) returned 1 [0124.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0124.769] SetErrorMode (uMode=0x1) returned 0x0 [0124.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0124.769] GetFileType (hFile=0x18c) returned 0x1 [0124.769] SetErrorMode (uMode=0x0) returned 0x1 [0124.769] GetFileType (hFile=0x18c) returned 0x1 [0124.770] CloseHandle (hObject=0x18c) returned 1 [0124.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", lpFilePart=0x0) returned 0x3b [0124.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", lpFilePart=0x0) returned 0x3b [0124.771] SetErrorMode (uMode=0x1) returned 0x0 [0124.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0124.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0124.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0124.772] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.773] SetErrorMode (uMode=0x0) returned 0x1 [0124.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", lpFilePart=0x0) returned 0x3b [0124.773] SetErrorMode (uMode=0x1) returned 0x0 [0124.773] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0124.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0124.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0124.773] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.774] SetErrorMode (uMode=0x0) returned 0x1 [0124.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll", lpFilePart=0x0) returned 0x51 [0124.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll", lpFilePart=0x0) returned 0x51 [0124.774] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0124.774] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0124.774] CoTaskMemFree (pv=0xffa70) [0124.774] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0124.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", lpFilePart=0x0) returned 0x40 [0124.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", lpFilePart=0x0) returned 0x40 [0124.775] SetErrorMode (uMode=0x1) returned 0x0 [0124.775] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0124.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0124.775] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.775] SetErrorMode (uMode=0x0) returned 0x1 [0124.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", lpFilePart=0x0) returned 0x40 [0124.776] SetErrorMode (uMode=0x1) returned 0x0 [0124.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0124.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0124.776] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.777] SetErrorMode (uMode=0x0) returned 0x1 [0124.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll", lpFilePart=0x0) returned 0x52 [0124.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll", lpFilePart=0x0) returned 0x52 [0124.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0124.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0124.777] CoTaskMemFree (pv=0xffa70) [0124.777] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0124.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5a [0124.778] SetErrorMode (uMode=0x1) returned 0x0 [0124.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0124.778] GetFileType (hFile=0x18c) returned 0x1 [0124.778] SetErrorMode (uMode=0x0) returned 0x1 [0124.778] GetFileType (hFile=0x18c) returned 0x1 [0124.780] CloseHandle (hObject=0x18c) returned 1 [0124.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x55 [0124.780] SetErrorMode (uMode=0x1) returned 0x0 [0124.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0124.781] GetFileType (hFile=0x18c) returned 0x1 [0124.781] SetErrorMode (uMode=0x0) returned 0x1 [0124.781] GetFileType (hFile=0x18c) returned 0x1 [0124.782] CloseHandle (hObject=0x18c) returned 1 [0124.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", lpFilePart=0x0) returned 0x3f [0124.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", lpFilePart=0x0) returned 0x3f [0124.782] SetErrorMode (uMode=0x1) returned 0x0 [0124.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42146c84, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42146c84, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e4d104, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0124.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0124.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x81305af3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0124.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e73264, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ebf524, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827cd17c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f0b7e4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827f32dc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f57aa4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8283f59c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41fa3d64, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0124.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ff0024, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42016184, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82949f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42062444, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x420ae704, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0124.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0124.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.787] SetErrorMode (uMode=0x0) returned 0x1 [0124.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", lpFilePart=0x0) returned 0x3f [0124.787] SetErrorMode (uMode=0x1) returned 0x0 [0124.787] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0124.788] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.788] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42146c84, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42146c84, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e4d104, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0124.788] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x81305af3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e73264, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ebf524, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827cd17c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f0b7e4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827f32dc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f57aa4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8283f59c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0124.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41fa3d64, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ff0024, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42016184, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82949f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42062444, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x420ae704, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0124.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0124.790] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0124.791] SetErrorMode (uMode=0x0) returned 0x1 [0124.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x0) returned 0x49 [0124.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x0) returned 0x49 [0124.792] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0124.792] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0124.792] CoTaskMemFree (pv=0xffa70) [0124.792] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0124.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x49 [0124.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x49 [0124.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x49 [0124.792] SetErrorMode (uMode=0x1) returned 0x0 [0124.793] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0124.793] GetFileType (hFile=0x18c) returned 0x1 [0124.793] SetErrorMode (uMode=0x0) returned 0x1 [0124.794] GetFileType (hFile=0x18c) returned 0x1 [0124.794] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x432 [0124.794] ReadFile (in: hFile=0x18c, lpBuffer=0x276e3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x276e3c8*, lpNumberOfBytesRead=0x27e788*=0x432, lpOverlapped=0x0) returned 1 [0124.801] CloseHandle (hObject=0x18c) returned 1 [0124.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x49 [0124.802] SetErrorMode (uMode=0x1) returned 0x0 [0124.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0124.802] SetErrorMode (uMode=0x0) returned 0x1 [0124.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x49 [0124.915] SetErrorMode (uMode=0x1) returned 0x0 [0124.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.922] SetErrorMode (uMode=0x0) returned 0x1 [0124.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x49 [0124.923] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0 [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini", lpFilePart=0x0) returned 0x4b [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini", lpFilePart=0x0) returned 0x4b [0124.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0124.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0124.926] CoTaskMemFree (pv=0xffa70) [0124.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x0) returned 0x4a [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x0) returned 0x4a [0124.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0124.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0124.926] CoTaskMemFree (pv=0xffa70) [0124.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4a [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4a [0124.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4a [0124.926] SetErrorMode (uMode=0x1) returned 0x0 [0124.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0124.927] SetErrorMode (uMode=0x0) returned 0x1 [0124.927] GetFileType (hFile=0x18c) returned 0x1 [0124.927] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x5d3f [0124.927] ReadFile (in: hFile=0x18c, lpBuffer=0x27d24e8, nNumberOfBytesToRead=0x5d3f, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27d24e8*, lpNumberOfBytesRead=0x27e788*=0x5d3f, lpOverlapped=0x0) returned 1 [0124.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4a [0124.930] SetErrorMode (uMode=0x1) returned 0x0 [0124.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1 [0124.930] SetErrorMode (uMode=0x0) returned 0x1 [0125.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4a [0125.023] SetErrorMode (uMode=0x1) returned 0x0 [0125.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.026] SetErrorMode (uMode=0x0) returned 0x1 [0125.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4a [0125.027] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0 [0125.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", lpFilePart=0x0) returned 0x51 [0125.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", lpFilePart=0x0) returned 0x51 [0125.035] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.035] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.035] CoTaskMemFree (pv=0xffa70) [0125.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x50 [0125.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x50 [0125.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x50 [0125.036] SetErrorMode (uMode=0x1) returned 0x0 [0125.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.039] GetFileType (hFile=0x18c) returned 0x1 [0125.039] SetErrorMode (uMode=0x0) returned 0x1 [0125.039] GetFileType (hFile=0x18c) returned 0x1 [0125.040] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1906 [0125.040] ReadFile (in: hFile=0x18c, lpBuffer=0x28607d0, nNumberOfBytesToRead=0x1906, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28607d0*, lpNumberOfBytesRead=0x27e788*=0x1906, lpOverlapped=0x0) returned 1 [0125.041] CloseHandle (hObject=0x18c) returned 1 [0125.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x50 [0125.042] SetErrorMode (uMode=0x1) returned 0x0 [0125.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827cd17c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1 [0125.042] SetErrorMode (uMode=0x0) returned 0x1 [0125.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x50 [0125.164] SetErrorMode (uMode=0x1) returned 0x0 [0125.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.167] SetErrorMode (uMode=0x0) returned 0x1 [0125.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x50 [0125.168] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0 [0125.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", lpFilePart=0x0) returned 0x4f [0125.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", lpFilePart=0x0) returned 0x4f [0125.176] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.176] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.176] CoTaskMemFree (pv=0xffa70) [0125.176] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4e [0125.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4e [0125.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4e [0125.177] SetErrorMode (uMode=0x1) returned 0x0 [0125.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.177] GetFileType (hFile=0x18c) returned 0x1 [0125.177] SetErrorMode (uMode=0x0) returned 0x1 [0125.177] GetFileType (hFile=0x18c) returned 0x1 [0125.177] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x107e [0125.177] ReadFile (in: hFile=0x18c, lpBuffer=0x28d7ba8, nNumberOfBytesToRead=0x107e, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28d7ba8*, lpNumberOfBytesRead=0x27e788*=0x107e, lpOverlapped=0x0) returned 1 [0125.179] CloseHandle (hObject=0x18c) returned 1 [0125.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4e [0125.180] SetErrorMode (uMode=0x1) returned 0x0 [0125.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827f32dc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1 [0125.180] SetErrorMode (uMode=0x0) returned 0x1 [0125.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4e [0125.277] SetErrorMode (uMode=0x1) returned 0x0 [0125.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.279] SetErrorMode (uMode=0x0) returned 0x1 [0125.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4e [0125.280] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0 [0125.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", lpFilePart=0x0) returned 0x52 [0125.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", lpFilePart=0x0) returned 0x52 [0125.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.283] CoTaskMemFree (pv=0xffa70) [0125.283] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x51 [0125.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x51 [0125.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x51 [0125.283] SetErrorMode (uMode=0x1) returned 0x0 [0125.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.284] GetFileType (hFile=0x18c) returned 0x1 [0125.284] SetErrorMode (uMode=0x0) returned 0x1 [0125.284] GetFileType (hFile=0x18c) returned 0x1 [0125.284] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x18ed [0125.284] ReadFile (in: hFile=0x18c, lpBuffer=0x27423b0, nNumberOfBytesToRead=0x18ed, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27423b0*, lpNumberOfBytesRead=0x27e788*=0x18ed, lpOverlapped=0x0) returned 1 [0125.285] CloseHandle (hObject=0x18c) returned 1 [0125.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x51 [0125.286] SetErrorMode (uMode=0x1) returned 0x0 [0125.286] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8283f59c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1 [0125.286] SetErrorMode (uMode=0x0) returned 0x1 [0125.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x51 [0125.408] SetErrorMode (uMode=0x1) returned 0x0 [0125.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.412] SetErrorMode (uMode=0x0) returned 0x1 [0125.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x51 [0125.413] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0 [0125.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x0) returned 0x4b [0125.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x0) returned 0x4b [0125.417] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.417] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.418] CoTaskMemFree (pv=0xffa70) [0125.418] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4b [0125.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4b [0125.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4b [0125.418] SetErrorMode (uMode=0x1) returned 0x0 [0125.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.419] GetFileType (hFile=0x18c) returned 0x1 [0125.419] SetErrorMode (uMode=0x0) returned 0x1 [0125.419] GetFileType (hFile=0x18c) returned 0x1 [0125.419] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x13fb [0125.419] ReadFile (in: hFile=0x18c, lpBuffer=0x27afd18, nNumberOfBytesToRead=0x13fb, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27afd18*, lpNumberOfBytesRead=0x27e788*=0x13fb, lpOverlapped=0x0) returned 1 [0125.421] CloseHandle (hObject=0x18c) returned 1 [0125.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4b [0125.422] SetErrorMode (uMode=0x1) returned 0x0 [0125.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0125.422] SetErrorMode (uMode=0x0) returned 0x1 [0125.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4b [0125.509] SetErrorMode (uMode=0x1) returned 0x0 [0125.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.512] SetErrorMode (uMode=0x0) returned 0x1 [0125.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4b [0125.513] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0 [0125.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x0) returned 0x49 [0125.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x0) returned 0x49 [0125.522] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.522] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.522] CoTaskMemFree (pv=0xffa70) [0125.522] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x49 [0125.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x49 [0125.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x49 [0125.522] SetErrorMode (uMode=0x1) returned 0x0 [0125.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.523] GetFileType (hFile=0x18c) returned 0x1 [0125.523] SetErrorMode (uMode=0x0) returned 0x1 [0125.523] GetFileType (hFile=0x18c) returned 0x1 [0125.523] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x780 [0125.523] ReadFile (in: hFile=0x18c, lpBuffer=0x281c378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x281c378*, lpNumberOfBytesRead=0x27e788*=0x780, lpOverlapped=0x0) returned 1 [0125.525] CloseHandle (hObject=0x18c) returned 1 [0125.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x49 [0125.525] SetErrorMode (uMode=0x1) returned 0x0 [0125.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0125.526] SetErrorMode (uMode=0x0) returned 0x1 [0125.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x49 [0125.613] SetErrorMode (uMode=0x1) returned 0x0 [0125.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.616] SetErrorMode (uMode=0x0) returned 0x1 [0125.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x49 [0125.617] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0 [0125.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", lpFilePart=0x0) returned 0x52 [0125.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", lpFilePart=0x0) returned 0x52 [0125.626] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.626] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.626] CoTaskMemFree (pv=0xffa70) [0125.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x50 [0125.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x50 [0125.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x50 [0125.626] SetErrorMode (uMode=0x1) returned 0x0 [0125.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.627] GetFileType (hFile=0x18c) returned 0x1 [0125.627] SetErrorMode (uMode=0x0) returned 0x1 [0125.627] GetFileType (hFile=0x18c) returned 0x1 [0125.627] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x127e [0125.627] ReadFile (in: hFile=0x18c, lpBuffer=0x287d600, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x287d600*, lpNumberOfBytesRead=0x27e788*=0x127e, lpOverlapped=0x0) returned 1 [0125.631] CloseHandle (hObject=0x18c) returned 1 [0125.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x50 [0125.631] SetErrorMode (uMode=0x1) returned 0x0 [0125.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82949f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0125.631] SetErrorMode (uMode=0x0) returned 0x1 [0125.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x50 [0125.728] SetErrorMode (uMode=0x1) returned 0x0 [0125.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.731] SetErrorMode (uMode=0x0) returned 0x1 [0125.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x50 [0125.733] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0 [0125.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", lpFilePart=0x0) returned 0x4d [0125.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", lpFilePart=0x0) returned 0x4d [0125.741] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.741] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.741] CoTaskMemFree (pv=0xffa70) [0125.741] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4c [0125.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4c [0125.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4c [0125.742] SetErrorMode (uMode=0x1) returned 0x0 [0125.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.743] GetFileType (hFile=0x18c) returned 0x1 [0125.743] SetErrorMode (uMode=0x0) returned 0x1 [0125.743] GetFileType (hFile=0x18c) returned 0x1 [0125.743] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x2949 [0125.743] ReadFile (in: hFile=0x18c, lpBuffer=0x28e4498, nNumberOfBytesToRead=0x2949, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28e4498*, lpNumberOfBytesRead=0x27e788*=0x2949, lpOverlapped=0x0) returned 1 [0125.744] CloseHandle (hObject=0x18c) returned 1 [0125.745] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4c [0125.745] SetErrorMode (uMode=0x1) returned 0x0 [0125.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1 [0125.746] SetErrorMode (uMode=0x0) returned 0x1 [0125.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4c [0125.854] SetErrorMode (uMode=0x1) returned 0x0 [0125.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.858] SetErrorMode (uMode=0x0) returned 0x1 [0125.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4c [0125.859] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0 [0125.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x0) returned 0x49 [0125.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x0) returned 0x49 [0125.863] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.863] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.863] CoTaskMemFree (pv=0xffa70) [0125.863] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x49 [0125.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x49 [0125.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x49 [0125.864] SetErrorMode (uMode=0x1) returned 0x0 [0125.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0125.867] GetFileType (hFile=0x18c) returned 0x1 [0125.868] SetErrorMode (uMode=0x0) returned 0x1 [0125.868] GetFileType (hFile=0x18c) returned 0x1 [0125.868] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1d51 [0125.868] ReadFile (in: hFile=0x18c, lpBuffer=0x2755e38, nNumberOfBytesToRead=0x1d51, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2755e38*, lpNumberOfBytesRead=0x27e788*=0x1d51, lpOverlapped=0x0) returned 1 [0125.869] CloseHandle (hObject=0x18c) returned 1 [0125.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x49 [0125.871] SetErrorMode (uMode=0x1) returned 0x0 [0125.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1 [0125.871] SetErrorMode (uMode=0x0) returned 0x1 [0125.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x49 [0125.963] SetErrorMode (uMode=0x1) returned 0x0 [0125.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.966] SetErrorMode (uMode=0x0) returned 0x1 [0125.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x49 [0125.968] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0 [0125.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0125.976] SetErrorMode (uMode=0x1) returned 0x0 [0125.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0125.976] GetFileType (hFile=0x18c) returned 0x1 [0125.976] SetErrorMode (uMode=0x0) returned 0x1 [0125.976] GetFileType (hFile=0x18c) returned 0x1 [0125.978] WriteFile (in: hFile=0x18c, lpBuffer=0x27d0490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x27d0490*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0125.979] WriteFile (in: hFile=0x18c, lpBuffer=0x27d0490*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d0490*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0125.980] CloseHandle (hObject=0x18c) returned 1 [0125.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", lpFilePart=0x0) returned 0x3d [0125.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", lpFilePart=0x0) returned 0x3d [0125.980] SetErrorMode (uMode=0x1) returned 0x0 [0125.981] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0125.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0125.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1 [0125.983] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 0 [0125.983] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0125.983] SetErrorMode (uMode=0x0) returned 0x1 [0125.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", lpFilePart=0x0) returned 0x3d [0125.984] SetErrorMode (uMode=0x1) returned 0x0 [0125.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0125.985] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.985] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0125.985] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1 [0125.985] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 0 [0125.985] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0125.986] SetErrorMode (uMode=0x0) returned 0x1 [0125.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x43 [0125.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x43 [0125.986] SetErrorMode (uMode=0x1) returned 0x0 [0125.986] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0125.988] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.988] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0125.988] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0125.988] SetErrorMode (uMode=0x0) returned 0x1 [0125.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x43 [0125.988] SetErrorMode (uMode=0x1) returned 0x0 [0125.988] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0125.988] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.989] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0125.989] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0125.989] SetErrorMode (uMode=0x0) returned 0x1 [0125.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0125.989] SetErrorMode (uMode=0x1) returned 0x0 [0125.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0125.990] GetFileType (hFile=0x18c) returned 0x1 [0125.990] SetErrorMode (uMode=0x0) returned 0x1 [0125.990] GetFileType (hFile=0x18c) returned 0x1 [0125.991] WriteFile (in: hFile=0x18c, lpBuffer=0x27eb430*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27eb430*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0125.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", lpFilePart=0x0) returned 0x45 [0125.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", lpFilePart=0x0) returned 0x45 [0125.993] SetErrorMode (uMode=0x1) returned 0x0 [0125.993] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0125.994] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.994] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1 [0125.994] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 0 [0125.994] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0125.995] SetErrorMode (uMode=0x0) returned 0x1 [0125.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", lpFilePart=0x0) returned 0x45 [0125.995] SetErrorMode (uMode=0x1) returned 0x0 [0125.995] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0125.995] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.995] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1 [0125.995] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 0 [0125.996] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0125.996] SetErrorMode (uMode=0x0) returned 0x1 [0125.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe", lpFilePart=0x0) returned 0x50 [0125.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe", lpFilePart=0x0) returned 0x50 [0125.996] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0125.996] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0125.996] CoTaskMemFree (pv=0xffa70) [0125.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0125.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0125.997] SetErrorMode (uMode=0x1) returned 0x0 [0125.997] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0125.997] GetFileType (hFile=0x18c) returned 0x1 [0125.997] SetErrorMode (uMode=0x0) returned 0x1 [0125.997] GetFileType (hFile=0x18c) returned 0x1 [0125.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0125.998] SetErrorMode (uMode=0x1) returned 0x0 [0125.998] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0125.999] GetFileType (hFile=0x18c) returned 0x1 [0125.999] SetErrorMode (uMode=0x0) returned 0x1 [0125.999] GetFileType (hFile=0x18c) returned 0x1 [0126.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", lpFilePart=0x0) returned 0x3c [0126.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", lpFilePart=0x0) returned 0x3c [0126.000] SetErrorMode (uMode=0x1) returned 0x0 [0126.000] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0126.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0126.001] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.001] SetErrorMode (uMode=0x0) returned 0x1 [0126.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", lpFilePart=0x0) returned 0x3c [0126.002] SetErrorMode (uMode=0x1) returned 0x0 [0126.002] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0126.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0126.002] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.002] SetErrorMode (uMode=0x0) returned 0x1 [0126.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x42 [0126.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x42 [0126.003] SetErrorMode (uMode=0x1) returned 0x0 [0126.003] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.003] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.003] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.003] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.003] SetErrorMode (uMode=0x0) returned 0x1 [0126.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x42 [0126.004] SetErrorMode (uMode=0x1) returned 0x0 [0126.004] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.004] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.004] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.004] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.004] SetErrorMode (uMode=0x0) returned 0x1 [0126.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5c [0126.005] SetErrorMode (uMode=0x1) returned 0x0 [0126.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.005] GetFileType (hFile=0x18c) returned 0x1 [0126.005] SetErrorMode (uMode=0x0) returned 0x1 [0126.005] GetFileType (hFile=0x18c) returned 0x1 [0126.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0126.007] SetErrorMode (uMode=0x1) returned 0x0 [0126.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.007] GetFileType (hFile=0x18c) returned 0x1 [0126.007] SetErrorMode (uMode=0x0) returned 0x1 [0126.007] GetFileType (hFile=0x18c) returned 0x1 [0126.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", lpFilePart=0x0) returned 0x38 [0126.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", lpFilePart=0x0) returned 0x38 [0126.009] SetErrorMode (uMode=0x1) returned 0x0 [0126.009] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0126.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 0 [0126.010] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.010] SetErrorMode (uMode=0x0) returned 0x1 [0126.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", lpFilePart=0x0) returned 0x38 [0126.010] SetErrorMode (uMode=0x1) returned 0x0 [0126.011] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0126.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 0 [0126.011] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.011] SetErrorMode (uMode=0x0) returned 0x1 [0126.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", lpFilePart=0x0) returned 0x3d [0126.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", lpFilePart=0x0) returned 0x3d [0126.012] SetErrorMode (uMode=0x1) returned 0x0 [0126.012] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0126.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0126.012] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.012] SetErrorMode (uMode=0x0) returned 0x1 [0126.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", lpFilePart=0x0) returned 0x3d [0126.013] SetErrorMode (uMode=0x1) returned 0x0 [0126.013] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0126.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0126.013] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.013] SetErrorMode (uMode=0x0) returned 0x1 [0126.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB", lpFilePart=0x0) returned 0x49 [0126.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB", lpFilePart=0x0) returned 0x49 [0126.014] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.014] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.014] CoTaskMemFree (pv=0xffa70) [0126.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0126.014] SetErrorMode (uMode=0x1) returned 0x0 [0126.014] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.015] GetFileType (hFile=0x18c) returned 0x1 [0126.015] SetErrorMode (uMode=0x0) returned 0x1 [0126.015] GetFileType (hFile=0x18c) returned 0x1 [0126.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x52 [0126.016] SetErrorMode (uMode=0x1) returned 0x0 [0126.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.017] GetFileType (hFile=0x18c) returned 0x1 [0126.017] SetErrorMode (uMode=0x0) returned 0x1 [0126.017] GetFileType (hFile=0x18c) returned 0x1 [0126.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", lpFilePart=0x0) returned 0x37 [0126.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", lpFilePart=0x0) returned 0x37 [0126.018] SetErrorMode (uMode=0x1) returned 0x0 [0126.018] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0126.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0126.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0126.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0126.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0126.020] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.020] SetErrorMode (uMode=0x0) returned 0x1 [0126.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", lpFilePart=0x0) returned 0x37 [0126.020] SetErrorMode (uMode=0x1) returned 0x0 [0126.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0126.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0126.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0126.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0126.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0126.021] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.021] SetErrorMode (uMode=0x0) returned 0x1 [0126.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll", lpFilePart=0x0) returned 0x44 [0126.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll", lpFilePart=0x0) returned 0x44 [0126.021] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.021] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.021] CoTaskMemFree (pv=0xffa70) [0126.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll", lpFilePart=0x0) returned 0x43 [0126.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll", lpFilePart=0x0) returned 0x43 [0126.022] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.022] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.022] CoTaskMemFree (pv=0xffa70) [0126.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll", lpFilePart=0x0) returned 0x43 [0126.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll", lpFilePart=0x0) returned 0x43 [0126.022] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.022] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.022] CoTaskMemFree (pv=0xffa70) [0126.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", lpFilePart=0x0) returned 0x3d [0126.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", lpFilePart=0x0) returned 0x3d [0126.022] SetErrorMode (uMode=0x1) returned 0x0 [0126.022] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.023] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.023] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0126.023] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0126.024] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.024] SetErrorMode (uMode=0x0) returned 0x1 [0126.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", lpFilePart=0x0) returned 0x3d [0126.024] SetErrorMode (uMode=0x1) returned 0x0 [0126.024] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0126.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0126.024] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.025] SetErrorMode (uMode=0x0) returned 0x1 [0126.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll", lpFilePart=0x0) returned 0x49 [0126.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll", lpFilePart=0x0) returned 0x49 [0126.025] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.025] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.025] CoTaskMemFree (pv=0xffa70) [0126.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0126.025] SetErrorMode (uMode=0x1) returned 0x0 [0126.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.026] SetErrorMode (uMode=0x0) returned 0x1 [0126.026] GetFileType (hFile=0x18c) returned 0x1 [0126.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0126.027] SetErrorMode (uMode=0x1) returned 0x0 [0126.027] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.028] SetErrorMode (uMode=0x0) returned 0x1 [0126.028] GetFileType (hFile=0x18c) returned 0x1 [0126.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", lpFilePart=0x0) returned 0x38 [0126.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", lpFilePart=0x0) returned 0x38 [0126.029] SetErrorMode (uMode=0x1) returned 0x0 [0126.029] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.029] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.029] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0126.029] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0126.029] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.030] SetErrorMode (uMode=0x0) returned 0x1 [0126.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", lpFilePart=0x0) returned 0x38 [0126.030] SetErrorMode (uMode=0x1) returned 0x0 [0126.030] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.030] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.030] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0126.030] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0126.030] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.031] SetErrorMode (uMode=0x0) returned 0x1 [0126.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll", lpFilePart=0x0) returned 0x40 [0126.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll", lpFilePart=0x0) returned 0x40 [0126.031] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.031] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.031] CoTaskMemFree (pv=0xffa70) [0126.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x52 [0126.031] SetErrorMode (uMode=0x1) returned 0x0 [0126.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.032] SetErrorMode (uMode=0x0) returned 0x1 [0126.032] GetFileType (hFile=0x18c) returned 0x1 [0126.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", lpFilePart=0x0) returned 0x39 [0126.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", lpFilePart=0x0) returned 0x39 [0126.033] SetErrorMode (uMode=0x1) returned 0x0 [0126.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 0 [0126.034] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.034] SetErrorMode (uMode=0x0) returned 0x1 [0126.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", lpFilePart=0x0) returned 0x39 [0126.034] SetErrorMode (uMode=0x1) returned 0x0 [0126.034] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.034] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1 [0126.035] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1 [0126.035] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 0 [0126.035] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.035] SetErrorMode (uMode=0x0) returned 0x1 [0126.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", lpFilePart=0x0) returned 0x3d [0126.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", lpFilePart=0x0) returned 0x3d [0126.035] SetErrorMode (uMode=0x1) returned 0x0 [0126.035] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.043] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.043] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="MICROS~2.TLB")) returned 1 [0126.043] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0126.043] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="VSTARE~1.TLB")) returned 1 [0126.044] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0126.044] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0126.044] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.044] SetErrorMode (uMode=0x0) returned 0x1 [0126.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", lpFilePart=0x0) returned 0x3d [0126.045] SetErrorMode (uMode=0x1) returned 0x0 [0126.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.046] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.046] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="MICROS~2.TLB")) returned 1 [0126.046] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0126.046] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="VSTARE~1.TLB")) returned 1 [0126.046] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0126.046] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0126.046] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.047] SetErrorMode (uMode=0x0) returned 0x1 [0126.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", lpFilePart=0x0) returned 0x76 [0126.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", lpFilePart=0x0) returned 0x76 [0126.047] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.047] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.047] CoTaskMemFree (pv=0xffa70) [0126.047] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", lpFilePart=0x0) returned 0x76 [0126.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", lpFilePart=0x0) returned 0x76 [0126.048] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.048] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.048] CoTaskMemFree (pv=0xffa70) [0126.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb", lpFilePart=0x0) returned 0x54 [0126.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb", lpFilePart=0x0) returned 0x54 [0126.048] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.048] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.048] CoTaskMemFree (pv=0xffa70) [0126.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", lpFilePart=0x0) returned 0x41 [0126.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", lpFilePart=0x0) returned 0x41 [0126.048] SetErrorMode (uMode=0x1) returned 0x0 [0126.048] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="VSTARE~1.DLL")) returned 1 [0126.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="VSTA_E~1.EXE")) returned 1 [0126.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 1 [0126.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 0 [0126.051] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.052] SetErrorMode (uMode=0x0) returned 0x1 [0126.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", lpFilePart=0x0) returned 0x41 [0126.052] SetErrorMode (uMode=0x1) returned 0x0 [0126.052] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="VSTARE~1.DLL")) returned 1 [0126.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="VSTA_E~1.EXE")) returned 1 [0126.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 1 [0126.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 0 [0126.054] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.054] SetErrorMode (uMode=0x0) returned 0x1 [0126.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll", lpFilePart=0x0) returned 0x58 [0126.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll", lpFilePart=0x0) returned 0x58 [0126.055] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.055] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.055] CoTaskMemFree (pv=0xffa70) [0126.055] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe", lpFilePart=0x0) returned 0x4f [0126.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe", lpFilePart=0x0) returned 0x4f [0126.055] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.055] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.055] CoTaskMemFree (pv=0xffa70) [0126.055] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.055] SetErrorMode (uMode=0x1) returned 0x0 [0126.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0126.057] SetErrorMode (uMode=0x0) returned 0x1 [0126.057] GetFileType (hFile=0x18c) returned 0x1 [0126.057] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x74 [0126.057] ReadFile (in: hFile=0x18c, lpBuffer=0x28dc638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28dc638*, lpNumberOfBytesRead=0x27e648*=0x74, lpOverlapped=0x0) returned 1 [0126.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.059] SetErrorMode (uMode=0x1) returned 0x0 [0126.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74)) returned 1 [0126.059] SetErrorMode (uMode=0x0) returned 0x1 [0126.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.186] SetErrorMode (uMode=0x1) returned 0x0 [0126.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0126.187] SetErrorMode (uMode=0x0) returned 0x1 [0126.187] GetFileType (hFile=0x18c) returned 0x1 [0126.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*OCHxAG2bQOw9OF3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*OCHxAG2bQOw9OF3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x69 [0126.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config", lpFilePart=0x0) returned 0x56 [0126.194] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config")) returned 1 [0126.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5b [0126.196] SetErrorMode (uMode=0x1) returned 0x0 [0126.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.196] GetFileType (hFile=0x18c) returned 0x1 [0126.196] SetErrorMode (uMode=0x0) returned 0x1 [0126.196] GetFileType (hFile=0x18c) returned 0x1 [0126.198] WriteFile (in: hFile=0x18c, lpBuffer=0x274dd98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x274dd98*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0126.199] WriteFile (in: hFile=0x18c, lpBuffer=0x274dd98*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x274dd98*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0126.200] CloseHandle (hObject=0x18c) returned 1 [0126.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0126.200] SetErrorMode (uMode=0x1) returned 0x0 [0126.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.201] GetFileType (hFile=0x18c) returned 0x1 [0126.201] SetErrorMode (uMode=0x0) returned 0x1 [0126.201] GetFileType (hFile=0x18c) returned 0x1 [0126.203] WriteFile (in: hFile=0x18c, lpBuffer=0x2763ea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2763ea8*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0126.204] CloseHandle (hObject=0x18c) returned 1 [0126.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", lpFilePart=0x0) returned 0x49 [0126.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", lpFilePart=0x0) returned 0x49 [0126.204] SetErrorMode (uMode=0x1) returned 0x0 [0126.204] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.205] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0 [0126.205] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.206] SetErrorMode (uMode=0x0) returned 0x1 [0126.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", lpFilePart=0x0) returned 0x49 [0126.206] SetErrorMode (uMode=0x1) returned 0x0 [0126.206] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0 [0126.207] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.207] SetErrorMode (uMode=0x0) returned 0x1 [0126.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store", lpFilePart=0x0) returned 0x56 [0126.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store", lpFilePart=0x0) returned 0x56 [0126.207] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.207] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.207] CoTaskMemFree (pv=0xffa70) [0126.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", lpFilePart=0x0) returned 0x7d [0126.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", lpFilePart=0x0) returned 0x7d [0126.208] SetErrorMode (uMode=0x1) returned 0x0 [0126.208] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0126.208] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.209] SetErrorMode (uMode=0x0) returned 0x1 [0126.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", lpFilePart=0x0) returned 0x7d [0126.209] SetErrorMode (uMode=0x1) returned 0x0 [0126.209] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0126.209] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.210] SetErrorMode (uMode=0x0) returned 0x1 [0126.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", lpFilePart=0x0) returned 0xba [0126.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", lpFilePart=0x0) returned 0xba [0126.210] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.210] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.210] CoTaskMemFree (pv=0xffa70) [0126.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x97 [0126.210] SetErrorMode (uMode=0x1) returned 0x0 [0126.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.213] GetFileType (hFile=0x18c) returned 0x1 [0126.213] SetErrorMode (uMode=0x0) returned 0x1 [0126.213] GetFileType (hFile=0x18c) returned 0x1 [0126.214] CloseHandle (hObject=0x18c) returned 1 [0126.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x63 [0126.215] SetErrorMode (uMode=0x1) returned 0x0 [0126.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.217] GetFileType (hFile=0x18c) returned 0x1 [0126.217] SetErrorMode (uMode=0x0) returned 0x1 [0126.217] GetFileType (hFile=0x18c) returned 0x1 [0126.218] CloseHandle (hObject=0x18c) returned 1 [0126.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", lpFilePart=0x0) returned 0x48 [0126.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", lpFilePart=0x0) returned 0x48 [0126.219] SetErrorMode (uMode=0x1) returned 0x0 [0126.219] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.219] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 0 [0126.220] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.220] SetErrorMode (uMode=0x0) returned 0x1 [0126.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", lpFilePart=0x0) returned 0x48 [0126.220] SetErrorMode (uMode=0x1) returned 0x0 [0126.220] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 0 [0126.221] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.221] SetErrorMode (uMode=0x0) returned 0x1 [0126.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store", lpFilePart=0x0) returned 0x5f [0126.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store", lpFilePart=0x0) returned 0x5f [0126.222] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.222] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.222] CoTaskMemFree (pv=0xffa70) [0126.222] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", lpFilePart=0x0) returned 0x5a [0126.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", lpFilePart=0x0) returned 0x5a [0126.222] SetErrorMode (uMode=0x1) returned 0x0 [0126.222] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0126.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1 [0126.224] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 0 [0126.224] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.225] SetErrorMode (uMode=0x0) returned 0x1 [0126.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", lpFilePart=0x0) returned 0x5a [0126.225] SetErrorMode (uMode=0x1) returned 0x0 [0126.225] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0126.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1 [0126.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 0 [0126.227] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.228] SetErrorMode (uMode=0x0) returned 0x1 [0126.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", lpFilePart=0x0) returned 0x9b [0126.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", lpFilePart=0x0) returned 0x9b [0126.228] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.228] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.228] CoTaskMemFree (pv=0xffa70) [0126.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x9a [0126.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x9a [0126.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.229] CoTaskMemFree (pv=0xffa70) [0126.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x94 [0126.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x94 [0126.229] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.229] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.229] CoTaskMemFree (pv=0xffa70) [0126.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x9a [0126.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x9a [0126.230] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.230] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.230] CoTaskMemFree (pv=0xffa70) [0126.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x99 [0126.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", lpFilePart=0x0) returned 0x99 [0126.230] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.230] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.230] CoTaskMemFree (pv=0xffa70) [0126.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x74 [0126.231] SetErrorMode (uMode=0x1) returned 0x0 [0126.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.232] GetFileType (hFile=0x18c) returned 0x1 [0126.232] SetErrorMode (uMode=0x0) returned 0x1 [0126.232] GetFileType (hFile=0x18c) returned 0x1 [0126.233] CloseHandle (hObject=0x18c) returned 1 [0126.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", lpFilePart=0x0) returned 0x53 [0126.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", lpFilePart=0x0) returned 0x53 [0126.234] SetErrorMode (uMode=0x1) returned 0x0 [0126.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0126.235] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.236] SetErrorMode (uMode=0x0) returned 0x1 [0126.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", lpFilePart=0x0) returned 0x53 [0126.236] SetErrorMode (uMode=0x1) returned 0x0 [0126.236] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.237] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.237] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.237] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.238] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.238] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0126.238] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.238] SetErrorMode (uMode=0x0) returned 0x1 [0126.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll", lpFilePart=0x0) returned 0x73 [0126.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll", lpFilePart=0x0) returned 0x73 [0126.239] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.239] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.239] CoTaskMemFree (pv=0xffa70) [0126.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", lpFilePart=0x0) returned 0x8f [0126.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", lpFilePart=0x0) returned 0x8f [0126.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.240] CoTaskMemFree (pv=0xffa70) [0126.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", lpFilePart=0x0) returned 0x8e [0126.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", lpFilePart=0x0) returned 0x8e [0126.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.240] CoTaskMemFree (pv=0xffa70) [0126.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6d [0126.241] SetErrorMode (uMode=0x1) returned 0x0 [0126.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.242] GetFileType (hFile=0x18c) returned 0x1 [0126.242] SetErrorMode (uMode=0x0) returned 0x1 [0126.242] GetFileType (hFile=0x18c) returned 0x1 [0126.243] CloseHandle (hObject=0x18c) returned 1 [0126.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", lpFilePart=0x0) returned 0x52 [0126.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", lpFilePart=0x0) returned 0x52 [0126.244] SetErrorMode (uMode=0x1) returned 0x0 [0126.244] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.245] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.245] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.245] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0126.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0126.246] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.247] SetErrorMode (uMode=0x0) returned 0x1 [0126.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", lpFilePart=0x0) returned 0x52 [0126.247] SetErrorMode (uMode=0x1) returned 0x0 [0126.247] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0126.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0126.248] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.249] SetErrorMode (uMode=0x0) returned 0x1 [0126.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", lpFilePart=0x0) returned 0x8f [0126.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", lpFilePart=0x0) returned 0x8f [0126.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.250] CoTaskMemFree (pv=0xffa70) [0126.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", lpFilePart=0x0) returned 0x8e [0126.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", lpFilePart=0x0) returned 0x8e [0126.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.250] CoTaskMemFree (pv=0xffa70) [0126.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", lpFilePart=0x0) returned 0x89 [0126.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", lpFilePart=0x0) returned 0x89 [0126.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.251] CoTaskMemFree (pv=0xffa70) [0126.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", lpFilePart=0x0) returned 0x88 [0126.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", lpFilePart=0x0) returned 0x88 [0126.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.251] CoTaskMemFree (pv=0xffa70) [0126.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6c [0126.252] SetErrorMode (uMode=0x1) returned 0x0 [0126.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.253] GetFileType (hFile=0x18c) returned 0x1 [0126.253] SetErrorMode (uMode=0x0) returned 0x1 [0126.253] GetFileType (hFile=0x18c) returned 0x1 [0126.254] CloseHandle (hObject=0x18c) returned 1 [0126.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", lpFilePart=0x0) returned 0x59 [0126.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", lpFilePart=0x0) returned 0x59 [0126.255] SetErrorMode (uMode=0x1) returned 0x0 [0126.255] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MIE07F~1.DLL")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0126.257] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.257] SetErrorMode (uMode=0x0) returned 0x1 [0126.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", lpFilePart=0x0) returned 0x59 [0126.258] SetErrorMode (uMode=0x1) returned 0x0 [0126.258] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MIE07F~1.DLL")) returned 1 [0126.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0126.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0126.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0126.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0126.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0126.259] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.260] SetErrorMode (uMode=0x0) returned 0x1 [0126.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x99 [0126.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x99 [0126.260] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.261] CoTaskMemFree (pv=0xffa70) [0126.261] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x99 [0126.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x99 [0126.261] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.261] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.261] CoTaskMemFree (pv=0xffa70) [0126.261] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x93 [0126.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x93 [0126.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.262] CoTaskMemFree (pv=0xffa70) [0126.262] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x9b [0126.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x9b [0126.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.262] CoTaskMemFree (pv=0xffa70) [0126.262] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x98 [0126.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", lpFilePart=0x0) returned 0x98 [0126.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.263] CoTaskMemFree (pv=0xffa70) [0126.263] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x73 [0126.263] SetErrorMode (uMode=0x1) returned 0x0 [0126.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.265] GetFileType (hFile=0x18c) returned 0x1 [0126.265] SetErrorMode (uMode=0x0) returned 0x1 [0126.265] GetFileType (hFile=0x18c) returned 0x1 [0126.266] CloseHandle (hObject=0x18c) returned 1 [0126.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x62 [0126.266] SetErrorMode (uMode=0x1) returned 0x0 [0126.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.267] GetFileType (hFile=0x18c) returned 0x1 [0126.267] SetErrorMode (uMode=0x0) returned 0x1 [0126.267] GetFileType (hFile=0x18c) returned 0x1 [0126.268] CloseHandle (hObject=0x18c) returned 1 [0126.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0126.269] SetErrorMode (uMode=0x1) returned 0x0 [0126.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.271] GetFileType (hFile=0x18c) returned 0x1 [0126.271] SetErrorMode (uMode=0x0) returned 0x1 [0126.271] GetFileType (hFile=0x18c) returned 0x1 [0126.272] CloseHandle (hObject=0x18c) returned 1 [0126.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", lpFilePart=0x0) returned 0x39 [0126.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", lpFilePart=0x0) returned 0x39 [0126.273] SetErrorMode (uMode=0x1) returned 0x0 [0126.273] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0126.278] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0126.278] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0126.278] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.278] SetErrorMode (uMode=0x0) returned 0x1 [0126.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", lpFilePart=0x0) returned 0x39 [0126.279] SetErrorMode (uMode=0x1) returned 0x0 [0126.279] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0126.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1 [0126.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0126.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0126.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0126.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0126.280] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.281] SetErrorMode (uMode=0x0) returned 0x1 [0126.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd", lpFilePart=0x0) returned 0x4a [0126.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd", lpFilePart=0x0) returned 0x4a [0126.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.281] CoTaskMemFree (pv=0xffa70) [0126.281] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll", lpFilePart=0x0) returned 0x44 [0126.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll", lpFilePart=0x0) returned 0x44 [0126.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.281] CoTaskMemFree (pv=0xffa70) [0126.281] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", lpFilePart=0x0) returned 0x47 [0126.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", lpFilePart=0x0) returned 0x47 [0126.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.282] CoTaskMemFree (pv=0xffa70) [0126.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", lpFilePart=0x0) returned 0x46 [0126.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", lpFilePart=0x0) returned 0x46 [0126.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.282] CoTaskMemFree (pv=0xffa70) [0126.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x3e [0126.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x3e [0126.282] SetErrorMode (uMode=0x1) returned 0x0 [0126.282] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.284] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.285] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0126.285] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0126.285] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0126.285] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0126.285] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0126.285] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0126.285] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.286] SetErrorMode (uMode=0x0) returned 0x1 [0126.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x3e [0126.286] SetErrorMode (uMode=0x1) returned 0x0 [0126.286] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0126.287] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.288] SetErrorMode (uMode=0x0) returned 0x1 [0126.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", lpFilePart=0x0) returned 0x53 [0126.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", lpFilePart=0x0) returned 0x53 [0126.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", lpFilePart=0x0) returned 0x53 [0126.288] SetErrorMode (uMode=0x1) returned 0x0 [0126.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0126.289] SetErrorMode (uMode=0x0) returned 0x1 [0126.289] GetFileType (hFile=0x18c) returned 0x1 [0126.289] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2cc [0126.290] ReadFile (in: hFile=0x18c, lpBuffer=0x284a100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x284a100*, lpNumberOfBytesRead=0x27e6e8*=0x2cc, lpOverlapped=0x0) returned 1 [0126.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", lpFilePart=0x0) returned 0x53 [0126.292] SetErrorMode (uMode=0x1) returned 0x0 [0126.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc)) returned 1 [0126.292] SetErrorMode (uMode=0x0) returned 0x1 [0126.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", lpFilePart=0x0) returned 0x53 [0126.382] SetErrorMode (uMode=0x1) returned 0x0 [0126.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0126.384] SetErrorMode (uMode=0x0) returned 0x1 [0126.384] GetFileType (hFile=0x18c) returned 0x1 [0126.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config", lpFilePart=0x0) returned 0x53 [0126.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\otbDb6xp09cd1xsa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\otbDb6xp09cd1xsa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0126.388] SetErrorMode (uMode=0x1) returned 0x0 [0126.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf3e470, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0126.388] SetErrorMode (uMode=0x0) returned 0x1 [0126.388] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\otbDb6xp09cd1xsa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\otbdb6xp09cd1xsa_encrypted_by.whiterose")) returned 1 [0126.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe", lpFilePart=0x0) returned 0x50 [0126.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe", lpFilePart=0x0) returned 0x50 [0126.494] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.494] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.494] CoTaskMemFree (pv=0xffa70) [0126.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll", lpFilePart=0x0) returned 0x4d [0126.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll", lpFilePart=0x0) returned 0x4d [0126.495] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.495] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.495] CoTaskMemFree (pv=0xffa70) [0126.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll", lpFilePart=0x0) returned 0x56 [0126.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll", lpFilePart=0x0) returned 0x56 [0126.495] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.495] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.495] CoTaskMemFree (pv=0xffa70) [0126.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x43 [0126.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x43 [0126.495] SetErrorMode (uMode=0x1) returned 0x0 [0126.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0126.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0126.541] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0126.541] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.542] SetErrorMode (uMode=0x0) returned 0x1 [0126.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x43 [0126.542] SetErrorMode (uMode=0x1) returned 0x0 [0126.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0126.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0126.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0126.543] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.543] SetErrorMode (uMode=0x0) returned 0x1 [0126.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", lpFilePart=0x0) returned 0x57 [0126.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", lpFilePart=0x0) returned 0x57 [0126.543] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.543] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.543] CoTaskMemFree (pv=0xffa70) [0126.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", lpFilePart=0x0) returned 0x54 [0126.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", lpFilePart=0x0) returned 0x54 [0126.544] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.544] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.544] CoTaskMemFree (pv=0xffa70) [0126.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0126.544] SetErrorMode (uMode=0x1) returned 0x0 [0126.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.589] SetErrorMode (uMode=0x0) returned 0x1 [0126.589] GetFileType (hFile=0x18c) returned 0x1 [0126.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0126.590] SetErrorMode (uMode=0x1) returned 0x0 [0126.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.591] SetErrorMode (uMode=0x0) returned 0x1 [0126.591] GetFileType (hFile=0x18c) returned 0x1 [0126.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0126.592] SetErrorMode (uMode=0x1) returned 0x0 [0126.592] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.593] SetErrorMode (uMode=0x0) returned 0x1 [0126.593] GetFileType (hFile=0x18c) returned 0x1 [0126.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", lpFilePart=0x0) returned 0x4a [0126.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", lpFilePart=0x0) returned 0x4a [0126.594] SetErrorMode (uMode=0x1) returned 0x0 [0126.594] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0126.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0126.595] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.595] SetErrorMode (uMode=0x0) returned 0x1 [0126.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", lpFilePart=0x0) returned 0x4a [0126.596] SetErrorMode (uMode=0x1) returned 0x0 [0126.596] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0126.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0126.596] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.596] SetErrorMode (uMode=0x0) returned 0x1 [0126.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x4d [0126.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x4d [0126.597] SetErrorMode (uMode=0x1) returned 0x0 [0126.597] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0126.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0126.597] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.597] SetErrorMode (uMode=0x0) returned 0x1 [0126.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x4d [0126.598] SetErrorMode (uMode=0x1) returned 0x0 [0126.598] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.598] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.598] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0126.598] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0126.598] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.598] SetErrorMode (uMode=0x0) returned 0x1 [0126.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x51 [0126.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x51 [0126.599] SetErrorMode (uMode=0x1) returned 0x0 [0126.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0126.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0126.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0126.635] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.635] SetErrorMode (uMode=0x0) returned 0x1 [0126.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x51 [0126.636] SetErrorMode (uMode=0x1) returned 0x0 [0126.636] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0126.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0126.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0126.636] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.636] SetErrorMode (uMode=0x0) returned 0x1 [0126.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL", lpFilePart=0x0) returned 0x5e [0126.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL", lpFilePart=0x0) returned 0x5e [0126.637] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.637] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.637] CoTaskMemFree (pv=0xffa70) [0126.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL", lpFilePart=0x0) returned 0x5b [0126.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL", lpFilePart=0x0) returned 0x5b [0126.637] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.637] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.637] CoTaskMemFree (pv=0xffa70) [0126.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6b [0126.637] SetErrorMode (uMode=0x1) returned 0x0 [0126.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.638] SetErrorMode (uMode=0x0) returned 0x1 [0126.638] GetFileType (hFile=0x18c) returned 0x1 [0126.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x67 [0126.642] SetErrorMode (uMode=0x1) returned 0x0 [0126.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.643] SetErrorMode (uMode=0x0) returned 0x1 [0126.643] GetFileType (hFile=0x18c) returned 0x1 [0126.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x64 [0126.644] SetErrorMode (uMode=0x1) returned 0x0 [0126.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.644] SetErrorMode (uMode=0x0) returned 0x1 [0126.644] GetFileType (hFile=0x18c) returned 0x1 [0126.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0126.646] SetErrorMode (uMode=0x1) returned 0x0 [0126.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.646] SetErrorMode (uMode=0x0) returned 0x1 [0126.646] GetFileType (hFile=0x18c) returned 0x1 [0126.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services", lpFilePart=0x0) returned 0x2c [0126.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services", lpFilePart=0x0) returned 0x2c [0126.648] SetErrorMode (uMode=0x1) returned 0x0 [0126.648] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0126.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0126.713] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.713] SetErrorMode (uMode=0x0) returned 0x1 [0126.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services", lpFilePart=0x0) returned 0x2c [0126.714] SetErrorMode (uMode=0x1) returned 0x0 [0126.714] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0126.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0126.714] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.714] SetErrorMode (uMode=0x0) returned 0x1 [0126.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0126.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0126.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0126.715] SetErrorMode (uMode=0x1) returned 0x0 [0126.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0126.760] SetErrorMode (uMode=0x0) returned 0x1 [0126.760] GetFileType (hFile=0x18c) returned 0x1 [0126.760] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xa8e [0126.760] ReadFile (in: hFile=0x18c, lpBuffer=0x275a8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x275a8d0*, lpNumberOfBytesRead=0x27e828*=0xa8e, lpOverlapped=0x0) returned 1 [0126.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0126.761] SetErrorMode (uMode=0x1) returned 0x0 [0126.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e)) returned 1 [0126.762] SetErrorMode (uMode=0x0) returned 0x1 [0126.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0126.851] SetErrorMode (uMode=0x1) returned 0x0 [0126.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.859] SetErrorMode (uMode=0x0) returned 0x1 [0126.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0126.861] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp")) returned 1 [0126.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x46 [0126.862] SetErrorMode (uMode=0x1) returned 0x0 [0126.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.863] GetFileType (hFile=0x18c) returned 0x1 [0126.863] SetErrorMode (uMode=0x0) returned 0x1 [0126.863] GetFileType (hFile=0x18c) returned 0x1 [0126.865] WriteFile (in: hFile=0x18c, lpBuffer=0x27c40b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x27c40b8*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0126.866] WriteFile (in: hFile=0x18c, lpBuffer=0x27c40b8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x27c40b8*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0126.866] CloseHandle (hObject=0x18c) returned 1 [0126.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x31 [0126.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x31 [0126.867] SetErrorMode (uMode=0x1) returned 0x0 [0126.867] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0126.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0126.867] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.868] SetErrorMode (uMode=0x0) returned 0x1 [0126.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x31 [0126.868] SetErrorMode (uMode=0x1) returned 0x0 [0126.868] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0126.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0126.869] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.869] SetErrorMode (uMode=0x0) returned 0x1 [0126.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x3b [0126.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0126.869] SetErrorMode (uMode=0x1) returned 0x0 [0126.869] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0126.870] GetFileType (hFile=0x18c) returned 0x1 [0126.870] SetErrorMode (uMode=0x0) returned 0x1 [0126.870] GetFileType (hFile=0x18c) returned 0x1 [0126.871] WriteFile (in: hFile=0x18c, lpBuffer=0x27dce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x27dce30*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0126.873] CloseHandle (hObject=0x18c) returned 1 [0126.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System", lpFilePart=0x0) returned 0x2a [0126.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System", lpFilePart=0x0) returned 0x2a [0126.873] SetErrorMode (uMode=0x1) returned 0x0 [0126.873] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.962] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.962] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0126.963] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.964] SetErrorMode (uMode=0x0) returned 0x1 [0126.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System", lpFilePart=0x0) returned 0x2a [0126.964] SetErrorMode (uMode=0x1) returned 0x0 [0126.964] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0126.965] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.965] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0126.966] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0126.967] SetErrorMode (uMode=0x0) returned 0x1 [0126.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll", lpFilePart=0x0) returned 0x37 [0126.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll", lpFilePart=0x0) returned 0x37 [0126.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.967] CoTaskMemFree (pv=0xffa70) [0126.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll", lpFilePart=0x0) returned 0x34 [0126.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll", lpFilePart=0x0) returned 0x34 [0126.968] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.968] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.968] CoTaskMemFree (pv=0xffa70) [0126.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll", lpFilePart=0x0) returned 0x37 [0126.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll", lpFilePart=0x0) returned 0x37 [0126.968] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0126.968] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.968] CoTaskMemFree (pv=0xffa70) [0126.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0126.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x2e [0126.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x2e [0126.969] SetErrorMode (uMode=0x1) returned 0x0 [0126.969] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0127.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0127.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0127.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0 [0127.011] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.011] SetErrorMode (uMode=0x0) returned 0x1 [0127.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x2e [0127.012] SetErrorMode (uMode=0x1) returned 0x0 [0127.012] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0127.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0127.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0127.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0127.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0 [0127.015] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.016] SetErrorMode (uMode=0x0) returned 0x1 [0127.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc", lpFilePart=0x0) returned 0x3b [0127.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc", lpFilePart=0x0) returned 0x3b [0127.016] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.016] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.016] CoTaskMemFree (pv=0xffa70) [0127.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc", lpFilePart=0x0) returned 0x39 [0127.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc", lpFilePart=0x0) returned 0x39 [0127.017] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.017] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.017] CoTaskMemFree (pv=0xffa70) [0127.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll", lpFilePart=0x0) returned 0x3b [0127.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll", lpFilePart=0x0) returned 0x3b [0127.017] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.017] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.017] CoTaskMemFree (pv=0xffa70) [0127.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll", lpFilePart=0x0) returned 0x3a [0127.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll", lpFilePart=0x0) returned 0x3a [0127.018] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.018] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.018] CoTaskMemFree (pv=0xffa70) [0127.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb", lpFilePart=0x0) returned 0x3a [0127.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb", lpFilePart=0x0) returned 0x3a [0127.018] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.018] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.018] CoTaskMemFree (pv=0xffa70) [0127.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb", lpFilePart=0x0) returned 0x3a [0127.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb", lpFilePart=0x0) returned 0x3a [0127.019] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.019] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.019] CoTaskMemFree (pv=0xffa70) [0127.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb", lpFilePart=0x0) returned 0x3a [0127.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb", lpFilePart=0x0) returned 0x3a [0127.019] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.019] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.019] CoTaskMemFree (pv=0xffa70) [0127.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb", lpFilePart=0x0) returned 0x3a [0127.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb", lpFilePart=0x0) returned 0x3a [0127.020] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.020] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.020] CoTaskMemFree (pv=0xffa70) [0127.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb", lpFilePart=0x0) returned 0x3a [0127.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb", lpFilePart=0x0) returned 0x3a [0127.020] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.020] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.021] CoTaskMemFree (pv=0xffa70) [0127.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb", lpFilePart=0x0) returned 0x3a [0127.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb", lpFilePart=0x0) returned 0x3a [0127.021] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.021] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.021] CoTaskMemFree (pv=0xffa70) [0127.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll", lpFilePart=0x0) returned 0x3a [0127.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll", lpFilePart=0x0) returned 0x3a [0127.022] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.022] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.022] CoTaskMemFree (pv=0xffa70) [0127.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb", lpFilePart=0x0) returned 0x3c [0127.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb", lpFilePart=0x0) returned 0x3c [0127.022] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.022] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.022] CoTaskMemFree (pv=0xffa70) [0127.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll", lpFilePart=0x0) returned 0x3b [0127.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll", lpFilePart=0x0) returned 0x3b [0127.023] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.023] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.023] CoTaskMemFree (pv=0xffa70) [0127.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll", lpFilePart=0x0) returned 0x39 [0127.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll", lpFilePart=0x0) returned 0x39 [0127.023] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.023] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.023] CoTaskMemFree (pv=0xffa70) [0127.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb", lpFilePart=0x0) returned 0x3b [0127.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb", lpFilePart=0x0) returned 0x3b [0127.024] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.024] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.024] CoTaskMemFree (pv=0xffa70) [0127.024] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll", lpFilePart=0x0) returned 0x3b [0127.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll", lpFilePart=0x0) returned 0x3b [0127.072] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.072] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.072] CoTaskMemFree (pv=0xffa70) [0127.072] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll", lpFilePart=0x0) returned 0x38 [0127.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll", lpFilePart=0x0) returned 0x38 [0127.073] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.073] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.073] CoTaskMemFree (pv=0xffa70) [0127.073] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x34 [0127.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x34 [0127.073] SetErrorMode (uMode=0x1) returned 0x0 [0127.073] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.127] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.127] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0127.127] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0127.127] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.128] SetErrorMode (uMode=0x0) returned 0x1 [0127.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x34 [0127.128] SetErrorMode (uMode=0x1) returned 0x0 [0127.128] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0127.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0127.129] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.129] SetErrorMode (uMode=0x0) returned 0x1 [0127.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", lpFilePart=0x0) returned 0x45 [0127.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", lpFilePart=0x0) returned 0x45 [0127.129] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.129] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.129] CoTaskMemFree (pv=0xffa70) [0127.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0127.130] SetErrorMode (uMode=0x1) returned 0x0 [0127.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.131] GetFileType (hFile=0x18c) returned 0x1 [0127.131] SetErrorMode (uMode=0x0) returned 0x1 [0127.131] GetFileType (hFile=0x18c) returned 0x1 [0127.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x48 [0127.134] SetErrorMode (uMode=0x1) returned 0x0 [0127.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.134] GetFileType (hFile=0x18c) returned 0x1 [0127.134] SetErrorMode (uMode=0x0) returned 0x1 [0127.135] GetFileType (hFile=0x18c) returned 0x1 [0127.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x30 [0127.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x30 [0127.136] SetErrorMode (uMode=0x1) returned 0x0 [0127.136] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0127.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0127.137] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.137] SetErrorMode (uMode=0x0) returned 0x1 [0127.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x30 [0127.138] SetErrorMode (uMode=0x1) returned 0x0 [0127.138] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0127.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0127.138] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.138] SetErrorMode (uMode=0x0) returned 0x1 [0127.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui", lpFilePart=0x0) returned 0x41 [0127.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui", lpFilePart=0x0) returned 0x41 [0127.139] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.139] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.139] CoTaskMemFree (pv=0xffa70) [0127.139] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0127.139] SetErrorMode (uMode=0x1) returned 0x0 [0127.139] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.140] GetFileType (hFile=0x18c) returned 0x1 [0127.140] SetErrorMode (uMode=0x0) returned 0x1 [0127.140] GetFileType (hFile=0x18c) returned 0x1 [0127.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x30 [0127.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x30 [0127.141] SetErrorMode (uMode=0x1) returned 0x0 [0127.141] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0127.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0127.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0127.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0127.188] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.189] SetErrorMode (uMode=0x0) returned 0x1 [0127.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x30 [0127.189] SetErrorMode (uMode=0x1) returned 0x0 [0127.190] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0127.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0127.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0127.192] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.193] SetErrorMode (uMode=0x0) returned 0x1 [0127.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc", lpFilePart=0x0) returned 0x3d [0127.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc", lpFilePart=0x0) returned 0x3d [0127.193] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.193] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.194] CoTaskMemFree (pv=0xffa70) [0127.194] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc", lpFilePart=0x0) returned 0x3b [0127.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc", lpFilePart=0x0) returned 0x3b [0127.194] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.194] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.194] CoTaskMemFree (pv=0xffa70) [0127.194] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg", lpFilePart=0x0) returned 0x3c [0127.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg", lpFilePart=0x0) returned 0x3c [0127.194] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.194] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.194] CoTaskMemFree (pv=0xffa70) [0127.194] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg", lpFilePart=0x0) returned 0x3d [0127.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg", lpFilePart=0x0) returned 0x3d [0127.194] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.194] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.195] CoTaskMemFree (pv=0xffa70) [0127.195] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll", lpFilePart=0x0) returned 0x3b [0127.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll", lpFilePart=0x0) returned 0x3b [0127.195] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.195] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.195] CoTaskMemFree (pv=0xffa70) [0127.195] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll", lpFilePart=0x0) returned 0x3c [0127.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll", lpFilePart=0x0) returned 0x3c [0127.195] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.195] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.195] CoTaskMemFree (pv=0xffa70) [0127.195] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll", lpFilePart=0x0) returned 0x3b [0127.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll", lpFilePart=0x0) returned 0x3b [0127.195] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.195] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.196] CoTaskMemFree (pv=0xffa70) [0127.196] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll", lpFilePart=0x0) returned 0x3c [0127.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll", lpFilePart=0x0) returned 0x3c [0127.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.243] CoTaskMemFree (pv=0xffa70) [0127.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll", lpFilePart=0x0) returned 0x3b [0127.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll", lpFilePart=0x0) returned 0x3b [0127.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.243] CoTaskMemFree (pv=0xffa70) [0127.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll", lpFilePart=0x0) returned 0x3c [0127.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll", lpFilePart=0x0) returned 0x3c [0127.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.244] CoTaskMemFree (pv=0xffa70) [0127.244] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll", lpFilePart=0x0) returned 0x3b [0127.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll", lpFilePart=0x0) returned 0x3b [0127.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.244] CoTaskMemFree (pv=0xffa70) [0127.244] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll", lpFilePart=0x0) returned 0x3b [0127.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll", lpFilePart=0x0) returned 0x3b [0127.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.244] CoTaskMemFree (pv=0xffa70) [0127.244] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll", lpFilePart=0x0) returned 0x3c [0127.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll", lpFilePart=0x0) returned 0x3c [0127.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.245] CoTaskMemFree (pv=0xffa70) [0127.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll", lpFilePart=0x0) returned 0x3d [0127.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll", lpFilePart=0x0) returned 0x3d [0127.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.245] CoTaskMemFree (pv=0xffa70) [0127.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll", lpFilePart=0x0) returned 0x3d [0127.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll", lpFilePart=0x0) returned 0x3d [0127.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.245] CoTaskMemFree (pv=0xffa70) [0127.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll", lpFilePart=0x0) returned 0x3c [0127.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll", lpFilePart=0x0) returned 0x3c [0127.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.246] CoTaskMemFree (pv=0xffa70) [0127.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll", lpFilePart=0x0) returned 0x3d [0127.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll", lpFilePart=0x0) returned 0x3d [0127.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.246] CoTaskMemFree (pv=0xffa70) [0127.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll", lpFilePart=0x0) returned 0x3c [0127.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll", lpFilePart=0x0) returned 0x3c [0127.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.246] CoTaskMemFree (pv=0xffa70) [0127.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x36 [0127.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x36 [0127.247] SetErrorMode (uMode=0x1) returned 0x0 [0127.247] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0127.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0127.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0127.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0127.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0127.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0127.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0127.264] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.264] SetErrorMode (uMode=0x0) returned 0x1 [0127.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x36 [0127.265] SetErrorMode (uMode=0x1) returned 0x0 [0127.265] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0127.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0127.266] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.267] SetErrorMode (uMode=0x0) returned 0x1 [0127.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", lpFilePart=0x0) returned 0x46 [0127.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", lpFilePart=0x0) returned 0x46 [0127.267] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.267] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.267] CoTaskMemFree (pv=0xffa70) [0127.267] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui", lpFilePart=0x0) returned 0x46 [0127.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui", lpFilePart=0x0) returned 0x46 [0127.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.268] CoTaskMemFree (pv=0xffa70) [0127.268] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", lpFilePart=0x0) returned 0x46 [0127.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", lpFilePart=0x0) returned 0x46 [0127.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.268] CoTaskMemFree (pv=0xffa70) [0127.268] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", lpFilePart=0x0) returned 0x46 [0127.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", lpFilePart=0x0) returned 0x46 [0127.268] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.268] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.268] CoTaskMemFree (pv=0xffa70) [0127.268] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", lpFilePart=0x0) returned 0x47 [0127.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", lpFilePart=0x0) returned 0x47 [0127.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.269] CoTaskMemFree (pv=0xffa70) [0127.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", lpFilePart=0x0) returned 0x47 [0127.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", lpFilePart=0x0) returned 0x47 [0127.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.269] CoTaskMemFree (pv=0xffa70) [0127.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x50 [0127.269] SetErrorMode (uMode=0x1) returned 0x0 [0127.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.271] SetErrorMode (uMode=0x0) returned 0x1 [0127.271] GetFileType (hFile=0x18c) returned 0x1 [0127.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0127.272] SetErrorMode (uMode=0x1) returned 0x0 [0127.272] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.273] SetErrorMode (uMode=0x0) returned 0x1 [0127.273] GetFileType (hFile=0x18c) returned 0x1 [0127.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x31 [0127.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x31 [0127.275] SetErrorMode (uMode=0x1) returned 0x0 [0127.275] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.276] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0127.278] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0127.278] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0127.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0127.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0127.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0127.280] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.280] SetErrorMode (uMode=0x0) returned 0x1 [0127.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x31 [0127.281] SetErrorMode (uMode=0x1) returned 0x0 [0127.281] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.281] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0127.282] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0127.283] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0127.283] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.284] SetErrorMode (uMode=0x0) returned 0x1 [0127.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll", lpFilePart=0x0) returned 0x3c [0127.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll", lpFilePart=0x0) returned 0x3c [0127.284] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.284] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.285] CoTaskMemFree (pv=0xffa70) [0127.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll", lpFilePart=0x0) returned 0x3e [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll", lpFilePart=0x0) returned 0x3e [0127.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.285] CoTaskMemFree (pv=0xffa70) [0127.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll", lpFilePart=0x0) returned 0x3c [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll", lpFilePart=0x0) returned 0x3c [0127.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.285] CoTaskMemFree (pv=0xffa70) [0127.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll", lpFilePart=0x0) returned 0x3d [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll", lpFilePart=0x0) returned 0x3d [0127.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.285] CoTaskMemFree (pv=0xffa70) [0127.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll", lpFilePart=0x0) returned 0x3e [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll", lpFilePart=0x0) returned 0x3e [0127.286] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.286] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.286] CoTaskMemFree (pv=0xffa70) [0127.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll", lpFilePart=0x0) returned 0x3d [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll", lpFilePart=0x0) returned 0x3d [0127.286] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.286] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.286] CoTaskMemFree (pv=0xffa70) [0127.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll", lpFilePart=0x0) returned 0x3c [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll", lpFilePart=0x0) returned 0x3c [0127.286] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.286] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.286] CoTaskMemFree (pv=0xffa70) [0127.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll", lpFilePart=0x0) returned 0x3c [0127.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll", lpFilePart=0x0) returned 0x3c [0127.287] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.287] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.287] CoTaskMemFree (pv=0xffa70) [0127.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll", lpFilePart=0x0) returned 0x3d [0127.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll", lpFilePart=0x0) returned 0x3d [0127.287] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.287] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.287] CoTaskMemFree (pv=0xffa70) [0127.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll", lpFilePart=0x0) returned 0x3e [0127.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll", lpFilePart=0x0) returned 0x3e [0127.287] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.287] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.287] CoTaskMemFree (pv=0xffa70) [0127.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll", lpFilePart=0x0) returned 0x3d [0127.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll", lpFilePart=0x0) returned 0x3d [0127.288] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.288] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.288] CoTaskMemFree (pv=0xffa70) [0127.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll", lpFilePart=0x0) returned 0x3c [0127.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll", lpFilePart=0x0) returned 0x3c [0127.288] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.288] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.288] CoTaskMemFree (pv=0xffa70) [0127.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll", lpFilePart=0x0) returned 0x3d [0127.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll", lpFilePart=0x0) returned 0x3d [0127.288] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.288] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.288] CoTaskMemFree (pv=0xffa70) [0127.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll", lpFilePart=0x0) returned 0x3e [0127.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll", lpFilePart=0x0) returned 0x3e [0127.289] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.289] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.289] CoTaskMemFree (pv=0xffa70) [0127.289] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll", lpFilePart=0x0) returned 0x3d [0127.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll", lpFilePart=0x0) returned 0x3d [0127.289] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.289] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.289] CoTaskMemFree (pv=0xffa70) [0127.289] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll", lpFilePart=0x0) returned 0x3e [0127.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll", lpFilePart=0x0) returned 0x3e [0127.289] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.289] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.289] CoTaskMemFree (pv=0xffa70) [0127.290] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc", lpFilePart=0x0) returned 0x3e [0127.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc", lpFilePart=0x0) returned 0x3e [0127.290] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.290] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.290] CoTaskMemFree (pv=0xffa70) [0127.290] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc", lpFilePart=0x0) returned 0x3e [0127.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc", lpFilePart=0x0) returned 0x3e [0127.290] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.290] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.290] CoTaskMemFree (pv=0xffa70) [0127.290] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll", lpFilePart=0x0) returned 0x3e [0127.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll", lpFilePart=0x0) returned 0x3e [0127.290] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.290] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.290] CoTaskMemFree (pv=0xffa70) [0127.291] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll", lpFilePart=0x0) returned 0x3e [0127.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll", lpFilePart=0x0) returned 0x3e [0127.291] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.291] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.291] CoTaskMemFree (pv=0xffa70) [0127.291] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll", lpFilePart=0x0) returned 0x3d [0127.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll", lpFilePart=0x0) returned 0x3d [0127.291] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.291] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.291] CoTaskMemFree (pv=0xffa70) [0127.291] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll", lpFilePart=0x0) returned 0x3d [0127.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll", lpFilePart=0x0) returned 0x3d [0127.291] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.291] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.291] CoTaskMemFree (pv=0xffa70) [0127.291] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll", lpFilePart=0x0) returned 0x3b [0127.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll", lpFilePart=0x0) returned 0x3b [0127.292] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.292] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.292] CoTaskMemFree (pv=0xffa70) [0127.292] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll", lpFilePart=0x0) returned 0x3e [0127.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll", lpFilePart=0x0) returned 0x3e [0127.292] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.292] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.292] CoTaskMemFree (pv=0xffa70) [0127.292] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x37 [0127.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x37 [0127.292] SetErrorMode (uMode=0x1) returned 0x0 [0127.292] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0127.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a858c5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a858c5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0127.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5395f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a5395f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0127.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0127.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0127.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0127.294] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.294] SetErrorMode (uMode=0x0) returned 0x1 [0127.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x37 [0127.294] SetErrorMode (uMode=0x1) returned 0x0 [0127.294] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a858c5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a858c5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5395f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a5395f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0127.295] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.295] SetErrorMode (uMode=0x0) returned 0x1 [0127.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui", lpFilePart=0x0) returned 0x48 [0127.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui", lpFilePart=0x0) returned 0x48 [0127.295] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.295] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.296] CoTaskMemFree (pv=0xffa70) [0127.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", lpFilePart=0x0) returned 0x48 [0127.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", lpFilePart=0x0) returned 0x48 [0127.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.296] CoTaskMemFree (pv=0xffa70) [0127.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", lpFilePart=0x0) returned 0x48 [0127.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", lpFilePart=0x0) returned 0x48 [0127.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.296] CoTaskMemFree (pv=0xffa70) [0127.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", lpFilePart=0x0) returned 0x48 [0127.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", lpFilePart=0x0) returned 0x48 [0127.296] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.296] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.297] CoTaskMemFree (pv=0xffa70) [0127.297] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", lpFilePart=0x0) returned 0x47 [0127.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", lpFilePart=0x0) returned 0x47 [0127.297] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.297] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.297] CoTaskMemFree (pv=0xffa70) [0127.297] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0127.297] SetErrorMode (uMode=0x1) returned 0x0 [0127.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.308] SetErrorMode (uMode=0x0) returned 0x1 [0127.308] GetFileType (hFile=0x18c) returned 0x1 [0127.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0127.309] SetErrorMode (uMode=0x1) returned 0x0 [0127.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.309] SetErrorMode (uMode=0x0) returned 0x1 [0127.309] GetFileType (hFile=0x18c) returned 0x1 [0127.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x44 [0127.310] SetErrorMode (uMode=0x1) returned 0x0 [0127.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\system\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.311] SetErrorMode (uMode=0x0) returned 0x1 [0127.311] GetFileType (hFile=0x18c) returned 0x1 [0127.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3d [0127.312] SetErrorMode (uMode=0x1) returned 0x0 [0127.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\common files\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0127.313] SetErrorMode (uMode=0x0) returned 0x1 [0127.313] GetFileType (hFile=0x18c) returned 0x1 [0127.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0127.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0127.314] SetErrorMode (uMode=0x1) returned 0x0 [0127.314] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd7673f50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd7673f50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd7673f50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd7673f50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0127.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0127.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4890780, ftCreationTime.dwHighDateTime=0x1d50edd, ftLastAccessTime.dwLowDateTime=0xed0cf600, ftLastAccessTime.dwHighDateTime=0x1d4edff, ftLastWriteTime.dwLowDateTime=0xed0cf600, ftLastWriteTime.dwHighDateTime=0x1d4edff, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="creature_executives.exe", cAlternateFileName="CREATU~1.EXE")) returned 1 [0127.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc102ec0, ftCreationTime.dwHighDateTime=0x1d5246d, ftLastAccessTime.dwLowDateTime=0xc79eff40, ftLastAccessTime.dwHighDateTime=0x1d4f37b, ftLastWriteTime.dwLowDateTime=0xc79eff40, ftLastWriteTime.dwHighDateTime=0x1d4f37b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gotten.exe", cAlternateFileName="")) returned 1 [0127.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc102ec0, ftCreationTime.dwHighDateTime=0x1d5246d, ftLastAccessTime.dwLowDateTime=0xc79eff40, ftLastAccessTime.dwHighDateTime=0x1d4f37b, ftLastWriteTime.dwLowDateTime=0xc79eff40, ftLastWriteTime.dwHighDateTime=0x1d4f37b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gotten.exe", cAlternateFileName="")) returned 0 [0127.315] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.315] SetErrorMode (uMode=0x0) returned 0x1 [0127.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0127.316] SetErrorMode (uMode=0x1) returned 0x0 [0127.316] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd7673f50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd7673f50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd7673f50, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd7673f50, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0127.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0127.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4890780, ftCreationTime.dwHighDateTime=0x1d50edd, ftLastAccessTime.dwLowDateTime=0xed0cf600, ftLastAccessTime.dwHighDateTime=0x1d4edff, ftLastWriteTime.dwLowDateTime=0xed0cf600, ftLastWriteTime.dwHighDateTime=0x1d4edff, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="creature_executives.exe", cAlternateFileName="CREATU~1.EXE")) returned 1 [0127.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc102ec0, ftCreationTime.dwHighDateTime=0x1d5246d, ftLastAccessTime.dwLowDateTime=0xc79eff40, ftLastAccessTime.dwHighDateTime=0x1d4f37b, ftLastWriteTime.dwLowDateTime=0xc79eff40, ftLastWriteTime.dwHighDateTime=0x1d4f37b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gotten.exe", cAlternateFileName="")) returned 1 [0127.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc102ec0, ftCreationTime.dwHighDateTime=0x1d5246d, ftLastAccessTime.dwLowDateTime=0xc79eff40, ftLastAccessTime.dwHighDateTime=0x1d4f37b, ftLastWriteTime.dwLowDateTime=0xc79eff40, ftLastWriteTime.dwHighDateTime=0x1d4f37b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gotten.exe", cAlternateFileName="")) returned 0 [0127.316] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.316] SetErrorMode (uMode=0x0) returned 0x1 [0127.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\creature_executives.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\creature_executives.exe", lpFilePart=0x0) returned 0x35 [0127.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\creature_executives.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\creature_executives.exe", lpFilePart=0x0) returned 0x35 [0127.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.317] CoTaskMemFree (pv=0xffa70) [0127.317] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\gotten.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\gotten.exe", lpFilePart=0x0) returned 0x28 [0127.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\gotten.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\gotten.exe", lpFilePart=0x0) returned 0x28 [0127.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.317] CoTaskMemFree (pv=0xffa70) [0127.317] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0127.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0127.317] SetErrorMode (uMode=0x1) returned 0x0 [0127.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.318] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.318] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0127.318] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0127.318] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.318] SetErrorMode (uMode=0x0) returned 0x1 [0127.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0127.318] SetErrorMode (uMode=0x1) returned 0x0 [0127.319] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.319] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.319] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0127.319] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0127.319] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.319] SetErrorMode (uMode=0x0) returned 0x1 [0127.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0127.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0127.319] SetErrorMode (uMode=0x1) returned 0x0 [0127.319] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="580302~1.110")) returned 1 [0127.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0127.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0127.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0127.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0127.320] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.320] SetErrorMode (uMode=0x0) returned 0x1 [0127.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0127.321] SetErrorMode (uMode=0x1) returned 0x0 [0127.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="580302~1.110")) returned 1 [0127.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0127.322] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0127.322] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0127.322] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0127.322] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.322] SetErrorMode (uMode=0x0) returned 0x1 [0127.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0127.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0127.322] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.322] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.322] CoTaskMemFree (pv=0xffa70) [0127.322] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0127.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0127.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0127.323] SetErrorMode (uMode=0x1) returned 0x0 [0127.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0127.323] SetErrorMode (uMode=0x0) returned 0x1 [0127.323] GetFileType (hFile=0x18c) returned 0x1 [0127.323] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x19a [0127.324] ReadFile (in: hFile=0x18c, lpBuffer=0x28fe208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28fe208*, lpNumberOfBytesRead=0x27e788*=0x19a, lpOverlapped=0x0) returned 1 [0127.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0127.325] SetErrorMode (uMode=0x1) returned 0x0 [0127.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a)) returned 1 [0127.325] SetErrorMode (uMode=0x0) returned 0x1 [0127.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0127.418] SetErrorMode (uMode=0x1) returned 0x0 [0127.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0127.419] SetErrorMode (uMode=0x0) returned 0x1 [0127.419] GetFileType (hFile=0x18c) returned 0x1 [0127.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0127.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\k7DG1iKFqt75ncVN_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\k7DG1iKFqt75ncVN_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0127.421] SetErrorMode (uMode=0x1) returned 0x0 [0127.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1c90ff30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0127.421] SetErrorMode (uMode=0x0) returned 0x1 [0127.421] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\k7DG1iKFqt75ncVN_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\k7dg1ikfqt75ncvn_encrypted_by.whiterose")) returned 1 [0127.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", lpFilePart=0x0) returned 0x3e [0127.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", lpFilePart=0x0) returned 0x3e [0127.553] SetErrorMode (uMode=0x1) returned 0x0 [0127.553] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe661340, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="580302~1.MAN")) returned 1 [0127.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db1d780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7db1d780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x744b1e7c, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x2f01758, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0127.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x74ce3fd2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0127.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x73db0ff6, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0127.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe6e02b4, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff5b27e6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd7ed80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7dd7ed80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7553c382, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3953558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x75e2d09a, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76043186, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x86558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7638a542, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x94b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9a43f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7689b536, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3358, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0127.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0127.560] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.561] SetErrorMode (uMode=0x0) returned 0x1 [0127.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", lpFilePart=0x0) returned 0x3e [0127.561] SetErrorMode (uMode=0x1) returned 0x0 [0127.561] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0127.561] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0127.562] SetErrorMode (uMode=0x0) returned 0x1 [0127.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", lpFilePart=0x0) returned 0x55 [0127.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", lpFilePart=0x0) returned 0x55 [0127.562] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.562] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.562] CoTaskMemFree (pv=0xffa70) [0127.562] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll", lpFilePart=0x0) returned 0x49 [0127.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll", lpFilePart=0x0) returned 0x49 [0127.562] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.562] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.562] CoTaskMemFree (pv=0xffa70) [0127.562] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", lpFilePart=0x0) returned 0x4d [0127.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", lpFilePart=0x0) returned 0x4d [0127.563] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.563] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.563] CoTaskMemFree (pv=0xffa70) [0127.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", lpFilePart=0x0) returned 0x4d [0127.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", lpFilePart=0x0) returned 0x4d [0127.563] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.563] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.563] CoTaskMemFree (pv=0xffa70) [0127.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x55 [0127.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x55 [0127.563] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.563] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.563] CoTaskMemFree (pv=0xffa70) [0127.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x55 [0127.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x55 [0127.564] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.564] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.564] CoTaskMemFree (pv=0xffa70) [0127.564] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll", lpFilePart=0x0) returned 0x4f [0127.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll", lpFilePart=0x0) returned 0x4f [0127.564] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.564] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.564] CoTaskMemFree (pv=0xffa70) [0127.564] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", lpFilePart=0x0) returned 0x53 [0127.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", lpFilePart=0x0) returned 0x53 [0127.564] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.564] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.564] CoTaskMemFree (pv=0xffa70) [0127.564] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll", lpFilePart=0x0) returned 0x4d [0127.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll", lpFilePart=0x0) returned 0x4d [0127.565] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.565] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.565] CoTaskMemFree (pv=0xffa70) [0127.565] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll", lpFilePart=0x0) returned 0x51 [0127.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll", lpFilePart=0x0) returned 0x51 [0127.565] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.565] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.565] CoTaskMemFree (pv=0xffa70) [0127.565] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll", lpFilePart=0x0) returned 0x51 [0127.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll", lpFilePart=0x0) returned 0x51 [0127.565] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.565] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.565] CoTaskMemFree (pv=0xffa70) [0127.565] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll", lpFilePart=0x0) returned 0x54 [0127.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll", lpFilePart=0x0) returned 0x54 [0127.566] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0127.566] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.566] CoTaskMemFree (pv=0xffa70) [0127.566] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0127.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", lpFilePart=0x0) returned 0x49 [0127.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", lpFilePart=0x0) returned 0x49 [0127.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", lpFilePart=0x0) returned 0x49 [0127.566] SetErrorMode (uMode=0x1) returned 0x0 [0127.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0127.567] SetErrorMode (uMode=0x0) returned 0x1 [0127.567] GetFileType (hFile=0x18c) returned 0x1 [0127.567] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x9a9480 [0127.589] ReadFile (in: hFile=0x18c, lpBuffer=0x142929c8, nNumberOfBytesToRead=0x9a9480, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x142929c8*, lpNumberOfBytesRead=0x27e6e8*=0x9a9480, lpOverlapped=0x0) returned 1 [0128.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", lpFilePart=0x0) returned 0x49 [0128.223] SetErrorMode (uMode=0x1) returned 0x0 [0128.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480)) returned 1 [0128.224] SetErrorMode (uMode=0x0) returned 0x1 [0129.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", lpFilePart=0x0) returned 0x49 [0129.769] SetErrorMode (uMode=0x1) returned 0x0 [0129.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0129.796] GetFileType (hFile=0x18c) returned 0x1 [0129.796] SetErrorMode (uMode=0x0) returned 0x1 [0129.797] GetFileType (hFile=0x18c) returned 0x1 [0129.797] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x9a9590, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e768*=0x9a9590, lpOverlapped=0x0) returned 1 [0130.060] CloseHandle (hObject=0x18c) returned 1 [0130.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", lpFilePart=0x0) returned 0x49 [0130.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\ALbDENB5mLtKeXIW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\ALbDENB5mLtKeXIW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x66 [0130.429] SetErrorMode (uMode=0x1) returned 0x0 [0130.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1e57a5d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x9a9590)) returned 1 [0130.430] SetErrorMode (uMode=0x0) returned 0x1 [0130.430] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\ALbDENB5mLtKeXIW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\albdenb5mltkexiw_encrypted_by.whiterose")) returned 1 [0130.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll", lpFilePart=0x0) returned 0x49 [0130.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll", lpFilePart=0x0) returned 0x49 [0130.536] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.536] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.536] CoTaskMemFree (pv=0xffa70) [0130.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll", lpFilePart=0x0) returned 0x4c [0130.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll", lpFilePart=0x0) returned 0x4c [0130.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.537] CoTaskMemFree (pv=0xffa70) [0130.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", lpFilePart=0x0) returned 0x53 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", lpFilePart=0x0) returned 0x53 [0130.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.537] CoTaskMemFree (pv=0xffa70) [0130.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", lpFilePart=0x0) returned 0x4f [0130.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", lpFilePart=0x0) returned 0x4f [0130.538] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.538] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.538] CoTaskMemFree (pv=0xffa70) [0130.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", lpFilePart=0x0) returned 0x4c [0130.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", lpFilePart=0x0) returned 0x4c [0130.538] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.538] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.538] CoTaskMemFree (pv=0xffa70) [0130.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", lpFilePart=0x0) returned 0x50 [0130.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", lpFilePart=0x0) returned 0x50 [0130.539] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.539] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.539] CoTaskMemFree (pv=0xffa70) [0130.539] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", lpFilePart=0x0) returned 0x4b [0130.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", lpFilePart=0x0) returned 0x4b [0130.540] SetErrorMode (uMode=0x1) returned 0x0 [0130.540] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0130.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0130.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0130.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0130.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0130.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0130.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0130.543] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0130.544] SetErrorMode (uMode=0x0) returned 0x1 [0130.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", lpFilePart=0x0) returned 0x4b [0130.544] SetErrorMode (uMode=0x1) returned 0x0 [0130.544] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0130.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0130.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0130.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0130.546] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0130.547] SetErrorMode (uMode=0x0) returned 0x1 [0130.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", lpFilePart=0x0) returned 0x54 [0130.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", lpFilePart=0x0) returned 0x54 [0130.547] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.547] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.547] CoTaskMemFree (pv=0xffa70) [0130.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", lpFilePart=0x0) returned 0x55 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", lpFilePart=0x0) returned 0x55 [0130.548] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.548] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.548] CoTaskMemFree (pv=0xffa70) [0130.548] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", lpFilePart=0x0) returned 0x64 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", lpFilePart=0x0) returned 0x64 [0130.549] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.549] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.549] CoTaskMemFree (pv=0xffa70) [0130.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", lpFilePart=0x0) returned 0x55 [0130.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", lpFilePart=0x0) returned 0x55 [0130.549] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.549] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.549] CoTaskMemFree (pv=0xffa70) [0130.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", lpFilePart=0x0) returned 0x57 [0130.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", lpFilePart=0x0) returned 0x57 [0130.550] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.550] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.550] CoTaskMemFree (pv=0xffa70) [0130.550] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0130.552] SetErrorMode (uMode=0x1) returned 0x0 [0130.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0130.553] GetFileType (hFile=0x18c) returned 0x1 [0130.553] SetErrorMode (uMode=0x0) returned 0x1 [0130.553] GetFileType (hFile=0x18c) returned 0x1 [0130.555] WriteFile (in: hFile=0x18c, lpBuffer=0x270ca40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x270ca40*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0130.556] WriteFile (in: hFile=0x18c, lpBuffer=0x270ca40*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x270ca40*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0130.557] CloseHandle (hObject=0x18c) returned 1 [0130.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", lpFilePart=0x0) returned 0x49 [0130.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", lpFilePart=0x0) returned 0x49 [0130.557] SetErrorMode (uMode=0x1) returned 0x0 [0130.557] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0130.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0130.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0130.559] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0130.559] SetErrorMode (uMode=0x0) returned 0x1 [0130.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", lpFilePart=0x0) returned 0x49 [0130.559] SetErrorMode (uMode=0x1) returned 0x0 [0130.559] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0130.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0130.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0130.560] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0130.560] SetErrorMode (uMode=0x0) returned 0x1 [0130.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", lpFilePart=0x0) returned 0x62 [0130.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", lpFilePart=0x0) returned 0x62 [0130.560] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.560] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.560] CoTaskMemFree (pv=0xffa70) [0130.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x63 [0130.561] SetErrorMode (uMode=0x1) returned 0x0 [0130.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0130.561] GetFileType (hFile=0x18c) returned 0x1 [0130.561] SetErrorMode (uMode=0x0) returned 0x1 [0130.561] GetFileType (hFile=0x18c) returned 0x1 [0130.563] WriteFile (in: hFile=0x18c, lpBuffer=0x2726240*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2726240*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0130.564] WriteFile (in: hFile=0x18c, lpBuffer=0x2726240*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2726240*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0130.565] CloseHandle (hObject=0x18c) returned 1 [0130.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", lpFilePart=0x0) returned 0x48 [0130.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", lpFilePart=0x0) returned 0x48 [0130.566] SetErrorMode (uMode=0x1) returned 0x0 [0130.566] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0130.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0130.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8388e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7c8388e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81d5b9a8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0xad7d02b, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0130.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0130.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0130.567] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0130.567] SetErrorMode (uMode=0x0) returned 0x1 [0130.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", lpFilePart=0x0) returned 0x48 [0130.567] SetErrorMode (uMode=0x1) returned 0x0 [0130.567] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0130.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0130.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8388e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7c8388e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81d5b9a8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0xad7d02b, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0130.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0130.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0130.568] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0130.568] SetErrorMode (uMode=0x0) returned 0x1 [0130.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x54 [0130.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x54 [0130.568] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0130.568] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0130.569] CoTaskMemFree (pv=0xffa70) [0130.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0130.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0130.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0130.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0130.569] SetErrorMode (uMode=0x1) returned 0x0 [0130.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0130.570] GetFileType (hFile=0x18c) returned 0x1 [0130.570] SetErrorMode (uMode=0x0) returned 0x1 [0130.570] GetFileType (hFile=0x18c) returned 0x1 [0130.570] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xad7d02b [0130.951] ReadFile (in: hFile=0x18c, lpBuffer=0x1b341010, nNumberOfBytesToRead=0xad7d02b, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x1b341010*, lpNumberOfBytesRead=0x27e648*=0xad7d02b, lpOverlapped=0x0) returned 1 [0136.354] CloseHandle (hObject=0x18c) returned 1 [0138.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0138.677] SetErrorMode (uMode=0x1) returned 0x0 [0138.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8388e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7c8388e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81d5b9a8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0xad7d02b)) returned 1 [0138.678] SetErrorMode (uMode=0x0) returned 0x1 [0153.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0153.060] SetErrorMode (uMode=0x1) returned 0x0 [0153.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0153.104] GetFileType (hFile=0x18c) returned 0x1 [0153.104] SetErrorMode (uMode=0x0) returned 0x1 [0153.104] GetFileType (hFile=0x18c) returned 0x1 [0153.104] WriteFile (in: hFile=0x18c, lpBuffer=0x1b341010*, nNumberOfBytesToWrite=0xad7d130, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x1b341010*, lpNumberOfBytesWritten=0x27e6c8*=0xad7d130, lpOverlapped=0x0) returned 1 [0158.015] CloseHandle (hObject=0x18c) returned 1 [0158.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0158.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\TQttC9mAVgcu*NWn_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\TQttC9mAVgcu*NWn_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x70 [0158.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x52 [0158.356] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z")) returned 1 [0158.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe", lpFilePart=0x0) returned 0x52 [0158.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe", lpFilePart=0x0) returned 0x52 [0158.404] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.404] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.404] CoTaskMemFree (pv=0xffa70) [0158.404] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x62 [0158.406] SetErrorMode (uMode=0x1) returned 0x0 [0158.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0158.408] GetFileType (hFile=0x18c) returned 0x1 [0158.408] SetErrorMode (uMode=0x0) returned 0x1 [0158.409] GetFileType (hFile=0x18c) returned 0x1 [0158.410] WriteFile (in: hFile=0x18c, lpBuffer=0x2704138*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2704138*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0158.412] WriteFile (in: hFile=0x18c, lpBuffer=0x2704138*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2704138*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0158.412] CloseHandle (hObject=0x18c) returned 1 [0158.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", lpFilePart=0x0) returned 0x46 [0158.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", lpFilePart=0x0) returned 0x46 [0158.413] SetErrorMode (uMode=0x1) returned 0x0 [0158.413] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0158.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeae1a98, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0158.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb0b2b9, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0158.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb34ada, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb6582e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb91760, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebbaf81, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebdf980, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec06a90, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec329c2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec63716, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec796af, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec9928c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecc51be, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0158.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecf10f0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed1f733, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed44132, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed72775, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed97174, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfedd1b0c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee07682, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee383d6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee6df4c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee9505c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeebe87d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0158.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeee598d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef118bf, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef3ff02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef67012, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef95655, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfefd4e0f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeffe630, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0341a6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff03ddea, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff069d1c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0158.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff08c00a, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0b7f3c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0e3e6e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff10fda0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff13208e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff162de2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff18ed14, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1b1002, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1d8112, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff206755, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff22d865, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0158.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff25bea8, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff298f51, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2c4e83, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2f0db5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff31cce7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff343df7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3687f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0158.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0158.421] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0158.422] SetErrorMode (uMode=0x0) returned 0x1 [0158.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", lpFilePart=0x0) returned 0x46 [0158.422] SetErrorMode (uMode=0x1) returned 0x0 [0158.423] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0158.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeae1a98, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb0b2b9, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb34ada, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb6582e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb91760, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebbaf81, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebdf980, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0158.424] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec06a90, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec329c2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec63716, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec796af, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec9928c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecc51be, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecf10f0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed1f733, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0158.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed44132, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed72775, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed97174, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfedd1b0c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee07682, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee383d6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee6df4c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee9505c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeebe87d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0158.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeee598d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef118bf, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef3ff02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef67012, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef95655, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfefd4e0f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeffe630, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0341a6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0158.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff03ddea, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff069d1c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff08c00a, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0b7f3c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0e3e6e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff10fda0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff13208e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff162de2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0158.428] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff18ed14, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1b1002, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1d8112, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff206755, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff22d865, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff25bea8, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff298f51, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2c4e83, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2f0db5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0158.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff31cce7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0158.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff343df7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0158.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3687f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0158.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0158.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0158.430] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0158.431] SetErrorMode (uMode=0x0) returned 0x1 [0158.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", lpFilePart=0x0) returned 0x4d [0158.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", lpFilePart=0x0) returned 0x4d [0158.431] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.431] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.432] CoTaskMemFree (pv=0xffa70) [0158.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4d [0158.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4d [0158.432] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.432] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.432] CoTaskMemFree (pv=0xffa70) [0158.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4d [0158.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4d [0158.433] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.433] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.433] CoTaskMemFree (pv=0xffa70) [0158.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4d [0158.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4d [0158.433] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.433] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.433] CoTaskMemFree (pv=0xffa70) [0158.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4d [0158.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4d [0158.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.434] CoTaskMemFree (pv=0xffa70) [0158.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4d [0158.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4d [0158.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.435] CoTaskMemFree (pv=0xffa70) [0158.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", lpFilePart=0x0) returned 0x4d [0158.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", lpFilePart=0x0) returned 0x4d [0158.435] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.435] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.435] CoTaskMemFree (pv=0xffa70) [0158.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", lpFilePart=0x0) returned 0x4d [0158.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", lpFilePart=0x0) returned 0x4d [0158.436] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.436] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.436] CoTaskMemFree (pv=0xffa70) [0158.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", lpFilePart=0x0) returned 0x4d [0158.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", lpFilePart=0x0) returned 0x4d [0158.436] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.436] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.436] CoTaskMemFree (pv=0xffa70) [0158.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x50 [0158.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x50 [0158.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.437] CoTaskMemFree (pv=0xffa70) [0158.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x50 [0158.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x50 [0158.437] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.437] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.437] CoTaskMemFree (pv=0xffa70) [0158.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x51 [0158.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x51 [0158.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.438] CoTaskMemFree (pv=0xffa70) [0158.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", lpFilePart=0x0) returned 0x4d [0158.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", lpFilePart=0x0) returned 0x4d [0158.438] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.438] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.438] CoTaskMemFree (pv=0xffa70) [0158.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", lpFilePart=0x0) returned 0x4d [0158.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", lpFilePart=0x0) returned 0x4d [0158.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.439] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.439] CoTaskMemFree (pv=0xffa70) [0158.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4d [0158.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4d [0158.439] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.440] CoTaskMemFree (pv=0xffa70) [0158.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4d [0158.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4d [0158.440] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.440] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.440] CoTaskMemFree (pv=0xffa70) [0158.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4e [0158.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4e [0158.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.441] CoTaskMemFree (pv=0xffa70) [0158.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4d [0158.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4d [0158.441] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.441] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.441] CoTaskMemFree (pv=0xffa70) [0158.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4d [0158.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4d [0158.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.442] CoTaskMemFree (pv=0xffa70) [0158.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", lpFilePart=0x0) returned 0x4d [0158.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", lpFilePart=0x0) returned 0x4d [0158.442] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.442] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.442] CoTaskMemFree (pv=0xffa70) [0158.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4d [0158.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4d [0158.443] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.443] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.443] CoTaskMemFree (pv=0xffa70) [0158.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4d [0158.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4d [0158.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.444] CoTaskMemFree (pv=0xffa70) [0158.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4d [0158.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4d [0158.444] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.444] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.444] CoTaskMemFree (pv=0xffa70) [0158.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", lpFilePart=0x0) returned 0x4d [0158.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", lpFilePart=0x0) returned 0x4d [0158.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.445] CoTaskMemFree (pv=0xffa70) [0158.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", lpFilePart=0x0) returned 0x4d [0158.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", lpFilePart=0x0) returned 0x4d [0158.445] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.445] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.446] CoTaskMemFree (pv=0xffa70) [0158.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4d [0158.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4d [0158.446] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.446] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.446] CoTaskMemFree (pv=0xffa70) [0158.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4d [0158.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4d [0158.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.447] CoTaskMemFree (pv=0xffa70) [0158.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4d [0158.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4d [0158.447] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.447] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.447] CoTaskMemFree (pv=0xffa70) [0158.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4d [0158.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4d [0158.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.448] CoTaskMemFree (pv=0xffa70) [0158.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4d [0158.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4d [0158.448] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.448] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.449] CoTaskMemFree (pv=0xffa70) [0158.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4d [0158.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4d [0158.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.449] CoTaskMemFree (pv=0xffa70) [0158.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4d [0158.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4d [0158.449] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.449] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.449] CoTaskMemFree (pv=0xffa70) [0158.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4d [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4d [0158.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.450] CoTaskMemFree (pv=0xffa70) [0158.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4d [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4d [0158.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.450] CoTaskMemFree (pv=0xffa70) [0158.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4d [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4d [0158.450] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.450] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.450] CoTaskMemFree (pv=0xffa70) [0158.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4d [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4d [0158.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.451] CoTaskMemFree (pv=0xffa70) [0158.451] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x50 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x50 [0158.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.451] CoTaskMemFree (pv=0xffa70) [0158.451] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x50 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x50 [0158.451] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.451] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.452] CoTaskMemFree (pv=0xffa70) [0158.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4d [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4d [0158.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.452] CoTaskMemFree (pv=0xffa70) [0158.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4d [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4d [0158.452] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.452] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.452] CoTaskMemFree (pv=0xffa70) [0158.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4d [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4d [0158.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.453] CoTaskMemFree (pv=0xffa70) [0158.453] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4d [0158.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4d [0158.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.453] CoTaskMemFree (pv=0xffa70) [0158.453] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4d [0158.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4d [0158.453] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.453] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.453] CoTaskMemFree (pv=0xffa70) [0158.453] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4d [0158.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4d [0158.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.454] CoTaskMemFree (pv=0xffa70) [0158.454] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4d [0158.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4d [0158.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.454] CoTaskMemFree (pv=0xffa70) [0158.454] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4d [0158.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4d [0158.454] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.454] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.454] CoTaskMemFree (pv=0xffa70) [0158.454] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", lpFilePart=0x0) returned 0x4d [0158.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", lpFilePart=0x0) returned 0x4d [0158.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.455] CoTaskMemFree (pv=0xffa70) [0158.455] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", lpFilePart=0x0) returned 0x4d [0158.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", lpFilePart=0x0) returned 0x4d [0158.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.455] CoTaskMemFree (pv=0xffa70) [0158.455] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4d [0158.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4d [0158.455] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.455] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.456] CoTaskMemFree (pv=0xffa70) [0158.456] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4d [0158.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4d [0158.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.456] CoTaskMemFree (pv=0xffa70) [0158.456] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4d [0158.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4d [0158.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.456] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.456] CoTaskMemFree (pv=0xffa70) [0158.456] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x50 [0158.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x50 [0158.456] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.457] CoTaskMemFree (pv=0xffa70) [0158.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x50 [0158.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x50 [0158.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0158.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0158.457] CoTaskMemFree (pv=0xffa70) [0158.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0158.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x60 [0158.458] SetErrorMode (uMode=0x1) returned 0x0 [0158.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0158.459] SetErrorMode (uMode=0x0) returned 0x1 [0158.459] GetFileType (hFile=0x18c) returned 0x1 [0158.461] WriteFile (in: hFile=0x18c, lpBuffer=0x27449b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27449b0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0158.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", lpFilePart=0x0) returned 0x4d [0158.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", lpFilePart=0x0) returned 0x4d [0158.463] SetErrorMode (uMode=0x1) returned 0x0 [0158.464] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0158.465] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0158.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a7fb0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0158.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3b6a16, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0158.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0158.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 0 [0158.466] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0158.467] SetErrorMode (uMode=0x0) returned 0x1 [0158.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", lpFilePart=0x0) returned 0x4d [0158.467] SetErrorMode (uMode=0x1) returned 0x0 [0158.467] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0158.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0158.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a7fb0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0158.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3b6a16, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0158.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0158.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 0 [0158.468] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0158.469] SetErrorMode (uMode=0x0) returned 0x1 [0158.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0158.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0158.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0158.470] SetErrorMode (uMode=0x1) returned 0x0 [0158.470] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.471] SetErrorMode (uMode=0x0) returned 0x1 [0158.472] GetFileType (hFile=0x18c) returned 0x1 [0158.472] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x442a [0158.472] ReadFile (in: hFile=0x18c, lpBuffer=0x274ce10, nNumberOfBytesToRead=0x442a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x274ce10*, lpNumberOfBytesRead=0x27e648*=0x442a, lpOverlapped=0x0) returned 1 [0158.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0158.476] SetErrorMode (uMode=0x1) returned 0x0 [0158.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a)) returned 1 [0158.476] SetErrorMode (uMode=0x0) returned 0x1 [0158.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0158.589] SetErrorMode (uMode=0x1) returned 0x0 [0158.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.591] SetErrorMode (uMode=0x0) returned 0x1 [0158.591] GetFileType (hFile=0x18c) returned 0x1 [0158.591] WriteFile (in: hFile=0x18c, lpBuffer=0x27c7738*, nNumberOfBytesToWrite=0x4530, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x27c7738*, lpNumberOfBytesWritten=0x27e6c8*=0x4530, lpOverlapped=0x0) returned 1 [0158.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0158.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\SGbd0yoZ5TW4Ck4p_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\SGbd0yoZ5TW4Ck4p_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x75 [0158.592] SetErrorMode (uMode=0x1) returned 0x0 [0158.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2f191390, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4530)) returned 1 [0158.592] SetErrorMode (uMode=0x0) returned 0x1 [0158.592] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\SGbd0yoZ5TW4Ck4p_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\sgbd0yoz5tw4ck4p_encrypted_by.whiterose")) returned 1 [0158.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0158.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0158.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0158.693] SetErrorMode (uMode=0x1) returned 0x0 [0158.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.694] SetErrorMode (uMode=0x0) returned 0x1 [0158.694] GetFileType (hFile=0x18c) returned 0x1 [0158.694] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5741 [0158.694] ReadFile (in: hFile=0x18c, lpBuffer=0x27cd6f8, nNumberOfBytesToRead=0x5741, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27cd6f8*, lpNumberOfBytesRead=0x27e648*=0x5741, lpOverlapped=0x0) returned 1 [0158.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0158.699] SetErrorMode (uMode=0x1) returned 0x0 [0158.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a7fb0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5741)) returned 1 [0158.699] SetErrorMode (uMode=0x0) returned 0x1 [0158.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0158.794] SetErrorMode (uMode=0x1) returned 0x0 [0158.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.796] SetErrorMode (uMode=0x0) returned 0x1 [0158.796] GetFileType (hFile=0x18c) returned 0x1 [0158.796] WriteFile (in: hFile=0x18c, lpBuffer=0x2857d80*, nNumberOfBytesToWrite=0x5850, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2857d80*, lpNumberOfBytesWritten=0x27e6c8*=0x5850, lpOverlapped=0x0) returned 1 [0158.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0158.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\8kLaN4en2akKt6Qy_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\8kLaN4en2akKt6Qy_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x75 [0158.797] SetErrorMode (uMode=0x1) returned 0x0 [0158.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2f380570, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1 [0158.798] SetErrorMode (uMode=0x0) returned 0x1 [0158.798] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\8kLaN4en2akKt6Qy_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\8klan4en2akkt6qy_encrypted_by.whiterose")) returned 1 [0158.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.911] SetErrorMode (uMode=0x1) returned 0x0 [0158.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.913] SetErrorMode (uMode=0x0) returned 0x1 [0158.913] GetFileType (hFile=0x18c) returned 0x1 [0158.913] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1ef3 [0158.913] ReadFile (in: hFile=0x18c, lpBuffer=0x285f080, nNumberOfBytesToRead=0x1ef3, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x285f080*, lpNumberOfBytesRead=0x27e648*=0x1ef3, lpOverlapped=0x0) returned 1 [0158.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.915] SetErrorMode (uMode=0x1) returned 0x0 [0158.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3b6a16, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3)) returned 1 [0158.915] SetErrorMode (uMode=0x0) returned 0x1 [0158.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.978] SetErrorMode (uMode=0x1) returned 0x0 [0158.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.980] SetErrorMode (uMode=0x0) returned 0x1 [0158.980] GetFileType (hFile=0x18c) returned 0x1 [0158.980] WriteFile (in: hFile=0x18c, lpBuffer=0x28d3278*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x28d3278*, lpNumberOfBytesWritten=0x27e6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\EBXh1AKJ1F*rkaeI_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\EBXh1AKJ1F*rkaeI_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x75 [0158.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0158.984] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 1 [0158.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0158.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0158.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0158.987] SetErrorMode (uMode=0x1) returned 0x0 [0158.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0158.987] GetFileType (hFile=0x18c) returned 0x1 [0158.987] SetErrorMode (uMode=0x0) returned 0x1 [0158.987] GetFileType (hFile=0x18c) returned 0x1 [0158.987] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1ea2 [0158.987] ReadFile (in: hFile=0x18c, lpBuffer=0x28d71b0, nNumberOfBytesToRead=0x1ea2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d71b0*, lpNumberOfBytesRead=0x27e648*=0x1ea2, lpOverlapped=0x0) returned 1 [0158.989] CloseHandle (hObject=0x18c) returned 1 [0158.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0158.989] SetErrorMode (uMode=0x1) returned 0x0 [0158.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2)) returned 1 [0158.989] SetErrorMode (uMode=0x0) returned 0x1 [0159.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0159.089] SetErrorMode (uMode=0x1) returned 0x0 [0159.089] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.090] GetFileType (hFile=0x18c) returned 0x1 [0159.090] SetErrorMode (uMode=0x0) returned 0x1 [0159.090] GetFileType (hFile=0x18c) returned 0x1 [0159.090] WriteFile (in: hFile=0x18c, lpBuffer=0x2744118*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x27e6c8, lpOverlapped=0x0 | out: lpBuffer=0x2744118*, lpNumberOfBytesWritten=0x27e6c8*=0x1fb0, lpOverlapped=0x0) returned 1 [0159.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0159.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\outWcKHREqCkYKQq_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\outWcKHREqCkYKQq_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x75 [0159.091] SetErrorMode (uMode=0x1) returned 0x0 [0159.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2f653f90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1fb0)) returned 1 [0159.091] SetErrorMode (uMode=0x0) returned 0x1 [0159.091] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\outWcKHREqCkYKQq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\outwckhreqckykqq_encrypted_by.whiterose")) returned 1 [0159.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x67 [0159.192] SetErrorMode (uMode=0x1) returned 0x0 [0159.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.193] GetFileType (hFile=0x18c) returned 0x1 [0159.193] SetErrorMode (uMode=0x0) returned 0x1 [0159.193] GetFileType (hFile=0x18c) returned 0x1 [0159.195] WriteFile (in: hFile=0x18c, lpBuffer=0x27589a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27589a0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0159.196] WriteFile (in: hFile=0x18c, lpBuffer=0x27589a0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27589a0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0159.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", lpFilePart=0x0) returned 0x4a [0159.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", lpFilePart=0x0) returned 0x4a [0159.197] SetErrorMode (uMode=0x1) returned 0x0 [0159.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0159.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0159.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0159.198] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.198] SetErrorMode (uMode=0x0) returned 0x1 [0159.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", lpFilePart=0x0) returned 0x4a [0159.199] SetErrorMode (uMode=0x1) returned 0x0 [0159.199] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0159.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0159.199] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0159.200] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.200] SetErrorMode (uMode=0x0) returned 0x1 [0159.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", lpFilePart=0x0) returned 0x58 [0159.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", lpFilePart=0x0) returned 0x58 [0159.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.200] CoTaskMemFree (pv=0xffa70) [0159.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5d [0159.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5d [0159.201] SetErrorMode (uMode=0x1) returned 0x0 [0159.201] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.201] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.202] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0159.202] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0159.202] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.202] SetErrorMode (uMode=0x0) returned 0x1 [0159.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5d [0159.202] SetErrorMode (uMode=0x1) returned 0x0 [0159.202] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0159.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0159.203] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.203] SetErrorMode (uMode=0x0) returned 0x1 [0159.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x65 [0159.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x65 [0159.204] SetErrorMode (uMode=0x1) returned 0x0 [0159.204] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.205] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0159.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0159.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0159.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0159.206] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0159.206] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.207] SetErrorMode (uMode=0x0) returned 0x1 [0159.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x65 [0159.207] SetErrorMode (uMode=0x1) returned 0x0 [0159.207] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0159.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0159.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0159.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0159.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0159.209] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.210] SetErrorMode (uMode=0x0) returned 0x1 [0159.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll", lpFilePart=0x0) returned 0x75 [0159.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll", lpFilePart=0x0) returned 0x75 [0159.210] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.210] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.210] CoTaskMemFree (pv=0xffa70) [0159.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig", lpFilePart=0x0) returned 0x79 [0159.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig", lpFilePart=0x0) returned 0x79 [0159.211] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.211] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.211] CoTaskMemFree (pv=0xffa70) [0159.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll", lpFilePart=0x0) returned 0x7c [0159.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll", lpFilePart=0x0) returned 0x7c [0159.212] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.212] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.212] CoTaskMemFree (pv=0xffa70) [0159.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig", lpFilePart=0x0) returned 0x80 [0159.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig", lpFilePart=0x0) returned 0x80 [0159.212] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.212] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.212] CoTaskMemFree (pv=0xffa70) [0159.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7f [0159.213] SetErrorMode (uMode=0x1) returned 0x0 [0159.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.214] GetFileType (hFile=0x18c) returned 0x1 [0159.214] SetErrorMode (uMode=0x0) returned 0x1 [0159.214] GetFileType (hFile=0x18c) returned 0x1 [0159.216] WriteFile (in: hFile=0x18c, lpBuffer=0x277b758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x277b758*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0159.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0159.217] SetErrorMode (uMode=0x1) returned 0x0 [0159.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.218] GetFileType (hFile=0x18c) returned 0x1 [0159.218] SetErrorMode (uMode=0x0) returned 0x1 [0159.218] GetFileType (hFile=0x18c) returned 0x1 [0159.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x64 [0159.219] SetErrorMode (uMode=0x1) returned 0x0 [0159.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.221] GetFileType (hFile=0x18c) returned 0x1 [0159.221] SetErrorMode (uMode=0x0) returned 0x1 [0159.222] GetFileType (hFile=0x18c) returned 0x1 [0159.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0159.223] SetErrorMode (uMode=0x1) returned 0x0 [0159.223] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.224] GetFileType (hFile=0x18c) returned 0x1 [0159.224] SetErrorMode (uMode=0x0) returned 0x1 [0159.224] GetFileType (hFile=0x18c) returned 0x1 [0159.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0159.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0159.225] SetErrorMode (uMode=0x1) returned 0x0 [0159.225] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1 [0159.226] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 0 [0159.226] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.226] SetErrorMode (uMode=0x0) returned 0x1 [0159.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0159.227] SetErrorMode (uMode=0x1) returned 0x0 [0159.227] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1 [0159.227] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 0 [0159.227] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.228] SetErrorMode (uMode=0x0) returned 0x1 [0159.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma", lpFilePart=0x0) returned 0x50 [0159.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma", lpFilePart=0x0) returned 0x50 [0159.228] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.228] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.228] CoTaskMemFree (pv=0xffa70) [0159.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0159.229] SetErrorMode (uMode=0x1) returned 0x0 [0159.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.229] GetFileType (hFile=0x18c) returned 0x1 [0159.229] SetErrorMode (uMode=0x0) returned 0x1 [0159.229] GetFileType (hFile=0x18c) returned 0x1 [0159.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0159.231] SetErrorMode (uMode=0x1) returned 0x0 [0159.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.231] GetFileType (hFile=0x18c) returned 0x1 [0159.231] SetErrorMode (uMode=0x0) returned 0x1 [0159.231] GetFileType (hFile=0x18c) returned 0x1 [0159.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3e [0159.232] SetErrorMode (uMode=0x1) returned 0x0 [0159.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\chrome\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.233] GetFileType (hFile=0x18c) returned 0x1 [0159.233] SetErrorMode (uMode=0x0) returned 0x1 [0159.233] GetFileType (hFile=0x18c) returned 0x1 [0159.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0159.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0159.234] SetErrorMode (uMode=0x1) returned 0x0 [0159.235] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.236] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.236] SetErrorMode (uMode=0x0) returned 0x1 [0159.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0159.236] SetErrorMode (uMode=0x1) returned 0x0 [0159.236] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.237] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.237] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.237] SetErrorMode (uMode=0x0) returned 0x1 [0159.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x44 [0159.237] SetErrorMode (uMode=0x1) returned 0x0 [0159.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\crashreports\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.238] GetFileType (hFile=0x18c) returned 0x1 [0159.238] SetErrorMode (uMode=0x0) returned 0x1 [0159.238] GetFileType (hFile=0x18c) returned 0x1 [0159.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x37 [0159.243] SetErrorMode (uMode=0x1) returned 0x0 [0159.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\google\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.245] GetFileType (hFile=0x18c) returned 0x1 [0159.245] SetErrorMode (uMode=0x0) returned 0x1 [0159.245] GetFileType (hFile=0x18c) returned 0x1 [0159.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer", lpFilePart=0x0) returned 0x28 [0159.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer", lpFilePart=0x0) returned 0x28 [0159.246] SetErrorMode (uMode=0x1) returned 0x0 [0159.246] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0159.247] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0159.248] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0159.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0159.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0159.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0159.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0159.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0159.249] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0159.249] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.249] SetErrorMode (uMode=0x0) returned 0x1 [0159.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer", lpFilePart=0x0) returned 0x28 [0159.250] SetErrorMode (uMode=0x1) returned 0x0 [0159.250] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0159.250] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0159.251] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0159.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0159.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0159.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0159.253] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.253] SetErrorMode (uMode=0x0) returned 0x1 [0159.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe", lpFilePart=0x0) returned 0x36 [0159.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.254] CoTaskMemFree (pv=0xffa70) [0159.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.254] CoTaskMemFree (pv=0xffa70) [0159.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.254] CoTaskMemFree (pv=0xffa70) [0159.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.254] CoTaskMemFree (pv=0xffa70) [0159.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.255] CoTaskMemFree (pv=0xffa70) [0159.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.255] CoTaskMemFree (pv=0xffa70) [0159.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.255] CoTaskMemFree (pv=0xffa70) [0159.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.255] CoTaskMemFree (pv=0xffa70) [0159.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.256] CoTaskMemFree (pv=0xffa70) [0159.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.256] CoTaskMemFree (pv=0xffa70) [0159.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.256] CoTaskMemFree (pv=0xffa70) [0159.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.256] CoTaskMemFree (pv=0xffa70) [0159.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.257] CoTaskMemFree (pv=0xffa70) [0159.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.257] CoTaskMemFree (pv=0xffa70) [0159.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.257] CoTaskMemFree (pv=0xffa70) [0159.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.257] CoTaskMemFree (pv=0xffa70) [0159.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.258] CoTaskMemFree (pv=0xffa70) [0159.258] SetErrorMode (uMode=0x1) returned 0x0 [0159.258] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0159.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0159.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0159.260] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.260] SetErrorMode (uMode=0x0) returned 0x1 [0159.260] SetErrorMode (uMode=0x1) returned 0x0 [0159.260] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.260] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.260] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0159.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0159.262] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0159.262] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.262] SetErrorMode (uMode=0x0) returned 0x1 [0159.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.262] CoTaskMemFree (pv=0xffa70) [0159.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.262] CoTaskMemFree (pv=0xffa70) [0159.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.263] CoTaskMemFree (pv=0xffa70) [0159.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.263] CoTaskMemFree (pv=0xffa70) [0159.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.263] CoTaskMemFree (pv=0xffa70) [0159.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.263] CoTaskMemFree (pv=0xffa70) [0159.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.264] CoTaskMemFree (pv=0xffa70) [0159.264] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.264] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.264] CoTaskMemFree (pv=0xffa70) [0159.264] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.264] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.264] CoTaskMemFree (pv=0xffa70) [0159.264] SetErrorMode (uMode=0x1) returned 0x0 [0159.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.265] GetFileType (hFile=0x18c) returned 0x1 [0159.265] SetErrorMode (uMode=0x0) returned 0x1 [0159.265] GetFileType (hFile=0x18c) returned 0x1 [0159.266] SetErrorMode (uMode=0x1) returned 0x0 [0159.266] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.267] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.267] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0159.267] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0159.267] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.267] SetErrorMode (uMode=0x0) returned 0x1 [0159.268] SetErrorMode (uMode=0x1) returned 0x0 [0159.268] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0159.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0159.268] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.269] SetErrorMode (uMode=0x0) returned 0x1 [0159.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.269] CoTaskMemFree (pv=0xffa70) [0159.269] SetErrorMode (uMode=0x1) returned 0x0 [0159.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.270] GetFileType (hFile=0x18c) returned 0x1 [0159.270] SetErrorMode (uMode=0x0) returned 0x1 [0159.270] GetFileType (hFile=0x18c) returned 0x1 [0159.271] SetErrorMode (uMode=0x1) returned 0x0 [0159.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\internet explorer\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0159.271] GetFileType (hFile=0x18c) returned 0x1 [0159.271] SetErrorMode (uMode=0x0) returned 0x1 [0159.271] GetFileType (hFile=0x18c) returned 0x1 [0159.287] SetErrorMode (uMode=0x1) returned 0x0 [0159.287] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0159.288] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 0 [0159.288] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.292] SetErrorMode (uMode=0x0) returned 0x1 [0159.292] SetErrorMode (uMode=0x1) returned 0x0 [0159.292] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0159.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 0 [0159.293] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.293] SetErrorMode (uMode=0x0) returned 0x1 [0159.293] SetErrorMode (uMode=0x1) returned 0x0 [0159.293] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0159.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0159.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0159.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0159.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0159.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0159.295] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.295] SetErrorMode (uMode=0x0) returned 0x1 [0159.295] SetErrorMode (uMode=0x1) returned 0x0 [0159.295] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0159.296] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0159.297] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.297] SetErrorMode (uMode=0x0) returned 0x1 [0159.297] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.297] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.297] CoTaskMemFree (pv=0xffa70) [0159.297] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.297] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.297] CoTaskMemFree (pv=0xffa70) [0159.297] SetErrorMode (uMode=0x1) returned 0x0 [0159.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.298] SetErrorMode (uMode=0x0) returned 0x1 [0159.298] GetFileType (hFile=0x18c) returned 0x1 [0159.298] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x2f [0159.298] ReadFile (in: hFile=0x18c, lpBuffer=0x289a7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x289a7d0*, lpNumberOfBytesRead=0x27e828*=0x2f, lpOverlapped=0x0) returned 1 [0159.299] SetErrorMode (uMode=0x1) returned 0x0 [0159.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1 [0159.299] SetErrorMode (uMode=0x0) returned 0x1 [0159.358] SetErrorMode (uMode=0x1) returned 0x0 [0159.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.359] SetErrorMode (uMode=0x0) returned 0x1 [0159.359] GetFileType (hFile=0x18c) returned 0x1 [0159.360] SetErrorMode (uMode=0x1) returned 0x0 [0159.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f8db6f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0159.360] SetErrorMode (uMode=0x0) returned 0x1 [0159.360] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\o4yw6ounfttVr6eg_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\o4yw6ounfttvr6eg_encrypted_by.whiterose")) returned 1 [0159.457] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.457] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.457] CoTaskMemFree (pv=0xffa70) [0159.457] SetErrorMode (uMode=0x1) returned 0x0 [0159.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.458] SetErrorMode (uMode=0x0) returned 0x1 [0159.458] GetFileType (hFile=0x18c) returned 0x1 [0159.458] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x1e8b1 [0159.458] ReadFile (in: hFile=0x18c, lpBuffer=0x260be170, nNumberOfBytesToRead=0x1e8b1, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x260be170*, lpNumberOfBytesRead=0x27e828*=0x1e8b1, lpOverlapped=0x0) returned 1 [0159.464] SetErrorMode (uMode=0x1) returned 0x0 [0159.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1)) returned 1 [0159.464] SetErrorMode (uMode=0x0) returned 0x1 [0159.534] SetErrorMode (uMode=0x1) returned 0x0 [0159.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.536] SetErrorMode (uMode=0x0) returned 0x1 [0159.536] GetFileType (hFile=0x18c) returned 0x1 [0159.536] WriteFile (in: hFile=0x18c, lpBuffer=0x26175b90*, nNumberOfBytesToWrite=0x1e9c0, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x26175b90*, lpNumberOfBytesWritten=0x27e8a8*=0x1e9c0, lpOverlapped=0x0) returned 1 [0159.539] SetErrorMode (uMode=0x1) returned 0x0 [0159.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2faa4770, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1e9c0)) returned 1 [0159.539] SetErrorMode (uMode=0x0) returned 0x1 [0159.539] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\fvNeJIyFxUbcGyCG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\fvnejiyfxubcgycg_encrypted_by.whiterose")) returned 1 [0159.644] SetErrorMode (uMode=0x1) returned 0x0 [0159.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.646] SetErrorMode (uMode=0x0) returned 0x1 [0159.646] GetFileType (hFile=0x18c) returned 0x1 [0159.646] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x2b350 [0159.646] ReadFile (in: hFile=0x18c, lpBuffer=0x26194580, nNumberOfBytesToRead=0x2b350, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x26194580*, lpNumberOfBytesRead=0x27e828*=0x2b350, lpOverlapped=0x0) returned 1 [0159.650] SetErrorMode (uMode=0x1) returned 0x0 [0159.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350)) returned 1 [0159.651] SetErrorMode (uMode=0x0) returned 0x1 [0159.718] SetErrorMode (uMode=0x1) returned 0x0 [0159.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.720] SetErrorMode (uMode=0x0) returned 0x1 [0159.720] GetFileType (hFile=0x18c) returned 0x1 [0159.720] WriteFile (in: hFile=0x18c, lpBuffer=0x26297f50*, nNumberOfBytesToWrite=0x2b460, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x26297f50*, lpNumberOfBytesWritten=0x27e8a8*=0x2b460, lpOverlapped=0x0) returned 1 [0159.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3c [0159.733] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt")) returned 1 [0159.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.760] SetErrorMode (uMode=0x1) returned 0x0 [0159.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.760] GetFileType (hFile=0x18c) returned 0x1 [0159.760] SetErrorMode (uMode=0x0) returned 0x1 [0159.761] GetFileType (hFile=0x18c) returned 0x1 [0159.761] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x3d7 [0159.761] ReadFile (in: hFile=0x18c, lpBuffer=0x278d430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x278d430*, lpNumberOfBytesRead=0x27e828*=0x3d7, lpOverlapped=0x0) returned 1 [0159.762] CloseHandle (hObject=0x18c) returned 1 [0159.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.763] SetErrorMode (uMode=0x1) returned 0x0 [0159.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1 [0159.763] SetErrorMode (uMode=0x0) returned 0x1 [0159.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.890] SetErrorMode (uMode=0x1) returned 0x0 [0159.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.892] GetFileType (hFile=0x18c) returned 0x1 [0159.892] SetErrorMode (uMode=0x0) returned 0x1 [0159.892] GetFileType (hFile=0x18c) returned 0x1 [0159.892] WriteFile (in: hFile=0x18c, lpBuffer=0x27ebd60*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x27ebd60*, lpNumberOfBytesWritten=0x27e7c8*=0x4e0, lpOverlapped=0x0) returned 1 [0159.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\TmGpmnaa*4giayOx_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\TmGpmnaa*4giayOx_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x48 [0159.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0159.899] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html")) returned 1 [0159.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin", lpFilePart=0x0) returned 0x24 [0159.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin", lpFilePart=0x0) returned 0x24 [0159.901] SetErrorMode (uMode=0x1) returned 0x0 [0159.901] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.902] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0159.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0159.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0159.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0159.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0159.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0159.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0159.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0159.907] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0159.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0159.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0159.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0159.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0159.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0159.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0159.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0159.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0159.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0159.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0159.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0159.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0159.921] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0159.921] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0159.921] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0159.921] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0159.921] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0159.921] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.922] SetErrorMode (uMode=0x0) returned 0x1 [0159.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin", lpFilePart=0x0) returned 0x24 [0159.922] SetErrorMode (uMode=0x1) returned 0x0 [0159.922] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0159.923] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0159.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0159.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0159.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0159.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0159.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0159.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0159.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0159.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0159.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0159.928] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0159.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0159.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0159.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0159.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0159.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0159.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0159.934] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.934] SetErrorMode (uMode=0x0) returned 0x1 [0159.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll", lpFilePart=0x0) returned 0x2c [0159.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll", lpFilePart=0x0) returned 0x2c [0159.935] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.935] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.935] CoTaskMemFree (pv=0xffa70) [0159.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll", lpFilePart=0x0) returned 0x31 [0159.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll", lpFilePart=0x0) returned 0x31 [0159.936] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.936] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.936] CoTaskMemFree (pv=0xffa70) [0159.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll", lpFilePart=0x0) returned 0x2d [0159.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll", lpFilePart=0x0) returned 0x2d [0159.936] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.936] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.936] CoTaskMemFree (pv=0xffa70) [0159.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll", lpFilePart=0x0) returned 0x33 [0159.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll", lpFilePart=0x0) returned 0x33 [0159.937] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.937] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.937] CoTaskMemFree (pv=0xffa70) [0159.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll", lpFilePart=0x0) returned 0x2f [0159.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll", lpFilePart=0x0) returned 0x2f [0159.938] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.938] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.938] CoTaskMemFree (pv=0xffa70) [0159.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll", lpFilePart=0x0) returned 0x31 [0159.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll", lpFilePart=0x0) returned 0x31 [0159.938] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.938] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.939] CoTaskMemFree (pv=0xffa70) [0159.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll", lpFilePart=0x0) returned 0x32 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll", lpFilePart=0x0) returned 0x32 [0159.939] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.939] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.939] CoTaskMemFree (pv=0xffa70) [0159.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll", lpFilePart=0x0) returned 0x2d [0159.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll", lpFilePart=0x0) returned 0x2d [0159.940] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.940] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.940] CoTaskMemFree (pv=0xffa70) [0159.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll", lpFilePart=0x0) returned 0x34 [0159.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll", lpFilePart=0x0) returned 0x34 [0159.941] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.941] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.941] CoTaskMemFree (pv=0xffa70) [0159.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll", lpFilePart=0x0) returned 0x32 [0159.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll", lpFilePart=0x0) returned 0x32 [0159.941] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.941] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.941] CoTaskMemFree (pv=0xffa70) [0159.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll", lpFilePart=0x0) returned 0x2e [0159.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll", lpFilePart=0x0) returned 0x2e [0159.942] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.942] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.942] CoTaskMemFree (pv=0xffa70) [0159.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll", lpFilePart=0x0) returned 0x32 [0159.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll", lpFilePart=0x0) returned 0x32 [0159.942] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.942] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.942] CoTaskMemFree (pv=0xffa70) [0159.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll", lpFilePart=0x0) returned 0x37 [0159.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll", lpFilePart=0x0) returned 0x37 [0159.942] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.942] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.942] CoTaskMemFree (pv=0xffa70) [0159.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll", lpFilePart=0x0) returned 0x2e [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll", lpFilePart=0x0) returned 0x2e [0159.943] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.943] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.943] CoTaskMemFree (pv=0xffa70) [0159.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll", lpFilePart=0x0) returned 0x32 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll", lpFilePart=0x0) returned 0x32 [0159.943] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.943] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.943] CoTaskMemFree (pv=0xffa70) [0159.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll", lpFilePart=0x0) returned 0x33 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll", lpFilePart=0x0) returned 0x33 [0159.943] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.943] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.944] CoTaskMemFree (pv=0xffa70) [0159.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll", lpFilePart=0x0) returned 0x2f [0159.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll", lpFilePart=0x0) returned 0x2f [0159.944] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.944] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.944] CoTaskMemFree (pv=0xffa70) [0159.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll", lpFilePart=0x0) returned 0x31 [0159.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll", lpFilePart=0x0) returned 0x31 [0159.944] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.944] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.944] CoTaskMemFree (pv=0xffa70) [0159.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll", lpFilePart=0x0) returned 0x30 [0159.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll", lpFilePart=0x0) returned 0x30 [0159.945] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.945] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.945] CoTaskMemFree (pv=0xffa70) [0159.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x32 [0159.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x32 [0159.945] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.945] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.945] CoTaskMemFree (pv=0xffa70) [0159.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x31 [0159.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x31 [0159.945] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.945] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.945] CoTaskMemFree (pv=0xffa70) [0159.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll", lpFilePart=0x0) returned 0x2d [0159.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll", lpFilePart=0x0) returned 0x2d [0159.946] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.946] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.946] CoTaskMemFree (pv=0xffa70) [0159.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe", lpFilePart=0x0) returned 0x2d [0159.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe", lpFilePart=0x0) returned 0x2d [0159.946] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.946] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.946] CoTaskMemFree (pv=0xffa70) [0159.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll", lpFilePart=0x0) returned 0x3c [0159.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll", lpFilePart=0x0) returned 0x3c [0159.946] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.946] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.946] CoTaskMemFree (pv=0xffa70) [0159.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x30 [0159.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x30 [0159.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.947] CoTaskMemFree (pv=0xffa70) [0159.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll", lpFilePart=0x0) returned 0x34 [0159.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll", lpFilePart=0x0) returned 0x34 [0159.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.947] CoTaskMemFree (pv=0xffa70) [0159.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll", lpFilePart=0x0) returned 0x33 [0159.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll", lpFilePart=0x0) returned 0x33 [0159.947] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.947] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.947] CoTaskMemFree (pv=0xffa70) [0159.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe", lpFilePart=0x0) returned 0x2e [0159.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe", lpFilePart=0x0) returned 0x2e [0159.948] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.948] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.948] CoTaskMemFree (pv=0xffa70) [0159.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe", lpFilePart=0x0) returned 0x2f [0159.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe", lpFilePart=0x0) returned 0x2f [0159.948] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.948] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.948] CoTaskMemFree (pv=0xffa70) [0159.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll", lpFilePart=0x0) returned 0x36 [0159.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll", lpFilePart=0x0) returned 0x36 [0159.948] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.948] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.948] CoTaskMemFree (pv=0xffa70) [0159.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll", lpFilePart=0x0) returned 0x2d [0159.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll", lpFilePart=0x0) returned 0x2d [0159.949] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.949] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.949] CoTaskMemFree (pv=0xffa70) [0159.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll", lpFilePart=0x0) returned 0x3c [0159.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll", lpFilePart=0x0) returned 0x3c [0159.949] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.949] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.949] CoTaskMemFree (pv=0xffa70) [0159.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll", lpFilePart=0x0) returned 0x31 [0159.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll", lpFilePart=0x0) returned 0x31 [0159.949] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.949] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.950] CoTaskMemFree (pv=0xffa70) [0159.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll", lpFilePart=0x0) returned 0x2d [0159.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll", lpFilePart=0x0) returned 0x2d [0159.950] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.950] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.950] CoTaskMemFree (pv=0xffa70) [0159.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll", lpFilePart=0x0) returned 0x2c [0159.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll", lpFilePart=0x0) returned 0x2c [0159.950] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.950] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.950] CoTaskMemFree (pv=0xffa70) [0159.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll", lpFilePart=0x0) returned 0x31 [0159.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll", lpFilePart=0x0) returned 0x31 [0159.951] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.951] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.951] CoTaskMemFree (pv=0xffa70) [0159.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll", lpFilePart=0x0) returned 0x32 [0159.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll", lpFilePart=0x0) returned 0x32 [0159.951] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.951] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.951] CoTaskMemFree (pv=0xffa70) [0159.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll", lpFilePart=0x0) returned 0x2c [0159.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll", lpFilePart=0x0) returned 0x2c [0159.951] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.951] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.951] CoTaskMemFree (pv=0xffa70) [0159.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll", lpFilePart=0x0) returned 0x30 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll", lpFilePart=0x0) returned 0x30 [0159.952] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.952] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.952] CoTaskMemFree (pv=0xffa70) [0159.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x34 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x34 [0159.952] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.952] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.952] CoTaskMemFree (pv=0xffa70) [0159.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll", lpFilePart=0x0) returned 0x32 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll", lpFilePart=0x0) returned 0x32 [0159.952] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.952] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.952] CoTaskMemFree (pv=0xffa70) [0159.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll", lpFilePart=0x0) returned 0x2f [0159.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll", lpFilePart=0x0) returned 0x2f [0159.953] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.953] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.953] CoTaskMemFree (pv=0xffa70) [0159.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll", lpFilePart=0x0) returned 0x2d [0159.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll", lpFilePart=0x0) returned 0x2d [0159.953] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.953] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.953] CoTaskMemFree (pv=0xffa70) [0159.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll", lpFilePart=0x0) returned 0x2f [0159.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll", lpFilePart=0x0) returned 0x2f [0159.953] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.953] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.953] CoTaskMemFree (pv=0xffa70) [0159.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll", lpFilePart=0x0) returned 0x2f [0159.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll", lpFilePart=0x0) returned 0x2f [0159.954] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.954] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.954] CoTaskMemFree (pv=0xffa70) [0159.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll", lpFilePart=0x0) returned 0x30 [0159.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll", lpFilePart=0x0) returned 0x30 [0159.954] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.954] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.954] CoTaskMemFree (pv=0xffa70) [0159.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll", lpFilePart=0x0) returned 0x2f [0159.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll", lpFilePart=0x0) returned 0x2f [0159.954] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.954] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.954] CoTaskMemFree (pv=0xffa70) [0159.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll", lpFilePart=0x0) returned 0x31 [0159.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll", lpFilePart=0x0) returned 0x31 [0159.955] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.955] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.955] CoTaskMemFree (pv=0xffa70) [0159.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe", lpFilePart=0x0) returned 0x2c [0159.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe", lpFilePart=0x0) returned 0x2c [0159.955] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.955] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.955] CoTaskMemFree (pv=0xffa70) [0159.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll", lpFilePart=0x0) returned 0x2d [0159.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll", lpFilePart=0x0) returned 0x2d [0159.955] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.955] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.956] CoTaskMemFree (pv=0xffa70) [0159.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll", lpFilePart=0x0) returned 0x2f [0159.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll", lpFilePart=0x0) returned 0x2f [0159.956] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.956] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.956] CoTaskMemFree (pv=0xffa70) [0159.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll", lpFilePart=0x0) returned 0x31 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll", lpFilePart=0x0) returned 0x31 [0159.956] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.956] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.956] CoTaskMemFree (pv=0xffa70) [0159.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll", lpFilePart=0x0) returned 0x2d [0159.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll", lpFilePart=0x0) returned 0x2d [0159.957] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.957] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.957] CoTaskMemFree (pv=0xffa70) [0159.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe", lpFilePart=0x0) returned 0x30 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe", lpFilePart=0x0) returned 0x30 [0159.957] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.957] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.957] CoTaskMemFree (pv=0xffa70) [0159.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe", lpFilePart=0x0) returned 0x2e [0159.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe", lpFilePart=0x0) returned 0x2e [0159.957] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.957] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.957] CoTaskMemFree (pv=0xffa70) [0159.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe", lpFilePart=0x0) returned 0x2e [0159.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe", lpFilePart=0x0) returned 0x2e [0159.958] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.958] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.958] CoTaskMemFree (pv=0xffa70) [0159.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2d [0159.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2d [0159.958] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.958] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.958] CoTaskMemFree (pv=0xffa70) [0159.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll", lpFilePart=0x0) returned 0x30 [0159.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll", lpFilePart=0x0) returned 0x30 [0159.958] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.958] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.958] CoTaskMemFree (pv=0xffa70) [0159.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll", lpFilePart=0x0) returned 0x30 [0159.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll", lpFilePart=0x0) returned 0x30 [0159.959] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.959] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.959] CoTaskMemFree (pv=0xffa70) [0159.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll", lpFilePart=0x0) returned 0x33 [0159.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll", lpFilePart=0x0) returned 0x33 [0159.959] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.959] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.959] CoTaskMemFree (pv=0xffa70) [0159.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll", lpFilePart=0x0) returned 0x33 [0159.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll", lpFilePart=0x0) returned 0x33 [0159.959] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.959] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.959] CoTaskMemFree (pv=0xffa70) [0159.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll", lpFilePart=0x0) returned 0x31 [0159.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll", lpFilePart=0x0) returned 0x31 [0159.960] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.960] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.960] CoTaskMemFree (pv=0xffa70) [0159.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll", lpFilePart=0x0) returned 0x2c [0159.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll", lpFilePart=0x0) returned 0x2c [0159.960] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.960] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.960] CoTaskMemFree (pv=0xffa70) [0159.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll", lpFilePart=0x0) returned 0x2c [0159.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll", lpFilePart=0x0) returned 0x2c [0159.960] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.960] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.960] CoTaskMemFree (pv=0xffa70) [0159.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll", lpFilePart=0x0) returned 0x34 [0159.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll", lpFilePart=0x0) returned 0x34 [0159.961] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.961] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.961] CoTaskMemFree (pv=0xffa70) [0159.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll", lpFilePart=0x0) returned 0x31 [0159.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll", lpFilePart=0x0) returned 0x31 [0159.961] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.961] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.961] CoTaskMemFree (pv=0xffa70) [0159.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll", lpFilePart=0x0) returned 0x2c [0159.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll", lpFilePart=0x0) returned 0x2c [0159.961] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.961] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.962] CoTaskMemFree (pv=0xffa70) [0159.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2d [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2d [0159.962] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.962] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.962] CoTaskMemFree (pv=0xffa70) [0159.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe", lpFilePart=0x0) returned 0x30 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe", lpFilePart=0x0) returned 0x30 [0159.962] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.962] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.962] CoTaskMemFree (pv=0xffa70) [0159.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe", lpFilePart=0x0) returned 0x33 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe", lpFilePart=0x0) returned 0x33 [0159.962] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.963] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.963] CoTaskMemFree (pv=0xffa70) [0159.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll", lpFilePart=0x0) returned 0x32 [0159.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll", lpFilePart=0x0) returned 0x32 [0159.963] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.963] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.963] CoTaskMemFree (pv=0xffa70) [0159.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2d [0159.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2d [0159.963] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.963] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.963] CoTaskMemFree (pv=0xffa70) [0159.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x34 [0159.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x34 [0159.964] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.964] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.964] CoTaskMemFree (pv=0xffa70) [0159.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe", lpFilePart=0x0) returned 0x33 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe", lpFilePart=0x0) returned 0x33 [0159.964] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.964] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.964] CoTaskMemFree (pv=0xffa70) [0159.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll", lpFilePart=0x0) returned 0x35 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll", lpFilePart=0x0) returned 0x35 [0159.964] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.964] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.964] CoTaskMemFree (pv=0xffa70) [0159.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll", lpFilePart=0x0) returned 0x2c [0159.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll", lpFilePart=0x0) returned 0x2c [0159.965] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.965] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.965] CoTaskMemFree (pv=0xffa70) [0159.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x31 [0159.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x31 [0159.965] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.965] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.965] CoTaskMemFree (pv=0xffa70) [0159.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll", lpFilePart=0x0) returned 0x2e [0159.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll", lpFilePart=0x0) returned 0x2e [0159.965] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.965] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.965] CoTaskMemFree (pv=0xffa70) [0159.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll", lpFilePart=0x0) returned 0x32 [0159.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll", lpFilePart=0x0) returned 0x32 [0159.966] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.966] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.966] CoTaskMemFree (pv=0xffa70) [0159.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0159.966] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.966] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.966] CoTaskMemFree (pv=0xffa70) [0159.966] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.966] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.966] CoTaskMemFree (pv=0xffa70) [0159.966] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.966] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.966] CoTaskMemFree (pv=0xffa70) [0159.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.967] CoTaskMemFree (pv=0xffa70) [0159.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.967] CoTaskMemFree (pv=0xffa70) [0159.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.967] CoTaskMemFree (pv=0xffa70) [0159.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.967] CoTaskMemFree (pv=0xffa70) [0159.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.967] CoTaskMemFree (pv=0xffa70) [0159.967] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.967] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.968] CoTaskMemFree (pv=0xffa70) [0159.968] SetErrorMode (uMode=0x1) returned 0x0 [0159.968] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.969] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.969] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0159.969] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0159.969] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0159.969] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0159.969] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.969] SetErrorMode (uMode=0x0) returned 0x1 [0159.970] SetErrorMode (uMode=0x1) returned 0x0 [0159.970] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0159.970] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.970] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0159.970] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0159.970] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0159.970] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0159.970] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0159.970] SetErrorMode (uMode=0x0) returned 0x1 [0159.971] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.971] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.971] CoTaskMemFree (pv=0xffa70) [0159.971] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0159.971] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0159.971] CoTaskMemFree (pv=0xffa70) [0159.971] SetErrorMode (uMode=0x1) returned 0x0 [0159.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0159.972] SetErrorMode (uMode=0x0) returned 0x1 [0159.972] GetFileType (hFile=0x18c) returned 0x1 [0159.972] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5a7 [0159.972] ReadFile (in: hFile=0x18c, lpBuffer=0x2835508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2835508*, lpNumberOfBytesRead=0x27e6e8*=0x5a7, lpOverlapped=0x0) returned 1 [0159.975] SetErrorMode (uMode=0x1) returned 0x0 [0159.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1 [0159.975] SetErrorMode (uMode=0x0) returned 0x1 [0160.065] SetErrorMode (uMode=0x1) returned 0x0 [0160.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.067] SetErrorMode (uMode=0x0) returned 0x1 [0160.067] GetFileType (hFile=0x18c) returned 0x1 [0160.067] WriteFile (in: hFile=0x18c, lpBuffer=0x289a1d0*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x289a1d0*, lpNumberOfBytesWritten=0x27e688*=0x6b0, lpOverlapped=0x0) returned 1 [0160.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", lpFilePart=0x0) returned 0x36 [0160.074] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt")) returned 1 [0160.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0160.077] SetErrorMode (uMode=0x1) returned 0x0 [0160.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.078] GetFileType (hFile=0x18c) returned 0x1 [0160.078] SetErrorMode (uMode=0x0) returned 0x1 [0160.078] GetFileType (hFile=0x18c) returned 0x1 [0160.080] WriteFile (in: hFile=0x18c, lpBuffer=0x28ad918*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28ad918*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0160.081] WriteFile (in: hFile=0x18c, lpBuffer=0x28ad918*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x28ad918*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0160.081] CloseHandle (hObject=0x18c) returned 1 [0160.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", lpFilePart=0x0) returned 0x2d [0160.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", lpFilePart=0x0) returned 0x2d [0160.082] SetErrorMode (uMode=0x1) returned 0x0 [0160.082] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0160.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0160.083] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0160.083] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.083] SetErrorMode (uMode=0x0) returned 0x1 [0160.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", lpFilePart=0x0) returned 0x2d [0160.084] SetErrorMode (uMode=0x1) returned 0x0 [0160.084] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.084] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.084] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0160.084] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0160.084] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0160.084] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.085] SetErrorMode (uMode=0x0) returned 0x1 [0160.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll", lpFilePart=0x0) returned 0x3d [0160.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll", lpFilePart=0x0) returned 0x3d [0160.085] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.085] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.085] CoTaskMemFree (pv=0xffa70) [0160.085] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll", lpFilePart=0x0) returned 0x3f [0160.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll", lpFilePart=0x0) returned 0x3f [0160.085] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.086] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.086] CoTaskMemFree (pv=0xffa70) [0160.086] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x47 [0160.086] SetErrorMode (uMode=0x1) returned 0x0 [0160.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.088] GetFileType (hFile=0x18c) returned 0x1 [0160.088] SetErrorMode (uMode=0x0) returned 0x1 [0160.088] GetFileType (hFile=0x18c) returned 0x1 [0160.090] WriteFile (in: hFile=0x18c, lpBuffer=0x28c7868*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28c7868*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0160.091] CloseHandle (hObject=0x18c) returned 1 [0160.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", lpFilePart=0x0) returned 0x2c [0160.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", lpFilePart=0x0) returned 0x2c [0160.092] SetErrorMode (uMode=0x1) returned 0x0 [0160.092] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0160.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0160.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0160.093] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.093] SetErrorMode (uMode=0x0) returned 0x1 [0160.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", lpFilePart=0x0) returned 0x2c [0160.094] SetErrorMode (uMode=0x1) returned 0x0 [0160.094] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0160.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0160.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0160.094] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.094] SetErrorMode (uMode=0x0) returned 0x1 [0160.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll", lpFilePart=0x0) returned 0x39 [0160.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll", lpFilePart=0x0) returned 0x39 [0160.095] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.095] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.095] CoTaskMemFree (pv=0xffa70) [0160.095] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll", lpFilePart=0x0) returned 0x36 [0160.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll", lpFilePart=0x0) returned 0x36 [0160.095] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.095] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.096] CoTaskMemFree (pv=0xffa70) [0160.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x46 [0160.096] SetErrorMode (uMode=0x1) returned 0x0 [0160.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.097] GetFileType (hFile=0x18c) returned 0x1 [0160.097] SetErrorMode (uMode=0x0) returned 0x1 [0160.097] GetFileType (hFile=0x18c) returned 0x1 [0160.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3e [0160.099] SetErrorMode (uMode=0x1) returned 0x0 [0160.099] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.099] GetFileType (hFile=0x18c) returned 0x1 [0160.099] SetErrorMode (uMode=0x0) returned 0x1 [0160.099] GetFileType (hFile=0x18c) returned 0x1 [0160.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib", lpFilePart=0x0) returned 0x24 [0160.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib", lpFilePart=0x0) returned 0x24 [0160.103] SetErrorMode (uMode=0x1) returned 0x0 [0160.103] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.105] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0160.111] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.112] SetErrorMode (uMode=0x0) returned 0x1 [0160.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib", lpFilePart=0x0) returned 0x24 [0160.112] SetErrorMode (uMode=0x1) returned 0x0 [0160.112] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0160.119] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0160.119] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.120] SetErrorMode (uMode=0x0) returned 0x1 [0160.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties", lpFilePart=0x0) returned 0x3d [0160.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties", lpFilePart=0x0) returned 0x3d [0160.120] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.120] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.120] CoTaskMemFree (pv=0xffa70) [0160.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar", lpFilePart=0x0) returned 0x2f [0160.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar", lpFilePart=0x0) returned 0x2f [0160.121] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.121] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.121] CoTaskMemFree (pv=0xffa70) [0160.121] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties", lpFilePart=0x0) returned 0x39 [0160.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties", lpFilePart=0x0) returned 0x39 [0160.121] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.121] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.121] CoTaskMemFree (pv=0xffa70) [0160.121] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar", lpFilePart=0x0) returned 0x31 [0160.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar", lpFilePart=0x0) returned 0x31 [0160.122] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.122] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.122] CoTaskMemFree (pv=0xffa70) [0160.122] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist", lpFilePart=0x0) returned 0x2e [0160.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist", lpFilePart=0x0) returned 0x2e [0160.122] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.122] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.123] CoTaskMemFree (pv=0xffa70) [0160.123] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties", lpFilePart=0x0) returned 0x3d [0160.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties", lpFilePart=0x0) returned 0x3d [0160.123] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.123] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.123] CoTaskMemFree (pv=0xffa70) [0160.123] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data", lpFilePart=0x0) returned 0x32 [0160.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data", lpFilePart=0x0) returned 0x32 [0160.124] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.124] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.124] CoTaskMemFree (pv=0xffa70) [0160.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar", lpFilePart=0x0) returned 0x2f [0160.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar", lpFilePart=0x0) returned 0x2f [0160.124] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.124] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.124] CoTaskMemFree (pv=0xffa70) [0160.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties", lpFilePart=0x0) returned 0x39 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties", lpFilePart=0x0) returned 0x39 [0160.125] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.125] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.125] CoTaskMemFree (pv=0xffa70) [0160.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc", lpFilePart=0x0) returned 0x33 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc", lpFilePart=0x0) returned 0x33 [0160.125] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.125] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.126] CoTaskMemFree (pv=0xffa70) [0160.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x3e [0160.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x3e [0160.126] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.126] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.126] CoTaskMemFree (pv=0xffa70) [0160.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties", lpFilePart=0x0) returned 0x36 [0160.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties", lpFilePart=0x0) returned 0x36 [0160.127] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.127] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.127] CoTaskMemFree (pv=0xffa70) [0160.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar", lpFilePart=0x0) returned 0x2f [0160.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar", lpFilePart=0x0) returned 0x2f [0160.127] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.127] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.127] CoTaskMemFree (pv=0xffa70) [0160.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar", lpFilePart=0x0) returned 0x2c [0160.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar", lpFilePart=0x0) returned 0x2c [0160.128] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.128] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.128] CoTaskMemFree (pv=0xffa70) [0160.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2c [0160.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2c [0160.128] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.128] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.128] CoTaskMemFree (pv=0xffa70) [0160.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar", lpFilePart=0x0) returned 0x2e [0160.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar", lpFilePart=0x0) returned 0x2e [0160.129] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.129] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.129] CoTaskMemFree (pv=0xffa70) [0160.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2d [0160.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2d [0160.129] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.129] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.129] CoTaskMemFree (pv=0xffa70) [0160.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0160.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0160.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0160.130] SetErrorMode (uMode=0x1) returned 0x0 [0160.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.132] GetFileType (hFile=0x18c) returned 0x1 [0160.132] SetErrorMode (uMode=0x0) returned 0x1 [0160.132] GetFileType (hFile=0x18c) returned 0x1 [0160.132] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1082 [0160.132] ReadFile (in: hFile=0x18c, lpBuffer=0x27154b0, nNumberOfBytesToRead=0x1082, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27154b0*, lpNumberOfBytesRead=0x27e788*=0x1082, lpOverlapped=0x0) returned 1 [0160.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0160.135] SetErrorMode (uMode=0x1) returned 0x0 [0160.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0160.135] SetErrorMode (uMode=0x0) returned 0x1 [0160.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0160.230] SetErrorMode (uMode=0x1) returned 0x0 [0160.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.232] GetFileType (hFile=0x18c) returned 0x1 [0160.232] SetErrorMode (uMode=0x0) returned 0x1 [0160.232] GetFileType (hFile=0x18c) returned 0x1 [0160.232] WriteFile (in: hFile=0x18c, lpBuffer=0x277a370*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x27e808, lpOverlapped=0x0 | out: lpBuffer=0x277a370*, lpNumberOfBytesWritten=0x27e808*=0x1190, lpOverlapped=0x0) returned 1 [0160.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0160.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\NoOsF7cixkx5YEiK_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\NoOsF7cixkx5YEiK_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x4c [0160.233] SetErrorMode (uMode=0x1) returned 0x0 [0160.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x301303f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1 [0160.233] SetErrorMode (uMode=0x0) returned 0x1 [0160.233] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\NoOsF7cixkx5YEiK_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\noosf7cixkx5yeik_encrypted_by.whiterose")) returned 1 [0160.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties", lpFilePart=0x0) returned 0x37 [0160.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties", lpFilePart=0x0) returned 0x37 [0160.332] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.332] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.332] CoTaskMemFree (pv=0xffa70) [0160.332] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar", lpFilePart=0x0) returned 0x39 [0160.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar", lpFilePart=0x0) returned 0x39 [0160.333] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.333] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.333] CoTaskMemFree (pv=0xffa70) [0160.333] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index", lpFilePart=0x0) returned 0x2f [0160.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index", lpFilePart=0x0) returned 0x2f [0160.333] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.333] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.333] CoTaskMemFree (pv=0xffa70) [0160.334] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties", lpFilePart=0x0) returned 0x33 [0160.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties", lpFilePart=0x0) returned 0x33 [0160.334] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.334] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.334] CoTaskMemFree (pv=0xffa70) [0160.334] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar", lpFilePart=0x0) returned 0x2f [0160.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar", lpFilePart=0x0) returned 0x2f [0160.335] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.335] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.335] CoTaskMemFree (pv=0xffa70) [0160.335] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja", lpFilePart=0x0) returned 0x39 [0160.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja", lpFilePart=0x0) returned 0x39 [0160.335] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.335] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.335] CoTaskMemFree (pv=0xffa70) [0160.335] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties", lpFilePart=0x0) returned 0x39 [0160.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties", lpFilePart=0x0) returned 0x39 [0160.335] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.335] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.336] CoTaskMemFree (pv=0xffa70) [0160.336] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar", lpFilePart=0x0) returned 0x32 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar", lpFilePart=0x0) returned 0x32 [0160.336] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.336] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.336] CoTaskMemFree (pv=0xffa70) [0160.336] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar", lpFilePart=0x0) returned 0x2b [0160.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar", lpFilePart=0x0) returned 0x2b [0160.336] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.336] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.336] CoTaskMemFree (pv=0xffa70) [0160.336] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties", lpFilePart=0x0) returned 0x35 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties", lpFilePart=0x0) returned 0x35 [0160.337] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.337] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.337] CoTaskMemFree (pv=0xffa70) [0160.337] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings", lpFilePart=0x0) returned 0x2f [0160.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings", lpFilePart=0x0) returned 0x2f [0160.337] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.337] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.337] CoTaskMemFree (pv=0xffa70) [0160.337] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", lpFilePart=0x0) returned 0x2b [0160.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", lpFilePart=0x0) returned 0x2b [0160.338] SetErrorMode (uMode=0x1) returned 0x0 [0160.338] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.338] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.339] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.339] SetErrorMode (uMode=0x0) returned 0x1 [0160.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", lpFilePart=0x0) returned 0x2b [0160.340] SetErrorMode (uMode=0x1) returned 0x0 [0160.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.340] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.340] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.340] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.340] SetErrorMode (uMode=0x0) returned 0x1 [0160.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0160.341] SetErrorMode (uMode=0x1) returned 0x0 [0160.341] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.342] SetErrorMode (uMode=0x0) returned 0x1 [0160.342] GetFileType (hFile=0x18c) returned 0x1 [0160.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", lpFilePart=0x0) returned 0x28 [0160.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", lpFilePart=0x0) returned 0x28 [0160.343] SetErrorMode (uMode=0x1) returned 0x0 [0160.343] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.346] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0160.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0160.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0160.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0160.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0160.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0160.347] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.347] SetErrorMode (uMode=0x0) returned 0x1 [0160.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", lpFilePart=0x0) returned 0x28 [0160.348] SetErrorMode (uMode=0x1) returned 0x0 [0160.348] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0160.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0160.348] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.349] SetErrorMode (uMode=0x0) returned 0x1 [0160.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x32 [0160.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x32 [0160.349] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.349] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.349] CoTaskMemFree (pv=0xffa70) [0160.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf", lpFilePart=0x0) returned 0x30 [0160.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf", lpFilePart=0x0) returned 0x30 [0160.349] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.349] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.349] CoTaskMemFree (pv=0xffa70) [0160.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x0) returned 0x36 [0160.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x0) returned 0x36 [0160.350] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.350] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.350] CoTaskMemFree (pv=0xffa70) [0160.350] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x30 [0160.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x30 [0160.350] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.350] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.350] CoTaskMemFree (pv=0xffa70) [0160.350] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf", lpFilePart=0x0) returned 0x30 [0160.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf", lpFilePart=0x0) returned 0x30 [0160.350] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.351] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.351] CoTaskMemFree (pv=0xffa70) [0160.351] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x42 [0160.351] SetErrorMode (uMode=0x1) returned 0x0 [0160.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.353] SetErrorMode (uMode=0x0) returned 0x1 [0160.353] GetFileType (hFile=0x18c) returned 0x1 [0160.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", lpFilePart=0x0) returned 0x2b [0160.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", lpFilePart=0x0) returned 0x2b [0160.354] SetErrorMode (uMode=0x1) returned 0x0 [0160.354] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0160.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0160.358] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0160.358] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.359] SetErrorMode (uMode=0x0) returned 0x1 [0160.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", lpFilePart=0x0) returned 0x2b [0160.359] SetErrorMode (uMode=0x1) returned 0x0 [0160.359] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.360] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.360] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0160.360] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0160.360] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0160.360] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0160.360] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0160.361] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0160.362] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.362] SetErrorMode (uMode=0x0) returned 0x1 [0160.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0160.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0160.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0160.363] SetErrorMode (uMode=0x1) returned 0x0 [0160.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.364] SetErrorMode (uMode=0x0) returned 0x1 [0160.364] GetFileType (hFile=0x18c) returned 0x1 [0160.364] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x48cc [0160.365] ReadFile (in: hFile=0x18c, lpBuffer=0x27bc1e0, nNumberOfBytesToRead=0x48cc, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27bc1e0*, lpNumberOfBytesRead=0x27e6e8*=0x48cc, lpOverlapped=0x0) returned 1 [0160.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0160.368] SetErrorMode (uMode=0x1) returned 0x0 [0160.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc)) returned 1 [0160.368] SetErrorMode (uMode=0x0) returned 0x1 [0160.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0160.431] SetErrorMode (uMode=0x1) returned 0x0 [0160.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.432] SetErrorMode (uMode=0x0) returned 0x1 [0160.432] GetFileType (hFile=0x18c) returned 0x1 [0160.432] WriteFile (in: hFile=0x18c, lpBuffer=0x283b398*, nNumberOfBytesToWrite=0x49d0, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x283b398*, lpNumberOfBytesWritten=0x27e768*=0x49d0, lpOverlapped=0x0) returned 1 [0160.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0160.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\44mpjA4HuCWKPn7S_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\44mpjA4HuCWKPn7S_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x53 [0160.434] SetErrorMode (uMode=0x1) returned 0x0 [0160.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x3031f5d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x49d0)) returned 1 [0160.434] SetErrorMode (uMode=0x0) returned 0x1 [0160.434] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\44mpjA4HuCWKPn7S_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\44mpja4hucwkpn7s_encrypted_by.whiterose")) returned 1 [0160.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties", lpFilePart=0x0) returned 0x3f [0160.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties", lpFilePart=0x0) returned 0x3f [0160.533] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.533] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.533] CoTaskMemFree (pv=0xffa70) [0160.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties", lpFilePart=0x0) returned 0x42 [0160.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties", lpFilePart=0x0) returned 0x42 [0160.534] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.534] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.534] CoTaskMemFree (pv=0xffa70) [0160.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties", lpFilePart=0x0) returned 0x42 [0160.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties", lpFilePart=0x0) returned 0x42 [0160.534] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.534] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.534] CoTaskMemFree (pv=0xffa70) [0160.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties", lpFilePart=0x0) returned 0x42 [0160.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties", lpFilePart=0x0) returned 0x42 [0160.535] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.535] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.535] CoTaskMemFree (pv=0xffa70) [0160.535] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties", lpFilePart=0x0) returned 0x42 [0160.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties", lpFilePart=0x0) returned 0x42 [0160.535] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.535] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.535] CoTaskMemFree (pv=0xffa70) [0160.535] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties", lpFilePart=0x0) returned 0x42 [0160.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties", lpFilePart=0x0) returned 0x42 [0160.535] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.535] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.535] CoTaskMemFree (pv=0xffa70) [0160.535] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties", lpFilePart=0x0) returned 0x42 [0160.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties", lpFilePart=0x0) returned 0x42 [0160.536] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.536] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.536] CoTaskMemFree (pv=0xffa70) [0160.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", lpFilePart=0x0) returned 0x45 [0160.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", lpFilePart=0x0) returned 0x45 [0160.536] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.536] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.536] CoTaskMemFree (pv=0xffa70) [0160.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties", lpFilePart=0x0) returned 0x42 [0160.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties", lpFilePart=0x0) returned 0x42 [0160.536] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.536] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.536] CoTaskMemFree (pv=0xffa70) [0160.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", lpFilePart=0x0) returned 0x45 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", lpFilePart=0x0) returned 0x45 [0160.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.537] CoTaskMemFree (pv=0xffa70) [0160.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", lpFilePart=0x0) returned 0x45 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", lpFilePart=0x0) returned 0x45 [0160.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.537] CoTaskMemFree (pv=0xffa70) [0160.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", lpFilePart=0x0) returned 0x45 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", lpFilePart=0x0) returned 0x45 [0160.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.538] CoTaskMemFree (pv=0xffa70) [0160.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x36 [0160.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x36 [0160.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x36 [0160.538] SetErrorMode (uMode=0x1) returned 0x0 [0160.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.542] SetErrorMode (uMode=0x0) returned 0x1 [0160.542] GetFileType (hFile=0x18c) returned 0x1 [0160.542] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3687 [0160.542] ReadFile (in: hFile=0x18c, lpBuffer=0x2849580, nNumberOfBytesToRead=0x3687, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2849580*, lpNumberOfBytesRead=0x27e6e8*=0x3687, lpOverlapped=0x0) returned 1 [0160.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x36 [0160.544] SetErrorMode (uMode=0x1) returned 0x0 [0160.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687)) returned 1 [0160.544] SetErrorMode (uMode=0x0) returned 0x1 [0160.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x36 [0160.610] SetErrorMode (uMode=0x1) returned 0x0 [0160.610] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.612] SetErrorMode (uMode=0x0) returned 0x1 [0160.612] GetFileType (hFile=0x18c) returned 0x1 [0160.612] WriteFile (in: hFile=0x18c, lpBuffer=0x28c5f18*, nNumberOfBytesToWrite=0x3790, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x28c5f18*, lpNumberOfBytesWritten=0x27e768*=0x3790, lpOverlapped=0x0) returned 1 [0160.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x36 [0160.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ndUUw3FtEFVfnlNF_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ndUUw3FtEFVfnlNF_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x53 [0160.613] SetErrorMode (uMode=0x1) returned 0x0 [0160.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x304e8650, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3790)) returned 1 [0160.613] SetErrorMode (uMode=0x0) returned 0x1 [0160.613] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ndUUw3FtEFVfnlNF_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\nduuw3ftefvfnlnf_encrypted_by.whiterose")) returned 1 [0160.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", lpFilePart=0x0) returned 0x2f [0160.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", lpFilePart=0x0) returned 0x2f [0160.721] SetErrorMode (uMode=0x1) returned 0x0 [0160.721] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1 [0160.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1 [0160.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 0 [0160.722] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.722] SetErrorMode (uMode=0x0) returned 0x1 [0160.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", lpFilePart=0x0) returned 0x2f [0160.723] SetErrorMode (uMode=0x1) returned 0x0 [0160.723] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1 [0160.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1 [0160.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 0 [0160.723] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.724] SetErrorMode (uMode=0x0) returned 0x1 [0160.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", lpFilePart=0x0) returned 0x38 [0160.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", lpFilePart=0x0) returned 0x38 [0160.724] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.724] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.724] CoTaskMemFree (pv=0xffa70) [0160.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", lpFilePart=0x0) returned 0x46 [0160.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", lpFilePart=0x0) returned 0x46 [0160.724] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.724] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.724] CoTaskMemFree (pv=0xffa70) [0160.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0160.725] SetErrorMode (uMode=0x1) returned 0x0 [0160.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.727] SetErrorMode (uMode=0x0) returned 0x1 [0160.727] GetFileType (hFile=0x18c) returned 0x1 [0160.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0160.729] SetErrorMode (uMode=0x1) returned 0x0 [0160.729] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.729] SetErrorMode (uMode=0x0) returned 0x1 [0160.729] GetFileType (hFile=0x18c) returned 0x1 [0160.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", lpFilePart=0x0) returned 0x28 [0160.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", lpFilePart=0x0) returned 0x28 [0160.731] SetErrorMode (uMode=0x1) returned 0x0 [0160.731] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0160.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0160.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0160.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0160.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0160.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0160.734] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.735] SetErrorMode (uMode=0x0) returned 0x1 [0160.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", lpFilePart=0x0) returned 0x28 [0160.735] SetErrorMode (uMode=0x1) returned 0x0 [0160.735] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0160.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0160.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0160.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0160.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0160.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0160.737] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.738] SetErrorMode (uMode=0x0) returned 0x1 [0160.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar", lpFilePart=0x0) returned 0x3d [0160.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar", lpFilePart=0x0) returned 0x3d [0160.738] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.738] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.738] CoTaskMemFree (pv=0xffa70) [0160.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x32 [0160.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x32 [0160.738] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.738] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.738] CoTaskMemFree (pv=0xffa70) [0160.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x34 [0160.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x34 [0160.739] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.739] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.739] CoTaskMemFree (pv=0xffa70) [0160.739] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x37 [0160.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x37 [0160.739] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.739] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.739] CoTaskMemFree (pv=0xffa70) [0160.739] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index", lpFilePart=0x0) returned 0x33 [0160.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index", lpFilePart=0x0) returned 0x33 [0160.740] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.740] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.740] CoTaskMemFree (pv=0xffa70) [0160.740] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x32 [0160.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x32 [0160.740] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.740] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.740] CoTaskMemFree (pv=0xffa70) [0160.740] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3c [0160.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3c [0160.740] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.740] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.740] CoTaskMemFree (pv=0xffa70) [0160.740] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x36 [0160.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x36 [0160.741] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.741] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.741] CoTaskMemFree (pv=0xffa70) [0160.741] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x36 [0160.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x36 [0160.741] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.741] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.741] CoTaskMemFree (pv=0xffa70) [0160.741] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x32 [0160.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x32 [0160.741] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.741] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.741] CoTaskMemFree (pv=0xffa70) [0160.742] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x42 [0160.742] SetErrorMode (uMode=0x1) returned 0x0 [0160.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.743] SetErrorMode (uMode=0x0) returned 0x1 [0160.743] GetFileType (hFile=0x18c) returned 0x1 [0160.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", lpFilePart=0x0) returned 0x2a [0160.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", lpFilePart=0x0) returned 0x2a [0160.744] SetErrorMode (uMode=0x1) returned 0x0 [0160.745] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0160.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0160.748] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.749] SetErrorMode (uMode=0x0) returned 0x1 [0160.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", lpFilePart=0x0) returned 0x2a [0160.769] SetErrorMode (uMode=0x1) returned 0x0 [0160.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0160.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0160.771] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.771] SetErrorMode (uMode=0x0) returned 0x1 [0160.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", lpFilePart=0x0) returned 0x43 [0160.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", lpFilePart=0x0) returned 0x43 [0160.772] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.772] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.772] CoTaskMemFree (pv=0xffa70) [0160.772] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", lpFilePart=0x0) returned 0x45 [0160.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", lpFilePart=0x0) returned 0x45 [0160.772] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.772] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.772] CoTaskMemFree (pv=0xffa70) [0160.772] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0160.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", lpFilePart=0x0) returned 0x41 [0160.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", lpFilePart=0x0) returned 0x41 [0160.773] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.773] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.773] CoTaskMemFree (pv=0xffa70) [0160.773] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.773] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.773] CoTaskMemFree (pv=0xffa70) [0160.773] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.773] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.773] CoTaskMemFree (pv=0xffa70) [0160.773] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.773] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.773] CoTaskMemFree (pv=0xffa70) [0160.773] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.773] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.773] CoTaskMemFree (pv=0xffa70) [0160.774] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.774] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.774] CoTaskMemFree (pv=0xffa70) [0160.774] SetErrorMode (uMode=0x1) returned 0x0 [0160.774] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.775] SetErrorMode (uMode=0x0) returned 0x1 [0160.775] GetFileType (hFile=0x18c) returned 0x1 [0160.776] SetErrorMode (uMode=0x1) returned 0x0 [0160.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0160.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0160.778] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.778] SetErrorMode (uMode=0x0) returned 0x1 [0160.779] SetErrorMode (uMode=0x1) returned 0x0 [0160.779] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0160.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0160.779] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.779] SetErrorMode (uMode=0x0) returned 0x1 [0160.780] SetErrorMode (uMode=0x1) returned 0x0 [0160.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.781] SetErrorMode (uMode=0x0) returned 0x1 [0160.781] GetFileType (hFile=0x18c) returned 0x1 [0160.781] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2ae [0160.781] ReadFile (in: hFile=0x18c, lpBuffer=0x2744038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2744038*, lpNumberOfBytesRead=0x27e6e8*=0x2ae, lpOverlapped=0x0) returned 1 [0160.782] SetErrorMode (uMode=0x1) returned 0x0 [0160.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0160.782] SetErrorMode (uMode=0x0) returned 0x1 [0160.841] SetErrorMode (uMode=0x1) returned 0x0 [0160.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.842] SetErrorMode (uMode=0x0) returned 0x1 [0160.842] GetFileType (hFile=0x18c) returned 0x1 [0160.843] SetErrorMode (uMode=0x1) returned 0x0 [0160.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x306fd990, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0160.844] SetErrorMode (uMode=0x0) returned 0x1 [0160.844] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\CTsRawvSBYjWf7AO_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\ctsrawvsbyjwf7ao_encrypted_by.whiterose")) returned 1 [0160.939] SetErrorMode (uMode=0x1) returned 0x0 [0160.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0160.940] SetErrorMode (uMode=0x0) returned 0x1 [0160.940] GetFileType (hFile=0x18c) returned 0x1 [0160.942] SetErrorMode (uMode=0x1) returned 0x0 [0160.942] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.942] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.942] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0160.942] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0160.942] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.943] SetErrorMode (uMode=0x0) returned 0x1 [0160.943] SetErrorMode (uMode=0x1) returned 0x0 [0160.943] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0160.943] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0160.943] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.944] SetErrorMode (uMode=0x0) returned 0x1 [0160.944] SetErrorMode (uMode=0x1) returned 0x0 [0160.944] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0160.946] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0160.947] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0160.947] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.947] SetErrorMode (uMode=0x0) returned 0x1 [0160.948] SetErrorMode (uMode=0x1) returned 0x0 [0160.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0160.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0160.949] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0160.950] SetErrorMode (uMode=0x0) returned 0x1 [0160.950] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0160.950] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0160.951] CoTaskMemFree (pv=0xffa70) [0160.951] SetErrorMode (uMode=0x1) returned 0x0 [0160.951] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0160.959] SetErrorMode (uMode=0x0) returned 0x1 [0160.959] GetFileType (hFile=0x18c) returned 0x1 [0160.959] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x99 [0160.959] ReadFile (in: hFile=0x18c, lpBuffer=0x27c0738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27c0738*, lpNumberOfBytesRead=0x27e648*=0x99, lpOverlapped=0x0) returned 1 [0160.961] SetErrorMode (uMode=0x1) returned 0x0 [0160.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0160.961] SetErrorMode (uMode=0x0) returned 0x1 [0161.025] SetErrorMode (uMode=0x1) returned 0x0 [0161.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.027] SetErrorMode (uMode=0x0) returned 0x1 [0161.027] GetFileType (hFile=0x18c) returned 0x1 [0161.039] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif")) returned 1 [0161.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.040] SetErrorMode (uMode=0x1) returned 0x0 [0161.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.041] GetFileType (hFile=0x18c) returned 0x1 [0161.041] SetErrorMode (uMode=0x0) returned 0x1 [0161.041] GetFileType (hFile=0x18c) returned 0x1 [0161.041] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xa5 [0161.041] ReadFile (in: hFile=0x18c, lpBuffer=0x2820cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2820cf8*, lpNumberOfBytesRead=0x27e648*=0xa5, lpOverlapped=0x0) returned 1 [0161.042] CloseHandle (hObject=0x18c) returned 1 [0161.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.043] SetErrorMode (uMode=0x1) returned 0x0 [0161.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0161.043] SetErrorMode (uMode=0x0) returned 0x1 [0161.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.168] SetErrorMode (uMode=0x1) returned 0x0 [0161.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.168] GetFileType (hFile=0x18c) returned 0x1 [0161.169] SetErrorMode (uMode=0x0) returned 0x1 [0161.169] GetFileType (hFile=0x18c) returned 0x1 [0161.169] WriteFile (in: hFile=0x18c, lpBuffer=0x287d790*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x287d790*, lpNumberOfBytesWritten=0x27e5e8*=0x1b0, lpOverlapped=0x0) returned 1 [0161.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\AWoCgYHjv4hC8tMW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\AWoCgYHjv4hC8tMW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0161.170] SetErrorMode (uMode=0x1) returned 0x0 [0161.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x30a1d670, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0161.170] SetErrorMode (uMode=0x0) returned 0x1 [0161.170] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\AWoCgYHjv4hC8tMW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\awocgyhjv4hc8tmw_encrypted_by.whiterose")) returned 1 [0161.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.267] SetErrorMode (uMode=0x1) returned 0x0 [0161.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.268] GetFileType (hFile=0x18c) returned 0x1 [0161.268] SetErrorMode (uMode=0x0) returned 0x1 [0161.268] GetFileType (hFile=0x18c) returned 0x1 [0161.268] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x99 [0161.268] ReadFile (in: hFile=0x18c, lpBuffer=0x287fe78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x287fe78*, lpNumberOfBytesRead=0x27e648*=0x99, lpOverlapped=0x0) returned 1 [0161.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.269] SetErrorMode (uMode=0x1) returned 0x0 [0161.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0161.270] SetErrorMode (uMode=0x0) returned 0x1 [0161.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.331] SetErrorMode (uMode=0x1) returned 0x0 [0161.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.332] GetFileType (hFile=0x18c) returned 0x1 [0161.332] SetErrorMode (uMode=0x0) returned 0x1 [0161.332] GetFileType (hFile=0x18c) returned 0x1 [0161.332] WriteFile (in: hFile=0x18c, lpBuffer=0x28dc6e0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x28dc6e0*, lpNumberOfBytesWritten=0x27e5e8*=0x1a0, lpOverlapped=0x0) returned 1 [0161.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\QBXzVsxIskGiYdz6_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\QBXzVsxIskGiYdz6_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0161.334] SetErrorMode (uMode=0x1) returned 0x0 [0161.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x30bc0590, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0161.334] SetErrorMode (uMode=0x0) returned 0x1 [0161.334] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\QBXzVsxIskGiYdz6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\qbxzvsxiskgiydz6_encrypted_by.whiterose")) returned 1 [0161.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.439] SetErrorMode (uMode=0x1) returned 0x0 [0161.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.440] GetFileType (hFile=0x18c) returned 0x1 [0161.440] SetErrorMode (uMode=0x0) returned 0x1 [0161.440] GetFileType (hFile=0x18c) returned 0x1 [0161.440] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xa8 [0161.440] ReadFile (in: hFile=0x18c, lpBuffer=0x28dedb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28dedb0*, lpNumberOfBytesRead=0x27e648*=0xa8, lpOverlapped=0x0) returned 1 [0161.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.441] SetErrorMode (uMode=0x1) returned 0x0 [0161.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0161.441] SetErrorMode (uMode=0x0) returned 0x1 [0161.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.504] SetErrorMode (uMode=0x1) returned 0x0 [0161.504] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.505] GetFileType (hFile=0x18c) returned 0x1 [0161.505] SetErrorMode (uMode=0x0) returned 0x1 [0161.505] GetFileType (hFile=0x18c) returned 0x1 [0161.505] WriteFile (in: hFile=0x18c, lpBuffer=0x273b698*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x273b698*, lpNumberOfBytesWritten=0x27e5e8*=0x1b0, lpOverlapped=0x0) returned 1 [0161.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\aMt59U*vCoEOwagS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\aMt59U*vCoEOwagS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0161.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27beb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.513] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 1 [0161.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.516] SetErrorMode (uMode=0x1) returned 0x0 [0161.516] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.519] GetFileType (hFile=0x18c) returned 0x1 [0161.519] SetErrorMode (uMode=0x0) returned 0x1 [0161.519] GetFileType (hFile=0x18c) returned 0x1 [0161.519] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x99 [0161.519] ReadFile (in: hFile=0x18c, lpBuffer=0x273e1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x273e1b8*, lpNumberOfBytesRead=0x27e648*=0x99, lpOverlapped=0x0) returned 1 [0161.520] CloseHandle (hObject=0x18c) returned 1 [0161.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.521] SetErrorMode (uMode=0x1) returned 0x0 [0161.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0161.521] SetErrorMode (uMode=0x0) returned 0x1 [0161.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.614] SetErrorMode (uMode=0x1) returned 0x0 [0161.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.616] GetFileType (hFile=0x18c) returned 0x1 [0161.616] SetErrorMode (uMode=0x0) returned 0x1 [0161.616] GetFileType (hFile=0x18c) returned 0x1 [0161.616] WriteFile (in: hFile=0x18c, lpBuffer=0x279aaa0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x279aaa0*, lpNumberOfBytesWritten=0x27e5e8*=0x1a0, lpOverlapped=0x0) returned 1 [0161.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\6fwwzXn8pC6ZQXmc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\6fwwzXn8pC6ZQXmc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0161.617] SetErrorMode (uMode=0x1) returned 0x0 [0161.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x30e6de50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0161.617] SetErrorMode (uMode=0x0) returned 0x1 [0161.617] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\6fwwzXn8pC6ZQXmc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\6fwwzxn8pc6zqxmc_encrypted_by.whiterose")) returned 1 [0161.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.719] SetErrorMode (uMode=0x1) returned 0x0 [0161.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.720] GetFileType (hFile=0x18c) returned 0x1 [0161.720] SetErrorMode (uMode=0x0) returned 0x1 [0161.720] GetFileType (hFile=0x18c) returned 0x1 [0161.720] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x93 [0161.720] ReadFile (in: hFile=0x18c, lpBuffer=0x279d160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x279d160*, lpNumberOfBytesRead=0x27e648*=0x93, lpOverlapped=0x0) returned 1 [0161.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.721] SetErrorMode (uMode=0x1) returned 0x0 [0161.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0161.721] SetErrorMode (uMode=0x0) returned 0x1 [0161.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.809] SetErrorMode (uMode=0x1) returned 0x0 [0161.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.810] GetFileType (hFile=0x18c) returned 0x1 [0161.810] SetErrorMode (uMode=0x0) returned 0x1 [0161.810] GetFileType (hFile=0x18c) returned 0x1 [0161.810] WriteFile (in: hFile=0x18c, lpBuffer=0x27f99d0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x27f99d0*, lpNumberOfBytesWritten=0x27e5e8*=0x1a0, lpOverlapped=0x0) returned 1 [0161.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4b [0161.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\YdT4Zt5tn2GbHnYl_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\YdT4Zt5tn2GbHnYl_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0161.811] SetErrorMode (uMode=0x1) returned 0x0 [0161.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x31036ed0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0161.811] SetErrorMode (uMode=0x0) returned 0x1 [0161.811] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\YdT4Zt5tn2GbHnYl_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\ydt4zt5tn2gbhnyl_encrypted_by.whiterose")) returned 1 [0161.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.923] SetErrorMode (uMode=0x1) returned 0x0 [0161.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.929] GetFileType (hFile=0x18c) returned 0x1 [0161.929] SetErrorMode (uMode=0x0) returned 0x1 [0161.929] GetFileType (hFile=0x18c) returned 0x1 [0161.929] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x99 [0161.929] ReadFile (in: hFile=0x18c, lpBuffer=0x27fc0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27fc0b8*, lpNumberOfBytesRead=0x27e648*=0x99, lpOverlapped=0x0) returned 1 [0161.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.931] SetErrorMode (uMode=0x1) returned 0x0 [0161.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0161.932] SetErrorMode (uMode=0x0) returned 0x1 [0161.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.993] SetErrorMode (uMode=0x1) returned 0x0 [0161.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0161.995] GetFileType (hFile=0x18c) returned 0x1 [0161.995] SetErrorMode (uMode=0x0) returned 0x1 [0161.995] GetFileType (hFile=0x18c) returned 0x1 [0161.995] WriteFile (in: hFile=0x18c, lpBuffer=0x2858990*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x27e5e8, lpOverlapped=0x0 | out: lpBuffer=0x2858990*, lpNumberOfBytesWritten=0x27e5e8*=0x1a0, lpOverlapped=0x0) returned 1 [0161.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0161.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\3MNnDS2juSeFfZ59_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\3MNnDS2juSeFfZ59_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5b [0161.997] SetErrorMode (uMode=0x1) returned 0x0 [0161.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e5f0 | out: lpFileInformation=0x27e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x311fff50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0161.997] SetErrorMode (uMode=0x0) returned 0x1 [0161.997] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\3MNnDS2juSeFfZ59_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\3mnnds2juseffz59_encrypted_by.whiterose")) returned 1 [0162.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4d [0162.109] SetErrorMode (uMode=0x1) returned 0x0 [0162.109] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.110] GetFileType (hFile=0x18c) returned 0x1 [0162.110] SetErrorMode (uMode=0x0) returned 0x1 [0162.110] GetFileType (hFile=0x18c) returned 0x1 [0162.112] WriteFile (in: hFile=0x18c, lpBuffer=0x286bd78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x286bd78*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0162.114] WriteFile (in: hFile=0x18c, lpBuffer=0x286bd78*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x286bd78*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0162.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0162.114] SetErrorMode (uMode=0x1) returned 0x0 [0162.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.115] GetFileType (hFile=0x18c) returned 0x1 [0162.115] SetErrorMode (uMode=0x0) returned 0x1 [0162.115] GetFileType (hFile=0x18c) returned 0x1 [0162.117] WriteFile (in: hFile=0x18c, lpBuffer=0x2881e48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2881e48*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0162.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", lpFilePart=0x0) returned 0x28 [0162.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", lpFilePart=0x0) returned 0x28 [0162.119] SetErrorMode (uMode=0x1) returned 0x0 [0162.119] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0162.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0162.121] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0162.121] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.121] SetErrorMode (uMode=0x0) returned 0x1 [0162.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", lpFilePart=0x0) returned 0x28 [0162.121] SetErrorMode (uMode=0x1) returned 0x0 [0162.122] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0162.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0162.122] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0162.122] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.123] SetErrorMode (uMode=0x0) returned 0x1 [0162.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc", lpFilePart=0x0) returned 0x34 [0162.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc", lpFilePart=0x0) returned 0x34 [0162.123] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.123] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.123] CoTaskMemFree (pv=0xffa70) [0162.123] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc", lpFilePart=0x0) returned 0x34 [0162.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc", lpFilePart=0x0) returned 0x34 [0162.124] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.124] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.124] CoTaskMemFree (pv=0xffa70) [0162.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x42 [0162.125] SetErrorMode (uMode=0x1) returned 0x0 [0162.125] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.125] GetFileType (hFile=0x18c) returned 0x1 [0162.125] SetErrorMode (uMode=0x0) returned 0x1 [0162.125] GetFileType (hFile=0x18c) returned 0x1 [0162.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", lpFilePart=0x0) returned 0x2f [0162.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", lpFilePart=0x0) returned 0x2f [0162.127] SetErrorMode (uMode=0x1) returned 0x0 [0162.127] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.129] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0162.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0162.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0162.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0162.130] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0162.130] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.131] SetErrorMode (uMode=0x0) returned 0x1 [0162.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", lpFilePart=0x0) returned 0x2f [0162.132] SetErrorMode (uMode=0x1) returned 0x0 [0162.132] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0162.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0162.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0162.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0162.133] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0162.133] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.134] SetErrorMode (uMode=0x0) returned 0x1 [0162.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access", lpFilePart=0x0) returned 0x40 [0162.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access", lpFilePart=0x0) returned 0x40 [0162.135] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.135] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.135] CoTaskMemFree (pv=0xffa70) [0162.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template", lpFilePart=0x0) returned 0x4b [0162.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template", lpFilePart=0x0) returned 0x4b [0162.135] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.135] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.135] CoTaskMemFree (pv=0xffa70) [0162.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties", lpFilePart=0x0) returned 0x45 [0162.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties", lpFilePart=0x0) returned 0x45 [0162.136] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.136] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.136] CoTaskMemFree (pv=0xffa70) [0162.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template", lpFilePart=0x0) returned 0x41 [0162.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template", lpFilePart=0x0) returned 0x41 [0162.137] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.137] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.137] CoTaskMemFree (pv=0xffa70) [0162.137] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0162.137] SetErrorMode (uMode=0x1) returned 0x0 [0162.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.138] GetFileType (hFile=0x18c) returned 0x1 [0162.138] SetErrorMode (uMode=0x0) returned 0x1 [0162.138] GetFileType (hFile=0x18c) returned 0x1 [0162.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", lpFilePart=0x0) returned 0x2d [0162.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", lpFilePart=0x0) returned 0x2d [0162.140] SetErrorMode (uMode=0x1) returned 0x0 [0162.140] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0162.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0162.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0162.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0162.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="JAVAFX~1.POL")) returned 1 [0162.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0162.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0162.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0162.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0162.144] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0162.144] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.145] SetErrorMode (uMode=0x0) returned 0x1 [0162.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", lpFilePart=0x0) returned 0x2d [0162.145] SetErrorMode (uMode=0x1) returned 0x0 [0162.145] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.146] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="JAVAFX~1.POL")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0162.147] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0162.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0162.148] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0162.148] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.149] SetErrorMode (uMode=0x0) returned 0x1 [0162.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist", lpFilePart=0x0) returned 0x37 [0162.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist", lpFilePart=0x0) returned 0x37 [0162.149] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.149] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.149] CoTaskMemFree (pv=0xffa70) [0162.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x35 [0162.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x35 [0162.150] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.150] CoTaskMemFree (pv=0xffa70) [0162.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy", lpFilePart=0x0) returned 0x39 [0162.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy", lpFilePart=0x0) returned 0x39 [0162.150] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.150] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.150] CoTaskMemFree (pv=0xffa70) [0162.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security", lpFilePart=0x0) returned 0x3b [0162.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security", lpFilePart=0x0) returned 0x3b [0162.151] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.151] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.151] CoTaskMemFree (pv=0xffa70) [0162.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy", lpFilePart=0x0) returned 0x3b [0162.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy", lpFilePart=0x0) returned 0x3b [0162.152] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.152] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.152] CoTaskMemFree (pv=0xffa70) [0162.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy", lpFilePart=0x0) returned 0x3b [0162.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy", lpFilePart=0x0) returned 0x3b [0162.152] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.152] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.152] CoTaskMemFree (pv=0xffa70) [0162.152] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar", lpFilePart=0x0) returned 0x3e [0162.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar", lpFilePart=0x0) returned 0x3e [0162.153] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.153] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.153] CoTaskMemFree (pv=0xffa70) [0162.153] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\trusted.libraries", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\trusted.libraries", lpFilePart=0x0) returned 0x3f [0162.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\trusted.libraries", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\trusted.libraries", lpFilePart=0x0) returned 0x3f [0162.153] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.153] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.154] CoTaskMemFree (pv=0xffa70) [0162.154] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar", lpFilePart=0x0) returned 0x42 [0162.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar", lpFilePart=0x0) returned 0x42 [0162.154] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.154] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.154] CoTaskMemFree (pv=0xffa70) [0162.154] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x47 [0162.155] SetErrorMode (uMode=0x1) returned 0x0 [0162.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.156] GetFileType (hFile=0x18c) returned 0x1 [0162.156] SetErrorMode (uMode=0x0) returned 0x1 [0162.156] GetFileType (hFile=0x18c) returned 0x1 [0162.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", lpFilePart=0x0) returned 0x27 [0162.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", lpFilePart=0x0) returned 0x27 [0162.157] SetErrorMode (uMode=0x1) returned 0x0 [0162.157] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0162.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0162.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="ANTARC~1")) returned 1 [0162.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="AUSTRA~1")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0162.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0162.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0162.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0162.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0162.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0162.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0162.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 1 [0162.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 0 [0162.163] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.164] SetErrorMode (uMode=0x0) returned 0x1 [0162.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", lpFilePart=0x0) returned 0x27 [0162.164] SetErrorMode (uMode=0x1) returned 0x0 [0162.165] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.165] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="ANTARC~1")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="AUSTRA~1")) returned 1 [0162.166] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0162.167] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0162.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0162.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0162.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0162.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 1 [0162.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 0 [0162.169] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.170] SetErrorMode (uMode=0x0) returned 0x1 [0162.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET", lpFilePart=0x0) returned 0x2b [0162.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET", lpFilePart=0x0) returned 0x2b [0162.171] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.171] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.171] CoTaskMemFree (pv=0xffa70) [0162.171] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT", lpFilePart=0x0) returned 0x2f [0162.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT", lpFilePart=0x0) returned 0x2f [0162.172] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.172] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.172] CoTaskMemFree (pv=0xffa70) [0162.172] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET", lpFilePart=0x0) returned 0x2b [0162.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET", lpFilePart=0x0) returned 0x2b [0162.172] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.172] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.172] CoTaskMemFree (pv=0xffa70) [0162.172] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST", lpFilePart=0x0) returned 0x2b [0162.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST", lpFilePart=0x0) returned 0x2b [0162.173] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.173] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.173] CoTaskMemFree (pv=0xffa70) [0162.173] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT", lpFilePart=0x0) returned 0x2f [0162.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT", lpFilePart=0x0) returned 0x2f [0162.173] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.173] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.174] CoTaskMemFree (pv=0xffa70) [0162.174] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT", lpFilePart=0x0) returned 0x2b [0162.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT", lpFilePart=0x0) returned 0x2b [0162.174] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.174] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.174] CoTaskMemFree (pv=0xffa70) [0162.174] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST", lpFilePart=0x0) returned 0x2b [0162.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST", lpFilePart=0x0) returned 0x2b [0162.175] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.175] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.175] CoTaskMemFree (pv=0xffa70) [0162.175] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET", lpFilePart=0x0) returned 0x2b [0162.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET", lpFilePart=0x0) returned 0x2b [0162.175] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.175] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.175] CoTaskMemFree (pv=0xffa70) [0162.175] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST", lpFilePart=0x0) returned 0x2b [0162.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST", lpFilePart=0x0) returned 0x2b [0162.176] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.176] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.176] CoTaskMemFree (pv=0xffa70) [0162.176] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT", lpFilePart=0x0) returned 0x2f [0162.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT", lpFilePart=0x0) returned 0x2f [0162.176] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.176] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.177] CoTaskMemFree (pv=0xffa70) [0162.177] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT", lpFilePart=0x0) returned 0x2f [0162.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT", lpFilePart=0x0) returned 0x2f [0162.177] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.177] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.177] CoTaskMemFree (pv=0xffa70) [0162.177] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET", lpFilePart=0x0) returned 0x2b [0162.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET", lpFilePart=0x0) returned 0x2b [0162.178] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.178] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.178] CoTaskMemFree (pv=0xffa70) [0162.178] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", lpFilePart=0x0) returned 0x38 [0162.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", lpFilePart=0x0) returned 0x38 [0162.178] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.178] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.178] CoTaskMemFree (pv=0xffa70) [0162.178] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", lpFilePart=0x0) returned 0x2e [0162.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", lpFilePart=0x0) returned 0x2e [0162.179] SetErrorMode (uMode=0x1) returned 0x0 [0162.179] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.183] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0162.183] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0162.183] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="ADDIS_~1")) returned 1 [0162.183] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0162.183] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0162.183] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="BRAZZA~1")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="BUJUMB~1")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="CASABL~1")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0162.184] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="DAR_ES~1")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="JOHANN~1")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0162.185] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="LIBREV~1")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="LUBUMB~1")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0162.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="MOGADI~1")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="NOUAKC~1")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="OUAGAD~1")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="PORTO-~1")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0162.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0162.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0162.188] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.188] SetErrorMode (uMode=0x0) returned 0x1 [0162.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", lpFilePart=0x0) returned 0x2e [0162.189] SetErrorMode (uMode=0x1) returned 0x0 [0162.189] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="ADDIS_~1")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0162.190] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="BRAZZA~1")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="BUJUMB~1")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="CASABL~1")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="DAR_ES~1")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0162.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="JOHANN~1")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0162.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="LIBREV~1")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="LUBUMB~1")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="MOGADI~1")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0162.193] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="NOUAKC~1")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="OUAGAD~1")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="PORTO-~1")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0162.194] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0162.194] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.195] SetErrorMode (uMode=0x0) returned 0x1 [0162.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", lpFilePart=0x0) returned 0x36 [0162.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", lpFilePart=0x0) returned 0x36 [0162.196] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.196] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.196] CoTaskMemFree (pv=0xffa70) [0162.196] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra", lpFilePart=0x0) returned 0x34 [0162.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra", lpFilePart=0x0) returned 0x34 [0162.196] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.196] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.196] CoTaskMemFree (pv=0xffa70) [0162.196] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", lpFilePart=0x0) returned 0x3a [0162.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", lpFilePart=0x0) returned 0x3a [0162.196] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.196] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.196] CoTaskMemFree (pv=0xffa70) [0162.196] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers", lpFilePart=0x0) returned 0x36 [0162.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers", lpFilePart=0x0) returned 0x36 [0162.197] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.197] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.197] CoTaskMemFree (pv=0xffa70) [0162.197] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara", lpFilePart=0x0) returned 0x35 [0162.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara", lpFilePart=0x0) returned 0x35 [0162.197] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.197] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.197] CoTaskMemFree (pv=0xffa70) [0162.197] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako", lpFilePart=0x0) returned 0x35 [0162.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako", lpFilePart=0x0) returned 0x35 [0162.198] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.198] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.198] CoTaskMemFree (pv=0xffa70) [0162.198] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui", lpFilePart=0x0) returned 0x35 [0162.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui", lpFilePart=0x0) returned 0x35 [0162.198] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.198] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.198] CoTaskMemFree (pv=0xffa70) [0162.198] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul", lpFilePart=0x0) returned 0x35 [0162.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul", lpFilePart=0x0) returned 0x35 [0162.198] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.198] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.198] CoTaskMemFree (pv=0xffa70) [0162.198] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau", lpFilePart=0x0) returned 0x35 [0162.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau", lpFilePart=0x0) returned 0x35 [0162.199] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.199] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.199] CoTaskMemFree (pv=0xffa70) [0162.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", lpFilePart=0x0) returned 0x37 [0162.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", lpFilePart=0x0) returned 0x37 [0162.199] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.199] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.199] CoTaskMemFree (pv=0xffa70) [0162.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", lpFilePart=0x0) returned 0x3a [0162.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", lpFilePart=0x0) returned 0x3a [0162.199] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.200] CoTaskMemFree (pv=0xffa70) [0162.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", lpFilePart=0x0) returned 0x38 [0162.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", lpFilePart=0x0) returned 0x38 [0162.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.200] CoTaskMemFree (pv=0xffa70) [0162.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo", lpFilePart=0x0) returned 0x34 [0162.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo", lpFilePart=0x0) returned 0x34 [0162.200] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.200] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.200] CoTaskMemFree (pv=0xffa70) [0162.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", lpFilePart=0x0) returned 0x39 [0162.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", lpFilePart=0x0) returned 0x39 [0162.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.201] CoTaskMemFree (pv=0xffa70) [0162.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", lpFilePart=0x0) returned 0x34 [0162.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", lpFilePart=0x0) returned 0x34 [0162.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.201] CoTaskMemFree (pv=0xffa70) [0162.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry", lpFilePart=0x0) returned 0x36 [0162.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry", lpFilePart=0x0) returned 0x36 [0162.201] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.201] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.202] CoTaskMemFree (pv=0xffa70) [0162.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar", lpFilePart=0x0) returned 0x34 [0162.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar", lpFilePart=0x0) returned 0x34 [0162.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.202] CoTaskMemFree (pv=0xffa70) [0162.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", lpFilePart=0x0) returned 0x3c [0162.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", lpFilePart=0x0) returned 0x3c [0162.202] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.202] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.203] CoTaskMemFree (pv=0xffa70) [0162.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", lpFilePart=0x0) returned 0x37 [0162.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", lpFilePart=0x0) returned 0x37 [0162.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.203] CoTaskMemFree (pv=0xffa70) [0162.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala", lpFilePart=0x0) returned 0x35 [0162.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala", lpFilePart=0x0) returned 0x35 [0162.203] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.203] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.203] CoTaskMemFree (pv=0xffa70) [0162.203] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", lpFilePart=0x0) returned 0x37 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", lpFilePart=0x0) returned 0x37 [0162.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.204] CoTaskMemFree (pv=0xffa70) [0162.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown", lpFilePart=0x0) returned 0x37 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown", lpFilePart=0x0) returned 0x37 [0162.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.204] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.204] CoTaskMemFree (pv=0xffa70) [0162.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", lpFilePart=0x0) returned 0x37 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", lpFilePart=0x0) returned 0x37 [0162.204] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.205] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.205] CoTaskMemFree (pv=0xffa70) [0162.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare", lpFilePart=0x0) returned 0x35 [0162.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare", lpFilePart=0x0) returned 0x35 [0162.205] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.205] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.205] CoTaskMemFree (pv=0xffa70) [0162.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", lpFilePart=0x0) returned 0x3b [0162.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", lpFilePart=0x0) returned 0x3b [0162.205] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.205] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.205] CoTaskMemFree (pv=0xffa70) [0162.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba", lpFilePart=0x0) returned 0x33 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba", lpFilePart=0x0) returned 0x33 [0162.206] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.206] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.206] CoTaskMemFree (pv=0xffa70) [0162.206] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala", lpFilePart=0x0) returned 0x36 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala", lpFilePart=0x0) returned 0x36 [0162.206] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.206] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.206] CoTaskMemFree (pv=0xffa70) [0162.206] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", lpFilePart=0x0) returned 0x37 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", lpFilePart=0x0) returned 0x37 [0162.206] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.206] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.207] CoTaskMemFree (pv=0xffa70) [0162.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali", lpFilePart=0x0) returned 0x35 [0162.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali", lpFilePart=0x0) returned 0x35 [0162.207] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.207] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.207] CoTaskMemFree (pv=0xffa70) [0162.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", lpFilePart=0x0) returned 0x37 [0162.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", lpFilePart=0x0) returned 0x37 [0162.207] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.207] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.207] CoTaskMemFree (pv=0xffa70) [0162.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos", lpFilePart=0x0) returned 0x34 [0162.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos", lpFilePart=0x0) returned 0x34 [0162.208] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.208] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.208] CoTaskMemFree (pv=0xffa70) [0162.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville", lpFilePart=0x0) returned 0x39 [0162.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville", lpFilePart=0x0) returned 0x39 [0162.208] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.208] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.208] CoTaskMemFree (pv=0xffa70) [0162.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome", lpFilePart=0x0) returned 0x33 [0162.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome", lpFilePart=0x0) returned 0x33 [0162.208] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.208] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.209] CoTaskMemFree (pv=0xffa70) [0162.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda", lpFilePart=0x0) returned 0x35 [0162.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda", lpFilePart=0x0) returned 0x35 [0162.209] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.209] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.209] CoTaskMemFree (pv=0xffa70) [0162.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", lpFilePart=0x0) returned 0x39 [0162.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", lpFilePart=0x0) returned 0x39 [0162.209] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.209] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.209] CoTaskMemFree (pv=0xffa70) [0162.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", lpFilePart=0x0) returned 0x35 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", lpFilePart=0x0) returned 0x35 [0162.210] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.210] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.210] CoTaskMemFree (pv=0xffa70) [0162.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo", lpFilePart=0x0) returned 0x35 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo", lpFilePart=0x0) returned 0x35 [0162.210] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.210] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.210] CoTaskMemFree (pv=0xffa70) [0162.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo", lpFilePart=0x0) returned 0x35 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo", lpFilePart=0x0) returned 0x35 [0162.210] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.210] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.210] CoTaskMemFree (pv=0xffa70) [0162.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru", lpFilePart=0x0) returned 0x35 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru", lpFilePart=0x0) returned 0x35 [0162.211] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.211] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.211] CoTaskMemFree (pv=0xffa70) [0162.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", lpFilePart=0x0) returned 0x36 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", lpFilePart=0x0) returned 0x36 [0162.211] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.211] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.211] CoTaskMemFree (pv=0xffa70) [0162.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", lpFilePart=0x0) returned 0x38 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", lpFilePart=0x0) returned 0x38 [0162.212] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.212] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.212] CoTaskMemFree (pv=0xffa70) [0162.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", lpFilePart=0x0) returned 0x37 [0162.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", lpFilePart=0x0) returned 0x37 [0162.212] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.212] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.212] CoTaskMemFree (pv=0xffa70) [0162.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", lpFilePart=0x0) returned 0x36 [0162.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", lpFilePart=0x0) returned 0x36 [0162.212] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.212] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.212] CoTaskMemFree (pv=0xffa70) [0162.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", lpFilePart=0x0) returned 0x37 [0162.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", lpFilePart=0x0) returned 0x37 [0162.213] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.213] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.213] CoTaskMemFree (pv=0xffa70) [0162.213] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey", lpFilePart=0x0) returned 0x35 [0162.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey", lpFilePart=0x0) returned 0x35 [0162.213] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.213] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.213] CoTaskMemFree (pv=0xffa70) [0162.213] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", lpFilePart=0x0) returned 0x39 [0162.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", lpFilePart=0x0) returned 0x39 [0162.213] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.213] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.214] CoTaskMemFree (pv=0xffa70) [0162.214] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", lpFilePart=0x0) returned 0x3a [0162.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", lpFilePart=0x0) returned 0x3a [0162.214] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.214] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.214] CoTaskMemFree (pv=0xffa70) [0162.214] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", lpFilePart=0x0) returned 0x39 [0162.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", lpFilePart=0x0) returned 0x39 [0162.214] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.214] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.214] CoTaskMemFree (pv=0xffa70) [0162.214] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0162.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", lpFilePart=0x0) returned 0x37 [0162.215] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.215] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.215] CoTaskMemFree (pv=0xffa70) [0162.215] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.215] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.215] CoTaskMemFree (pv=0xffa70) [0162.215] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.215] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.215] CoTaskMemFree (pv=0xffa70) [0162.215] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.215] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.215] CoTaskMemFree (pv=0xffa70) [0162.216] SetErrorMode (uMode=0x1) returned 0x0 [0162.216] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.217] SetErrorMode (uMode=0x0) returned 0x1 [0162.217] GetFileType (hFile=0x18c) returned 0x1 [0162.218] SetErrorMode (uMode=0x1) returned 0x0 [0162.219] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1 [0162.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anchorage", cAlternateFileName="ANCHOR~1")) returned 1 [0162.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anguilla", cAlternateFileName="")) returned 1 [0162.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antigua", cAlternateFileName="")) returned 1 [0162.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Araguaina", cAlternateFileName="ARAGUA~1")) returned 1 [0162.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Argentina", cAlternateFileName="ARGENT~1")) returned 1 [0162.223] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asuncion", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atikokan", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia_Banderas", cAlternateFileName="BAHIA_~1")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Barbados", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belem", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belize", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blanc-Sablon", cAlternateFileName="BLANC-~1")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boa_Vista", cAlternateFileName="BOA_VI~1")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bogota", cAlternateFileName="")) returned 1 [0162.228] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boise", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambridge_Bay", cAlternateFileName="CAMBRI~1")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campo_Grande", cAlternateFileName="CAMPO_~1")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cancun", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caracas", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayenne", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayman", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chicago", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chihuahua", cAlternateFileName="CHIHUA~1")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Costa_Rica", cAlternateFileName="COSTA_~1")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Creston", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cuiaba", cAlternateFileName="")) returned 1 [0162.229] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Curacao", cAlternateFileName="")) returned 1 [0162.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="Danmarkshavn", cAlternateFileName="DANMAR~1")) returned 1 [0162.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson", cAlternateFileName="")) returned 1 [0162.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson_Creek", cAlternateFileName="DAWSON~1")) returned 1 [0162.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="Denver", cAlternateFileName="")) returned 1 [0162.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detroit", cAlternateFileName="")) returned 1 [0162.230] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dominica", cAlternateFileName="")) returned 1 [0162.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edmonton", cAlternateFileName="")) returned 1 [0162.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eirunepe", cAlternateFileName="")) returned 1 [0162.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Salvador", cAlternateFileName="EL_SAL~1")) returned 1 [0162.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fortaleza", cAlternateFileName="FORTAL~1")) returned 1 [0162.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glace_Bay", cAlternateFileName="GLACE_~1")) returned 1 [0162.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Godthab", cAlternateFileName="")) returned 1 [0162.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Goose_Bay", cAlternateFileName="GOOSE_~1")) returned 1 [0162.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grand_Turk", cAlternateFileName="GRAND_~1")) returned 1 [0162.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grenada", cAlternateFileName="")) returned 1 [0162.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadeloupe", cAlternateFileName="GUADEL~1")) returned 1 [0162.237] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.238] SetErrorMode (uMode=0x0) returned 0x1 [0162.238] SetErrorMode (uMode=0x1) returned 0x0 [0162.238] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.239] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.240] SetErrorMode (uMode=0x0) returned 0x1 [0162.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.240] CoTaskMemFree (pv=0xffa70) [0162.240] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.240] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.240] CoTaskMemFree (pv=0xffa70) [0162.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.241] CoTaskMemFree (pv=0xffa70) [0162.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.241] CoTaskMemFree (pv=0xffa70) [0162.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.241] CoTaskMemFree (pv=0xffa70) [0162.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.241] CoTaskMemFree (pv=0xffa70) [0162.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.241] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.241] CoTaskMemFree (pv=0xffa70) [0162.241] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.242] CoTaskMemFree (pv=0xffa70) [0162.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.242] CoTaskMemFree (pv=0xffa70) [0162.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.242] CoTaskMemFree (pv=0xffa70) [0162.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.242] CoTaskMemFree (pv=0xffa70) [0162.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.242] CoTaskMemFree (pv=0xffa70) [0162.242] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.242] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.243] CoTaskMemFree (pv=0xffa70) [0162.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.243] CoTaskMemFree (pv=0xffa70) [0162.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.243] CoTaskMemFree (pv=0xffa70) [0162.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.243] CoTaskMemFree (pv=0xffa70) [0162.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.243] CoTaskMemFree (pv=0xffa70) [0162.243] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.243] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.244] CoTaskMemFree (pv=0xffa70) [0162.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.244] CoTaskMemFree (pv=0xffa70) [0162.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.244] CoTaskMemFree (pv=0xffa70) [0162.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.244] CoTaskMemFree (pv=0xffa70) [0162.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.244] CoTaskMemFree (pv=0xffa70) [0162.244] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.244] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.244] CoTaskMemFree (pv=0xffa70) [0162.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.245] CoTaskMemFree (pv=0xffa70) [0162.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.245] CoTaskMemFree (pv=0xffa70) [0162.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.245] CoTaskMemFree (pv=0xffa70) [0162.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.245] CoTaskMemFree (pv=0xffa70) [0162.245] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.245] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.245] CoTaskMemFree (pv=0xffa70) [0162.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.246] CoTaskMemFree (pv=0xffa70) [0162.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.246] CoTaskMemFree (pv=0xffa70) [0162.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.246] CoTaskMemFree (pv=0xffa70) [0162.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.246] CoTaskMemFree (pv=0xffa70) [0162.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.246] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.246] CoTaskMemFree (pv=0xffa70) [0162.246] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.247] CoTaskMemFree (pv=0xffa70) [0162.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.247] CoTaskMemFree (pv=0xffa70) [0162.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.247] CoTaskMemFree (pv=0xffa70) [0162.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.247] CoTaskMemFree (pv=0xffa70) [0162.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.247] CoTaskMemFree (pv=0xffa70) [0162.247] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.247] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.248] CoTaskMemFree (pv=0xffa70) [0162.248] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.248] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.248] CoTaskMemFree (pv=0xffa70) [0162.248] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.248] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.248] CoTaskMemFree (pv=0xffa70) [0162.248] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.248] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.248] CoTaskMemFree (pv=0xffa70) [0162.248] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.248] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.248] CoTaskMemFree (pv=0xffa70) [0162.248] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.248] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.249] CoTaskMemFree (pv=0xffa70) [0162.249] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.249] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.249] CoTaskMemFree (pv=0xffa70) [0162.249] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.249] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.249] CoTaskMemFree (pv=0xffa70) [0162.249] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.249] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.249] CoTaskMemFree (pv=0xffa70) [0162.249] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.249] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.249] CoTaskMemFree (pv=0xffa70) [0162.249] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.249] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.250] CoTaskMemFree (pv=0xffa70) [0162.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.250] CoTaskMemFree (pv=0xffa70) [0162.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.250] CoTaskMemFree (pv=0xffa70) [0162.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.250] CoTaskMemFree (pv=0xffa70) [0162.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.250] CoTaskMemFree (pv=0xffa70) [0162.250] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.250] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.251] CoTaskMemFree (pv=0xffa70) [0162.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.251] CoTaskMemFree (pv=0xffa70) [0162.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.251] CoTaskMemFree (pv=0xffa70) [0162.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.251] CoTaskMemFree (pv=0xffa70) [0162.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.251] CoTaskMemFree (pv=0xffa70) [0162.251] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.251] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.251] CoTaskMemFree (pv=0xffa70) [0162.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.252] CoTaskMemFree (pv=0xffa70) [0162.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.252] CoTaskMemFree (pv=0xffa70) [0162.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.252] CoTaskMemFree (pv=0xffa70) [0162.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.252] CoTaskMemFree (pv=0xffa70) [0162.252] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.252] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.252] CoTaskMemFree (pv=0xffa70) [0162.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.253] CoTaskMemFree (pv=0xffa70) [0162.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.253] CoTaskMemFree (pv=0xffa70) [0162.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.253] CoTaskMemFree (pv=0xffa70) [0162.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.253] CoTaskMemFree (pv=0xffa70) [0162.253] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.253] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.253] CoTaskMemFree (pv=0xffa70) [0162.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.254] CoTaskMemFree (pv=0xffa70) [0162.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.254] CoTaskMemFree (pv=0xffa70) [0162.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.254] CoTaskMemFree (pv=0xffa70) [0162.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.254] CoTaskMemFree (pv=0xffa70) [0162.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.254] CoTaskMemFree (pv=0xffa70) [0162.254] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.254] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.255] CoTaskMemFree (pv=0xffa70) [0162.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.255] CoTaskMemFree (pv=0xffa70) [0162.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.255] CoTaskMemFree (pv=0xffa70) [0162.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.255] CoTaskMemFree (pv=0xffa70) [0162.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.255] CoTaskMemFree (pv=0xffa70) [0162.255] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.255] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.256] CoTaskMemFree (pv=0xffa70) [0162.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.256] CoTaskMemFree (pv=0xffa70) [0162.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.256] CoTaskMemFree (pv=0xffa70) [0162.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.256] CoTaskMemFree (pv=0xffa70) [0162.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.256] CoTaskMemFree (pv=0xffa70) [0162.256] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.256] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.256] CoTaskMemFree (pv=0xffa70) [0162.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.257] CoTaskMemFree (pv=0xffa70) [0162.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.257] CoTaskMemFree (pv=0xffa70) [0162.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.257] CoTaskMemFree (pv=0xffa70) [0162.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.257] CoTaskMemFree (pv=0xffa70) [0162.257] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.257] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.257] CoTaskMemFree (pv=0xffa70) [0162.258] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.258] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.258] CoTaskMemFree (pv=0xffa70) [0162.258] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.258] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.258] CoTaskMemFree (pv=0xffa70) [0162.258] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.258] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.258] CoTaskMemFree (pv=0xffa70) [0162.258] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.258] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.258] CoTaskMemFree (pv=0xffa70) [0162.258] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.258] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.258] CoTaskMemFree (pv=0xffa70) [0162.259] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.259] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.259] CoTaskMemFree (pv=0xffa70) [0162.259] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.259] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.259] CoTaskMemFree (pv=0xffa70) [0162.259] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.259] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.259] CoTaskMemFree (pv=0xffa70) [0162.259] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.259] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.259] CoTaskMemFree (pv=0xffa70) [0162.259] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.259] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.259] CoTaskMemFree (pv=0xffa70) [0162.259] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.260] CoTaskMemFree (pv=0xffa70) [0162.260] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.260] CoTaskMemFree (pv=0xffa70) [0162.260] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.260] CoTaskMemFree (pv=0xffa70) [0162.260] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.260] CoTaskMemFree (pv=0xffa70) [0162.260] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.260] CoTaskMemFree (pv=0xffa70) [0162.260] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.260] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.261] CoTaskMemFree (pv=0xffa70) [0162.261] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.261] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.261] CoTaskMemFree (pv=0xffa70) [0162.261] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.261] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.261] CoTaskMemFree (pv=0xffa70) [0162.261] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.261] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.261] CoTaskMemFree (pv=0xffa70) [0162.261] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.261] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.261] CoTaskMemFree (pv=0xffa70) [0162.261] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.261] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.262] CoTaskMemFree (pv=0xffa70) [0162.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.262] CoTaskMemFree (pv=0xffa70) [0162.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.262] CoTaskMemFree (pv=0xffa70) [0162.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.262] CoTaskMemFree (pv=0xffa70) [0162.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.262] CoTaskMemFree (pv=0xffa70) [0162.262] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.262] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.263] CoTaskMemFree (pv=0xffa70) [0162.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.263] CoTaskMemFree (pv=0xffa70) [0162.263] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.263] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.263] CoTaskMemFree (pv=0xffa70) [0162.263] SetErrorMode (uMode=0x1) returned 0x0 [0162.263] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.266] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.267] SetErrorMode (uMode=0x0) returned 0x1 [0162.267] SetErrorMode (uMode=0x1) returned 0x0 [0162.267] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.268] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.269] SetErrorMode (uMode=0x0) returned 0x1 [0162.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.269] CoTaskMemFree (pv=0xffa70) [0162.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.269] CoTaskMemFree (pv=0xffa70) [0162.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.269] CoTaskMemFree (pv=0xffa70) [0162.269] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.269] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.269] CoTaskMemFree (pv=0xffa70) [0162.270] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.270] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.270] CoTaskMemFree (pv=0xffa70) [0162.270] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.270] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.270] CoTaskMemFree (pv=0xffa70) [0162.270] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.270] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.270] CoTaskMemFree (pv=0xffa70) [0162.270] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.270] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.270] CoTaskMemFree (pv=0xffa70) [0162.270] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.270] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.270] CoTaskMemFree (pv=0xffa70) [0162.271] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.271] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.271] CoTaskMemFree (pv=0xffa70) [0162.271] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.271] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.271] CoTaskMemFree (pv=0xffa70) [0162.271] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.271] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.271] CoTaskMemFree (pv=0xffa70) [0162.271] SetErrorMode (uMode=0x1) returned 0x0 [0162.273] SetErrorMode (uMode=0x0) returned 0x1 [0162.273] GetFileType (hFile=0x18c) returned 0x1 [0162.276] SetErrorMode (uMode=0x1) returned 0x0 [0162.276] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.278] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.279] SetErrorMode (uMode=0x0) returned 0x1 [0162.279] SetErrorMode (uMode=0x1) returned 0x0 [0162.279] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.280] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.281] SetErrorMode (uMode=0x0) returned 0x1 [0162.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.281] CoTaskMemFree (pv=0xffa70) [0162.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.281] CoTaskMemFree (pv=0xffa70) [0162.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.281] CoTaskMemFree (pv=0xffa70) [0162.281] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.281] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.281] CoTaskMemFree (pv=0xffa70) [0162.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.282] CoTaskMemFree (pv=0xffa70) [0162.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.282] CoTaskMemFree (pv=0xffa70) [0162.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.282] CoTaskMemFree (pv=0xffa70) [0162.282] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.282] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.282] CoTaskMemFree (pv=0xffa70) [0162.282] SetErrorMode (uMode=0x1) returned 0x0 [0162.284] SetErrorMode (uMode=0x0) returned 0x1 [0162.284] GetFileType (hFile=0x18c) returned 0x1 [0162.285] SetErrorMode (uMode=0x1) returned 0x0 [0162.285] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.285] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.285] SetErrorMode (uMode=0x0) returned 0x1 [0162.286] SetErrorMode (uMode=0x1) returned 0x0 [0162.286] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.286] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.286] SetErrorMode (uMode=0x0) returned 0x1 [0162.286] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.286] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.286] CoTaskMemFree (pv=0xffa70) [0162.287] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.287] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.287] CoTaskMemFree (pv=0xffa70) [0162.287] SetErrorMode (uMode=0x1) returned 0x0 [0162.287] SetErrorMode (uMode=0x0) returned 0x1 [0162.287] GetFileType (hFile=0x18c) returned 0x1 [0162.289] SetErrorMode (uMode=0x1) returned 0x0 [0162.289] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.289] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.289] SetErrorMode (uMode=0x0) returned 0x1 [0162.290] SetErrorMode (uMode=0x1) returned 0x0 [0162.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.290] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.290] SetErrorMode (uMode=0x0) returned 0x1 [0162.290] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.290] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.290] CoTaskMemFree (pv=0xffa70) [0162.290] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.291] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.291] CoTaskMemFree (pv=0xffa70) [0162.291] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.291] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.291] CoTaskMemFree (pv=0xffa70) [0162.291] SetErrorMode (uMode=0x1) returned 0x0 [0162.293] SetErrorMode (uMode=0x0) returned 0x1 [0162.293] GetFileType (hFile=0x18c) returned 0x1 [0162.294] SetErrorMode (uMode=0x1) returned 0x0 [0162.295] SetErrorMode (uMode=0x0) returned 0x1 [0162.295] GetFileType (hFile=0x18c) returned 0x1 [0162.296] SetErrorMode (uMode=0x1) returned 0x0 [0162.296] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.301] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.301] SetErrorMode (uMode=0x0) returned 0x1 [0162.302] SetErrorMode (uMode=0x1) returned 0x0 [0162.302] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.303] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.303] SetErrorMode (uMode=0x0) returned 0x1 [0162.304] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.304] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.304] CoTaskMemFree (pv=0xffa70) [0162.304] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.304] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.304] CoTaskMemFree (pv=0xffa70) [0162.304] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.304] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.304] CoTaskMemFree (pv=0xffa70) [0162.304] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.304] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.304] CoTaskMemFree (pv=0xffa70) [0162.304] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.304] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.304] CoTaskMemFree (pv=0xffa70) [0162.305] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.305] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.305] CoTaskMemFree (pv=0xffa70) [0162.305] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.305] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.305] CoTaskMemFree (pv=0xffa70) [0162.305] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.305] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.305] CoTaskMemFree (pv=0xffa70) [0162.305] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.305] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.305] CoTaskMemFree (pv=0xffa70) [0162.305] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.305] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.305] CoTaskMemFree (pv=0xffa70) [0162.306] SetErrorMode (uMode=0x1) returned 0x0 [0162.307] SetErrorMode (uMode=0x0) returned 0x1 [0162.307] GetFileType (hFile=0x18c) returned 0x1 [0162.308] SetErrorMode (uMode=0x1) returned 0x0 [0162.308] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.312] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.313] SetErrorMode (uMode=0x0) returned 0x1 [0162.313] SetErrorMode (uMode=0x1) returned 0x0 [0162.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.314] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.315] SetErrorMode (uMode=0x0) returned 0x1 [0162.315] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.315] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.315] CoTaskMemFree (pv=0xffa70) [0162.315] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.315] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.316] CoTaskMemFree (pv=0xffa70) [0162.316] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.316] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.316] CoTaskMemFree (pv=0xffa70) [0162.316] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.316] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.316] CoTaskMemFree (pv=0xffa70) [0162.316] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.316] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.316] CoTaskMemFree (pv=0xffa70) [0162.316] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.316] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.316] CoTaskMemFree (pv=0xffa70) [0162.316] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.316] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.317] CoTaskMemFree (pv=0xffa70) [0162.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.317] CoTaskMemFree (pv=0xffa70) [0162.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.317] CoTaskMemFree (pv=0xffa70) [0162.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.317] CoTaskMemFree (pv=0xffa70) [0162.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.317] CoTaskMemFree (pv=0xffa70) [0162.317] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.317] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.318] CoTaskMemFree (pv=0xffa70) [0162.318] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.318] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.318] CoTaskMemFree (pv=0xffa70) [0162.318] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.318] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.318] CoTaskMemFree (pv=0xffa70) [0162.318] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.318] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.318] CoTaskMemFree (pv=0xffa70) [0162.318] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0162.318] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0162.318] CoTaskMemFree (pv=0xffa70) [0162.319] SetErrorMode (uMode=0x1) returned 0x0 [0162.320] SetErrorMode (uMode=0x0) returned 0x1 [0162.320] GetFileType (hFile=0x18c) returned 0x1 [0162.321] SetErrorMode (uMode=0x1) returned 0x0 [0162.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.328] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.329] SetErrorMode (uMode=0x0) returned 0x1 [0162.329] SetErrorMode (uMode=0x1) returned 0x0 [0162.329] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.330] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.331] SetErrorMode (uMode=0x0) returned 0x1 [0162.331] SetErrorMode (uMode=0x1) returned 0x0 [0162.332] SetErrorMode (uMode=0x0) returned 0x1 [0162.332] GetFileType (hFile=0x18c) returned 0x1 [0162.333] SetErrorMode (uMode=0x1) returned 0x0 [0162.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.335] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.336] SetErrorMode (uMode=0x0) returned 0x1 [0162.336] SetErrorMode (uMode=0x1) returned 0x0 [0162.336] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.337] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.338] SetErrorMode (uMode=0x0) returned 0x1 [0162.338] SetErrorMode (uMode=0x1) returned 0x0 [0162.339] SetErrorMode (uMode=0x0) returned 0x1 [0162.340] GetFileType (hFile=0x18c) returned 0x1 [0162.341] SetErrorMode (uMode=0x1) returned 0x0 [0162.341] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.343] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.344] SetErrorMode (uMode=0x0) returned 0x1 [0162.344] SetErrorMode (uMode=0x1) returned 0x0 [0162.344] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.345] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.346] SetErrorMode (uMode=0x0) returned 0x1 [0162.346] SetErrorMode (uMode=0x1) returned 0x0 [0162.348] SetErrorMode (uMode=0x0) returned 0x1 [0162.348] GetFileType (hFile=0x18c) returned 0x1 [0162.349] SetErrorMode (uMode=0x1) returned 0x0 [0162.349] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.351] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.352] SetErrorMode (uMode=0x0) returned 0x1 [0162.352] SetErrorMode (uMode=0x1) returned 0x0 [0162.352] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.353] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.354] SetErrorMode (uMode=0x0) returned 0x1 [0162.355] SetErrorMode (uMode=0x1) returned 0x0 [0162.356] SetErrorMode (uMode=0x0) returned 0x1 [0162.356] GetFileType (hFile=0x18c) returned 0x1 [0162.357] SetErrorMode (uMode=0x1) returned 0x0 [0162.357] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.359] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.360] SetErrorMode (uMode=0x0) returned 0x1 [0162.360] SetErrorMode (uMode=0x1) returned 0x0 [0162.360] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.361] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.362] SetErrorMode (uMode=0x0) returned 0x1 [0162.366] SetErrorMode (uMode=0x1) returned 0x0 [0162.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.367] SetErrorMode (uMode=0x0) returned 0x1 [0162.367] GetFileType (hFile=0x18c) returned 0x1 [0162.369] SetErrorMode (uMode=0x1) returned 0x0 [0162.369] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.378] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.379] SetErrorMode (uMode=0x0) returned 0x1 [0162.380] SetErrorMode (uMode=0x1) returned 0x0 [0162.380] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.381] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.381] SetErrorMode (uMode=0x0) returned 0x1 [0162.382] SetErrorMode (uMode=0x1) returned 0x0 [0162.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.384] SetErrorMode (uMode=0x0) returned 0x1 [0162.384] GetFileType (hFile=0x18c) returned 0x1 [0162.385] SetErrorMode (uMode=0x1) returned 0x0 [0162.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.387] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.388] SetErrorMode (uMode=0x0) returned 0x1 [0162.388] SetErrorMode (uMode=0x1) returned 0x0 [0162.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.389] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.390] SetErrorMode (uMode=0x0) returned 0x1 [0162.390] SetErrorMode (uMode=0x1) returned 0x0 [0162.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.392] SetErrorMode (uMode=0x0) returned 0x1 [0162.392] GetFileType (hFile=0x18c) returned 0x1 [0162.393] SetErrorMode (uMode=0x1) returned 0x0 [0162.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.394] SetErrorMode (uMode=0x0) returned 0x1 [0162.394] GetFileType (hFile=0x18c) returned 0x1 [0162.395] SetErrorMode (uMode=0x1) returned 0x0 [0162.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.395] SetErrorMode (uMode=0x0) returned 0x1 [0162.395] GetFileType (hFile=0x18c) returned 0x1 [0162.397] SetErrorMode (uMode=0x1) returned 0x0 [0162.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\jre7\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.398] SetErrorMode (uMode=0x0) returned 0x1 [0162.398] GetFileType (hFile=0x18c) returned 0x1 [0162.399] SetErrorMode (uMode=0x1) returned 0x0 [0162.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\java\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.400] SetErrorMode (uMode=0x0) returned 0x1 [0162.400] GetFileType (hFile=0x18c) returned 0x1 [0162.401] SetErrorMode (uMode=0x1) returned 0x0 [0162.401] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.401] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.401] SetErrorMode (uMode=0x0) returned 0x1 [0162.401] SetErrorMode (uMode=0x1) returned 0x0 [0162.402] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.402] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.402] SetErrorMode (uMode=0x0) returned 0x1 [0162.402] SetErrorMode (uMode=0x1) returned 0x0 [0162.402] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.403] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.403] SetErrorMode (uMode=0x0) returned 0x1 [0162.403] SetErrorMode (uMode=0x1) returned 0x0 [0162.403] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.403] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.403] SetErrorMode (uMode=0x0) returned 0x1 [0162.404] SetErrorMode (uMode=0x1) returned 0x0 [0162.404] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.406] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.407] SetErrorMode (uMode=0x0) returned 0x1 [0162.407] SetErrorMode (uMode=0x1) returned 0x0 [0162.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.408] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.409] SetErrorMode (uMode=0x0) returned 0x1 [0162.409] SetErrorMode (uMode=0x1) returned 0x0 [0162.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.412] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.413] SetErrorMode (uMode=0x0) returned 0x1 [0162.413] SetErrorMode (uMode=0x1) returned 0x0 [0162.413] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.414] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.415] SetErrorMode (uMode=0x0) returned 0x1 [0162.415] SetErrorMode (uMode=0x1) returned 0x0 [0162.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.416] SetErrorMode (uMode=0x0) returned 0x1 [0162.416] GetFileType (hFile=0x18c) returned 0x1 [0162.418] SetErrorMode (uMode=0x1) returned 0x0 [0162.418] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.418] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.418] SetErrorMode (uMode=0x0) returned 0x1 [0162.418] SetErrorMode (uMode=0x1) returned 0x0 [0162.418] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.419] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.419] SetErrorMode (uMode=0x0) returned 0x1 [0162.419] SetErrorMode (uMode=0x1) returned 0x0 [0162.419] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.419] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.420] SetErrorMode (uMode=0x0) returned 0x1 [0162.420] SetErrorMode (uMode=0x1) returned 0x0 [0162.420] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.420] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.420] SetErrorMode (uMode=0x0) returned 0x1 [0162.421] SetErrorMode (uMode=0x1) returned 0x0 [0162.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.421] SetErrorMode (uMode=0x0) returned 0x1 [0162.421] GetFileType (hFile=0x18c) returned 0x1 [0162.423] SetErrorMode (uMode=0x1) returned 0x0 [0162.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.423] SetErrorMode (uMode=0x0) returned 0x1 [0162.423] GetFileType (hFile=0x18c) returned 0x1 [0162.424] SetErrorMode (uMode=0x1) returned 0x0 [0162.424] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.425] SetErrorMode (uMode=0x0) returned 0x1 [0162.425] GetFileType (hFile=0x18c) returned 0x1 [0162.426] SetErrorMode (uMode=0x1) returned 0x0 [0162.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.427] SetErrorMode (uMode=0x0) returned 0x1 [0162.427] GetFileType (hFile=0x18c) returned 0x1 [0162.428] SetErrorMode (uMode=0x1) returned 0x0 [0162.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft analysis services\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.433] SetErrorMode (uMode=0x0) returned 0x1 [0162.433] GetFileType (hFile=0x18c) returned 0x1 [0162.434] SetErrorMode (uMode=0x1) returned 0x0 [0162.434] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.434] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.434] SetErrorMode (uMode=0x0) returned 0x1 [0162.435] SetErrorMode (uMode=0x1) returned 0x0 [0162.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.435] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.435] SetErrorMode (uMode=0x0) returned 0x1 [0162.435] SetErrorMode (uMode=0x1) returned 0x0 [0162.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.436] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.436] SetErrorMode (uMode=0x0) returned 0x1 [0162.436] SetErrorMode (uMode=0x1) returned 0x0 [0162.436] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.436] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.437] SetErrorMode (uMode=0x0) returned 0x1 [0162.437] SetErrorMode (uMode=0x1) returned 0x0 [0162.437] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.439] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.440] SetErrorMode (uMode=0x0) returned 0x1 [0162.440] SetErrorMode (uMode=0x1) returned 0x0 [0162.440] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.441] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.441] SetErrorMode (uMode=0x0) returned 0x1 [0162.442] SetErrorMode (uMode=0x1) returned 0x0 [0162.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.443] SetErrorMode (uMode=0x0) returned 0x1 [0162.443] GetFileType (hFile=0x18c) returned 0x1 [0162.444] SetErrorMode (uMode=0x1) returned 0x0 [0162.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.445] SetErrorMode (uMode=0x0) returned 0x1 [0162.445] GetFileType (hFile=0x18c) returned 0x1 [0162.447] SetErrorMode (uMode=0x1) returned 0x0 [0162.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft office\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.448] SetErrorMode (uMode=0x0) returned 0x1 [0162.449] GetFileType (hFile=0x18c) returned 0x1 [0162.450] SetErrorMode (uMode=0x1) returned 0x0 [0162.450] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.450] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.450] SetErrorMode (uMode=0x0) returned 0x1 [0162.451] SetErrorMode (uMode=0x1) returned 0x0 [0162.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.451] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.451] SetErrorMode (uMode=0x0) returned 0x1 [0162.451] SetErrorMode (uMode=0x1) returned 0x0 [0162.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.452] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.452] SetErrorMode (uMode=0x0) returned 0x1 [0162.453] SetErrorMode (uMode=0x1) returned 0x0 [0162.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.453] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.453] SetErrorMode (uMode=0x0) returned 0x1 [0162.453] SetErrorMode (uMode=0x1) returned 0x0 [0162.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.454] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.454] SetErrorMode (uMode=0x0) returned 0x1 [0162.454] SetErrorMode (uMode=0x1) returned 0x0 [0162.454] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.454] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.454] SetErrorMode (uMode=0x0) returned 0x1 [0162.455] SetErrorMode (uMode=0x1) returned 0x0 [0162.455] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.456] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.456] SetErrorMode (uMode=0x0) returned 0x1 [0162.456] SetErrorMode (uMode=0x1) returned 0x0 [0162.456] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.456] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.456] SetErrorMode (uMode=0x0) returned 0x1 [0162.457] SetErrorMode (uMode=0x1) returned 0x0 [0162.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.458] SetErrorMode (uMode=0x0) returned 0x1 [0162.458] GetFileType (hFile=0x18c) returned 0x1 [0162.459] SetErrorMode (uMode=0x1) returned 0x0 [0162.460] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.462] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.462] SetErrorMode (uMode=0x0) returned 0x1 [0162.462] SetErrorMode (uMode=0x1) returned 0x0 [0162.463] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.463] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.464] SetErrorMode (uMode=0x0) returned 0x1 [0162.467] SetErrorMode (uMode=0x1) returned 0x0 [0162.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0162.469] SetErrorMode (uMode=0x0) returned 0x1 [0162.469] GetFileType (hFile=0x18c) returned 0x1 [0162.470] SetErrorMode (uMode=0x1) returned 0x0 [0162.470] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.471] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.471] SetErrorMode (uMode=0x0) returned 0x1 [0162.471] SetErrorMode (uMode=0x1) returned 0x0 [0162.471] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.471] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.471] SetErrorMode (uMode=0x0) returned 0x1 [0162.472] SetErrorMode (uMode=0x1) returned 0x0 [0162.472] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.472] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.472] SetErrorMode (uMode=0x0) returned 0x1 [0162.472] SetErrorMode (uMode=0x1) returned 0x0 [0162.473] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.473] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.473] SetErrorMode (uMode=0x0) returned 0x1 [0162.473] SetErrorMode (uMode=0x1) returned 0x0 [0162.473] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.473] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.474] SetErrorMode (uMode=0x0) returned 0x1 [0162.474] SetErrorMode (uMode=0x1) returned 0x0 [0162.474] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.474] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.474] SetErrorMode (uMode=0x0) returned 0x1 [0162.475] SetErrorMode (uMode=0x1) returned 0x0 [0162.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.476] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.477] SetErrorMode (uMode=0x0) returned 0x1 [0162.477] SetErrorMode (uMode=0x1) returned 0x0 [0162.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0162.478] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0162.479] SetErrorMode (uMode=0x0) returned 0x1 [0162.479] SetErrorMode (uMode=0x1) returned 0x0 [0162.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0162.481] SetErrorMode (uMode=0x0) returned 0x1 [0162.481] GetFileType (hFile=0x18c) returned 0x1 [0162.481] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x8b52 [0162.484] SetErrorMode (uMode=0x1) returned 0x0 [0162.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x8b52)) returned 1 [0162.484] SetErrorMode (uMode=0x0) returned 0x1 [0162.585] SetErrorMode (uMode=0x1) returned 0x0 [0162.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0162.586] SetErrorMode (uMode=0x0) returned 0x1 [0162.586] GetFileType (hFile=0x18c) returned 0x1 [0162.586] WriteFile (in: hFile=0x18c, lpBuffer=0x27dc870*, nNumberOfBytesToWrite=0x8c60, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x27dc870*, lpNumberOfBytesWritten=0x27e588*=0x8c60, lpOverlapped=0x0) returned 1 [0162.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", lpFilePart=0x0) returned 0x68 [0162.591] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 1 [0162.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0162.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0162.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0162.594] SetErrorMode (uMode=0x1) returned 0x0 [0162.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0162.595] GetFileType (hFile=0x18c) returned 0x1 [0162.595] SetErrorMode (uMode=0x0) returned 0x1 [0162.595] GetFileType (hFile=0x18c) returned 0x1 [0162.595] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x251 [0162.595] ReadFile (in: hFile=0x18c, lpBuffer=0x27e7758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27e7758*, lpNumberOfBytesRead=0x27e508*=0x251, lpOverlapped=0x0) returned 1 [0162.597] CloseHandle (hObject=0x18c) returned 1 [0162.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0162.598] SetErrorMode (uMode=0x1) returned 0x0 [0162.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251)) returned 1 [0162.598] SetErrorMode (uMode=0x0) returned 0x1 [0162.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0162.714] SetErrorMode (uMode=0x1) returned 0x0 [0162.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0162.716] GetFileType (hFile=0x18c) returned 0x1 [0162.716] SetErrorMode (uMode=0x0) returned 0x1 [0162.716] GetFileType (hFile=0x18c) returned 0x1 [0162.716] WriteFile (in: hFile=0x18c, lpBuffer=0x283c1a8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x283c1a8*, lpNumberOfBytesWritten=0x27e4a8*=0x360, lpOverlapped=0x0) returned 1 [0162.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0162.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\zFOBAfFXviAwx6Jb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\zFOBAfFXviAwx6Jb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0162.717] SetErrorMode (uMode=0x1) returned 0x0 [0162.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x318d7e90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0162.717] SetErrorMode (uMode=0x0) returned 0x1 [0162.717] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\zFOBAfFXviAwx6Jb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\zfobaffxviawx6jb_encrypted_by.whiterose")) returned 1 [0162.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0162.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0162.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0162.827] SetErrorMode (uMode=0x1) returned 0x0 [0162.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0162.827] GetFileType (hFile=0x18c) returned 0x1 [0162.827] SetErrorMode (uMode=0x0) returned 0x1 [0162.827] GetFileType (hFile=0x18c) returned 0x1 [0162.827] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x26d [0162.827] ReadFile (in: hFile=0x18c, lpBuffer=0x283ec90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x283ec90*, lpNumberOfBytesRead=0x27e508*=0x26d, lpOverlapped=0x0) returned 1 [0162.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0162.829] SetErrorMode (uMode=0x1) returned 0x0 [0162.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x26d)) returned 1 [0162.830] SetErrorMode (uMode=0x0) returned 0x1 [0162.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0162.899] SetErrorMode (uMode=0x1) returned 0x0 [0162.899] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0162.900] GetFileType (hFile=0x18c) returned 0x1 [0162.900] SetErrorMode (uMode=0x0) returned 0x1 [0162.900] GetFileType (hFile=0x18c) returned 0x1 [0162.900] WriteFile (in: hFile=0x18c, lpBuffer=0x289c0f8*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x289c0f8*, lpNumberOfBytesWritten=0x27e4a8*=0x370, lpOverlapped=0x0) returned 1 [0162.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0162.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\PknxeKvlsAZdoOwj_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\PknxeKvlsAZdoOwj_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0162.902] SetErrorMode (uMode=0x1) returned 0x0 [0162.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31aa0f10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0162.902] SetErrorMode (uMode=0x0) returned 0x1 [0162.902] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\PknxeKvlsAZdoOwj_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\pknxekvlsazdoowj_encrypted_by.whiterose")) returned 1 [0162.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0162.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0162.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0162.999] SetErrorMode (uMode=0x1) returned 0x0 [0162.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.000] GetFileType (hFile=0x18c) returned 0x1 [0163.000] SetErrorMode (uMode=0x0) returned 0x1 [0163.000] GetFileType (hFile=0x18c) returned 0x1 [0163.000] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x492 [0163.001] ReadFile (in: hFile=0x18c, lpBuffer=0x289edf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x289edf8*, lpNumberOfBytesRead=0x27e508*=0x492, lpOverlapped=0x0) returned 1 [0163.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0163.003] SetErrorMode (uMode=0x1) returned 0x0 [0163.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x492)) returned 1 [0163.004] SetErrorMode (uMode=0x0) returned 0x1 [0163.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0163.068] SetErrorMode (uMode=0x1) returned 0x0 [0163.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.070] GetFileType (hFile=0x18c) returned 0x1 [0163.070] SetErrorMode (uMode=0x0) returned 0x1 [0163.070] GetFileType (hFile=0x18c) returned 0x1 [0163.070] WriteFile (in: hFile=0x18c, lpBuffer=0x28fd0e8*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x28fd0e8*, lpNumberOfBytesWritten=0x27e4a8*=0x5a0, lpOverlapped=0x0) returned 1 [0163.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0163.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*vU4rb99CEXIXMd8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*vU4rb99CEXIXMd8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0163.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0163.078] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 1 [0163.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0163.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0163.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0163.081] SetErrorMode (uMode=0x1) returned 0x0 [0163.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.082] GetFileType (hFile=0x18c) returned 0x1 [0163.082] SetErrorMode (uMode=0x0) returned 0x1 [0163.082] GetFileType (hFile=0x18c) returned 0x1 [0163.082] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4e2 [0163.082] ReadFile (in: hFile=0x18c, lpBuffer=0x2900308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2900308*, lpNumberOfBytesRead=0x27e508*=0x4e2, lpOverlapped=0x0) returned 1 [0163.084] CloseHandle (hObject=0x18c) returned 1 [0163.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0163.084] SetErrorMode (uMode=0x1) returned 0x0 [0163.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4e2)) returned 1 [0163.085] SetErrorMode (uMode=0x0) returned 0x1 [0163.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0163.200] SetErrorMode (uMode=0x1) returned 0x0 [0163.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.201] GetFileType (hFile=0x18c) returned 0x1 [0163.201] SetErrorMode (uMode=0x0) returned 0x1 [0163.201] GetFileType (hFile=0x18c) returned 0x1 [0163.201] WriteFile (in: hFile=0x18c, lpBuffer=0x275e688*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x275e688*, lpNumberOfBytesWritten=0x27e4a8*=0x5f0, lpOverlapped=0x0) returned 1 [0163.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0163.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UoqGEl5ggpqCzmPP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UoqGEl5ggpqCzmPP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0163.202] SetErrorMode (uMode=0x1) returned 0x0 [0163.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31d9aa90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0163.203] SetErrorMode (uMode=0x0) returned 0x1 [0163.203] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UoqGEl5ggpqCzmPP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\uoqgel5ggpqczmpp_encrypted_by.whiterose")) returned 1 [0163.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.310] SetErrorMode (uMode=0x1) returned 0x0 [0163.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.311] GetFileType (hFile=0x18c) returned 0x1 [0163.311] SetErrorMode (uMode=0x0) returned 0x1 [0163.311] GetFileType (hFile=0x18c) returned 0x1 [0163.311] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x2bd [0163.311] ReadFile (in: hFile=0x18c, lpBuffer=0x2761160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2761160*, lpNumberOfBytesRead=0x27e508*=0x2bd, lpOverlapped=0x0) returned 1 [0163.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.313] SetErrorMode (uMode=0x1) returned 0x0 [0163.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd)) returned 1 [0163.313] SetErrorMode (uMode=0x0) returned 0x1 [0163.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.373] SetErrorMode (uMode=0x1) returned 0x0 [0163.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.374] GetFileType (hFile=0x18c) returned 0x1 [0163.374] SetErrorMode (uMode=0x0) returned 0x1 [0163.374] GetFileType (hFile=0x18c) returned 0x1 [0163.375] WriteFile (in: hFile=0x18c, lpBuffer=0x27be498*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x27be498*, lpNumberOfBytesWritten=0x27e4a8*=0x3c0, lpOverlapped=0x0) returned 1 [0163.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*4ZDiQVFcHPir7CY_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*4ZDiQVFcHPir7CY_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0163.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0163.382] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 1 [0163.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0163.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0163.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0163.392] SetErrorMode (uMode=0x1) returned 0x0 [0163.392] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.393] GetFileType (hFile=0x18c) returned 0x1 [0163.393] SetErrorMode (uMode=0x0) returned 0x1 [0163.394] GetFileType (hFile=0x18c) returned 0x1 [0163.394] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x222 [0163.394] ReadFile (in: hFile=0x18c, lpBuffer=0x27c1338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27c1338*, lpNumberOfBytesRead=0x27e508*=0x222, lpOverlapped=0x0) returned 1 [0163.395] CloseHandle (hObject=0x18c) returned 1 [0163.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0163.395] SetErrorMode (uMode=0x1) returned 0x0 [0163.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x222)) returned 1 [0163.396] SetErrorMode (uMode=0x0) returned 0x1 [0163.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0163.489] SetErrorMode (uMode=0x1) returned 0x0 [0163.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.490] GetFileType (hFile=0x18c) returned 0x1 [0163.490] SetErrorMode (uMode=0x0) returned 0x1 [0163.490] GetFileType (hFile=0x18c) returned 0x1 [0163.490] WriteFile (in: hFile=0x18c, lpBuffer=0x281e4c8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x281e4c8*, lpNumberOfBytesWritten=0x27e4a8*=0x330, lpOverlapped=0x0) returned 1 [0163.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0163.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UWvhw1RNRshb5GdG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UWvhw1RNRshb5GdG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0163.491] SetErrorMode (uMode=0x1) returned 0x0 [0163.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32048350, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0163.491] SetErrorMode (uMode=0x0) returned 0x1 [0163.492] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UWvhw1RNRshb5GdG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\uwvhw1rnrshb5gdg_encrypted_by.whiterose")) returned 1 [0163.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0163.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0163.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0163.591] SetErrorMode (uMode=0x1) returned 0x0 [0163.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.592] GetFileType (hFile=0x18c) returned 0x1 [0163.592] SetErrorMode (uMode=0x0) returned 0x1 [0163.592] GetFileType (hFile=0x18c) returned 0x1 [0163.592] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x499 [0163.592] ReadFile (in: hFile=0x18c, lpBuffer=0x2821150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2821150*, lpNumberOfBytesRead=0x27e508*=0x499, lpOverlapped=0x0) returned 1 [0163.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0163.594] SetErrorMode (uMode=0x1) returned 0x0 [0163.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x499)) returned 1 [0163.594] SetErrorMode (uMode=0x0) returned 0x1 [0163.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0163.650] SetErrorMode (uMode=0x1) returned 0x0 [0163.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.651] GetFileType (hFile=0x18c) returned 0x1 [0163.651] SetErrorMode (uMode=0x0) returned 0x1 [0163.651] GetFileType (hFile=0x18c) returned 0x1 [0163.651] WriteFile (in: hFile=0x18c, lpBuffer=0x287f4a8*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x287f4a8*, lpNumberOfBytesWritten=0x27e4a8*=0x5a0, lpOverlapped=0x0) returned 1 [0163.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0163.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XvoCapPDZjQGBhis_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XvoCapPDZjQGBhis_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0163.652] SetErrorMode (uMode=0x1) returned 0x0 [0163.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x321c5110, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0163.653] SetErrorMode (uMode=0x0) returned 0x1 [0163.653] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XvoCapPDZjQGBhis_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xvocappdzjqgbhis_encrypted_by.whiterose")) returned 1 [0163.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0163.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0163.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0163.767] SetErrorMode (uMode=0x1) returned 0x0 [0163.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.778] GetFileType (hFile=0x18c) returned 0x1 [0163.778] SetErrorMode (uMode=0x0) returned 0x1 [0163.778] GetFileType (hFile=0x18c) returned 0x1 [0163.778] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x341 [0163.778] ReadFile (in: hFile=0x18c, lpBuffer=0x2882028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2882028*, lpNumberOfBytesRead=0x27e508*=0x341, lpOverlapped=0x0) returned 1 [0163.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0163.780] SetErrorMode (uMode=0x1) returned 0x0 [0163.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x341)) returned 1 [0163.780] SetErrorMode (uMode=0x0) returned 0x1 [0163.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0163.836] SetErrorMode (uMode=0x1) returned 0x0 [0163.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.838] GetFileType (hFile=0x18c) returned 0x1 [0163.838] SetErrorMode (uMode=0x0) returned 0x1 [0163.838] GetFileType (hFile=0x18c) returned 0x1 [0163.838] WriteFile (in: hFile=0x18c, lpBuffer=0x28df7e8*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x28df7e8*, lpNumberOfBytesWritten=0x27e4a8*=0x450, lpOverlapped=0x0) returned 1 [0163.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0163.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\OYDjPITVfKyYRMHS_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\OYDjPITVfKyYRMHS_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0163.839] SetErrorMode (uMode=0x1) returned 0x0 [0163.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3238e190, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0163.839] SetErrorMode (uMode=0x0) returned 0x1 [0163.839] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\OYDjPITVfKyYRMHS_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\oydjpitvfkyyrmhs_encrypted_by.whiterose")) returned 1 [0163.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0163.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0163.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0163.956] SetErrorMode (uMode=0x1) returned 0x0 [0163.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0163.958] GetFileType (hFile=0x18c) returned 0x1 [0163.958] SetErrorMode (uMode=0x0) returned 0x1 [0163.958] GetFileType (hFile=0x18c) returned 0x1 [0163.958] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x585 [0163.958] ReadFile (in: hFile=0x18c, lpBuffer=0x28e2568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28e2568*, lpNumberOfBytesRead=0x27e508*=0x585, lpOverlapped=0x0) returned 1 [0163.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0163.960] SetErrorMode (uMode=0x1) returned 0x0 [0163.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x585)) returned 1 [0163.960] SetErrorMode (uMode=0x0) returned 0x1 [0164.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0164.022] SetErrorMode (uMode=0x1) returned 0x0 [0164.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.023] GetFileType (hFile=0x18c) returned 0x1 [0164.024] SetErrorMode (uMode=0x0) returned 0x1 [0164.024] GetFileType (hFile=0x18c) returned 0x1 [0164.024] WriteFile (in: hFile=0x18c, lpBuffer=0x2740df8*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x2740df8*, lpNumberOfBytesWritten=0x27e4a8*=0x690, lpOverlapped=0x0) returned 1 [0164.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0164.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\vQkef0FJoHkXp5BF_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\vQkef0FJoHkXp5BF_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0164.025] SetErrorMode (uMode=0x1) returned 0x0 [0164.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32557210, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0164.025] SetErrorMode (uMode=0x0) returned 0x1 [0164.025] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\vQkef0FJoHkXp5BF_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\vqkef0fjohkxp5bf_encrypted_by.whiterose")) returned 1 [0164.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.140] SetErrorMode (uMode=0x1) returned 0x0 [0164.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.141] GetFileType (hFile=0x18c) returned 0x1 [0164.141] SetErrorMode (uMode=0x0) returned 0x1 [0164.141] GetFileType (hFile=0x18c) returned 0x1 [0164.141] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x303 [0164.141] ReadFile (in: hFile=0x18c, lpBuffer=0x2743908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2743908*, lpNumberOfBytesRead=0x27e508*=0x303, lpOverlapped=0x0) returned 1 [0164.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.144] SetErrorMode (uMode=0x1) returned 0x0 [0164.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x303)) returned 1 [0164.145] SetErrorMode (uMode=0x0) returned 0x1 [0164.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.215] SetErrorMode (uMode=0x1) returned 0x0 [0164.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.216] GetFileType (hFile=0x18c) returned 0x1 [0164.216] SetErrorMode (uMode=0x0) returned 0x1 [0164.216] GetFileType (hFile=0x18c) returned 0x1 [0164.216] WriteFile (in: hFile=0x18c, lpBuffer=0x27a0e48*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x27a0e48*, lpNumberOfBytesWritten=0x27e4a8*=0x410, lpOverlapped=0x0) returned 1 [0164.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\cI4*GysywE7XXlur_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\cI4*GysywE7XXlur_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0164.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0164.225] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 1 [0164.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.228] SetErrorMode (uMode=0x1) returned 0x0 [0164.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.229] GetFileType (hFile=0x18c) returned 0x1 [0164.229] SetErrorMode (uMode=0x0) returned 0x1 [0164.229] GetFileType (hFile=0x18c) returned 0x1 [0164.229] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3719 [0164.229] ReadFile (in: hFile=0x18c, lpBuffer=0x27a3ac0, nNumberOfBytesToRead=0x3719, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27a3ac0*, lpNumberOfBytesRead=0x27e508*=0x3719, lpOverlapped=0x0) returned 1 [0164.231] CloseHandle (hObject=0x18c) returned 1 [0164.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.232] SetErrorMode (uMode=0x1) returned 0x0 [0164.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3719)) returned 1 [0164.232] SetErrorMode (uMode=0x0) returned 0x1 [0164.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.344] SetErrorMode (uMode=0x1) returned 0x0 [0164.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.345] GetFileType (hFile=0x18c) returned 0x1 [0164.345] SetErrorMode (uMode=0x0) returned 0x1 [0164.345] GetFileType (hFile=0x18c) returned 0x1 [0164.345] WriteFile (in: hFile=0x18c, lpBuffer=0x28169c0*, nNumberOfBytesToWrite=0x3820, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28169c0*, lpNumberOfBytesWritten=0x27e588*=0x3820, lpOverlapped=0x0) returned 1 [0164.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XAzNTIpGapyQAW7*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XAzNTIpGapyQAW7*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0164.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0164.349] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 1 [0164.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0164.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0164.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0164.352] SetErrorMode (uMode=0x1) returned 0x0 [0164.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.352] GetFileType (hFile=0x18c) returned 0x1 [0164.352] SetErrorMode (uMode=0x0) returned 0x1 [0164.352] GetFileType (hFile=0x18c) returned 0x1 [0164.352] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x83f [0164.352] ReadFile (in: hFile=0x18c, lpBuffer=0x281ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x281ca50*, lpNumberOfBytesRead=0x27e508*=0x83f, lpOverlapped=0x0) returned 1 [0164.354] CloseHandle (hObject=0x18c) returned 1 [0164.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0164.355] SetErrorMode (uMode=0x1) returned 0x0 [0164.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x83f)) returned 1 [0164.358] SetErrorMode (uMode=0x0) returned 0x1 [0164.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0164.450] SetErrorMode (uMode=0x1) returned 0x0 [0164.450] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.451] GetFileType (hFile=0x18c) returned 0x1 [0164.451] SetErrorMode (uMode=0x0) returned 0x1 [0164.451] GetFileType (hFile=0x18c) returned 0x1 [0164.451] WriteFile (in: hFile=0x18c, lpBuffer=0x2879238*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x2879238*, lpNumberOfBytesWritten=0x27e4a8*=0x940, lpOverlapped=0x0) returned 1 [0164.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0164.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\fgWtkXpoDvEqvYAd_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\fgWtkXpoDvEqvYAd_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0164.452] SetErrorMode (uMode=0x1) returned 0x0 [0164.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32981890, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0164.452] SetErrorMode (uMode=0x0) returned 0x1 [0164.452] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\fgWtkXpoDvEqvYAd_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\fgwtkxpodveqvyad_encrypted_by.whiterose")) returned 1 [0164.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0164.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0164.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0164.558] SetErrorMode (uMode=0x1) returned 0x0 [0164.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.565] GetFileType (hFile=0x18c) returned 0x1 [0164.566] SetErrorMode (uMode=0x0) returned 0x1 [0164.566] GetFileType (hFile=0x18c) returned 0x1 [0164.566] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x85a [0164.566] ReadFile (in: hFile=0x18c, lpBuffer=0x287c310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x287c310*, lpNumberOfBytesRead=0x27e508*=0x85a, lpOverlapped=0x0) returned 1 [0164.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0164.570] SetErrorMode (uMode=0x1) returned 0x0 [0164.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x85a)) returned 1 [0164.570] SetErrorMode (uMode=0x0) returned 0x1 [0164.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0164.632] SetErrorMode (uMode=0x1) returned 0x0 [0164.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.633] GetFileType (hFile=0x18c) returned 0x1 [0164.633] SetErrorMode (uMode=0x0) returned 0x1 [0164.633] GetFileType (hFile=0x18c) returned 0x1 [0164.633] WriteFile (in: hFile=0x18c, lpBuffer=0x28dba98*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x28dba98*, lpNumberOfBytesWritten=0x27e4a8*=0x960, lpOverlapped=0x0) returned 1 [0164.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0164.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\0ej2Ls7LCTfDnnam_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\0ej2Ls7LCTfDnnam_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0164.635] SetErrorMode (uMode=0x1) returned 0x0 [0164.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b247b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0164.635] SetErrorMode (uMode=0x0) returned 0x1 [0164.635] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\0ej2Ls7LCTfDnnam_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\0ej2ls7lctfdnnam_encrypted_by.whiterose")) returned 1 [0164.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0164.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0164.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0164.764] SetErrorMode (uMode=0x1) returned 0x0 [0164.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.765] GetFileType (hFile=0x18c) returned 0x1 [0164.765] SetErrorMode (uMode=0x0) returned 0x1 [0164.765] GetFileType (hFile=0x18c) returned 0x1 [0164.765] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3b8 [0164.765] ReadFile (in: hFile=0x18c, lpBuffer=0x28de688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28de688*, lpNumberOfBytesRead=0x27e508*=0x3b8, lpOverlapped=0x0) returned 1 [0164.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0164.779] SetErrorMode (uMode=0x1) returned 0x0 [0164.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3b8)) returned 1 [0164.779] SetErrorMode (uMode=0x0) returned 0x1 [0164.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0164.840] SetErrorMode (uMode=0x1) returned 0x0 [0164.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.841] GetFileType (hFile=0x18c) returned 0x1 [0164.841] SetErrorMode (uMode=0x0) returned 0x1 [0164.842] GetFileType (hFile=0x18c) returned 0x1 [0164.842] WriteFile (in: hFile=0x18c, lpBuffer=0x273bd70*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x273bd70*, lpNumberOfBytesWritten=0x27e4a8*=0x4c0, lpOverlapped=0x0) returned 1 [0164.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0164.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\bNdlpS4BJKO8WZg0_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\bNdlpS4BJKO8WZg0_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0164.843] SetErrorMode (uMode=0x1) returned 0x0 [0164.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32d39af0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0164.843] SetErrorMode (uMode=0x0) returned 0x1 [0164.843] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\bNdlpS4BJKO8WZg0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\bndlps4bjko8wzg0_encrypted_by.whiterose")) returned 1 [0164.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0164.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0164.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0164.949] SetErrorMode (uMode=0x1) returned 0x0 [0164.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0164.949] GetFileType (hFile=0x18c) returned 0x1 [0164.949] SetErrorMode (uMode=0x0) returned 0x1 [0164.949] GetFileType (hFile=0x18c) returned 0x1 [0164.949] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x3d4 [0164.950] ReadFile (in: hFile=0x18c, lpBuffer=0x273e9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x273e9c0*, lpNumberOfBytesRead=0x27e508*=0x3d4, lpOverlapped=0x0) returned 1 [0164.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0164.958] SetErrorMode (uMode=0x1) returned 0x0 [0164.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3d4)) returned 1 [0164.958] SetErrorMode (uMode=0x0) returned 0x1 [0165.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0165.019] SetErrorMode (uMode=0x1) returned 0x0 [0165.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.020] GetFileType (hFile=0x18c) returned 0x1 [0165.020] SetErrorMode (uMode=0x0) returned 0x1 [0165.020] GetFileType (hFile=0x18c) returned 0x1 [0165.020] WriteFile (in: hFile=0x18c, lpBuffer=0x279c6b8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x279c6b8*, lpNumberOfBytesWritten=0x27e4a8*=0x4e0, lpOverlapped=0x0) returned 1 [0165.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0165.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TFWfQhPpRIA8tgaW_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TFWfQhPpRIA8tgaW_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0165.022] SetErrorMode (uMode=0x1) returned 0x0 [0165.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32edca10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0165.022] SetErrorMode (uMode=0x0) returned 0x1 [0165.022] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TFWfQhPpRIA8tgaW_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\tfwfqhppria8tgaw_encrypted_by.whiterose")) returned 1 [0165.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.120] SetErrorMode (uMode=0x1) returned 0x0 [0165.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.121] GetFileType (hFile=0x18c) returned 0x1 [0165.121] SetErrorMode (uMode=0x0) returned 0x1 [0165.121] GetFileType (hFile=0x18c) returned 0x1 [0165.121] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x226 [0165.121] ReadFile (in: hFile=0x18c, lpBuffer=0x279f118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x279f118*, lpNumberOfBytesRead=0x27e508*=0x226, lpOverlapped=0x0) returned 1 [0165.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.123] SetErrorMode (uMode=0x1) returned 0x0 [0165.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x226)) returned 1 [0165.123] SetErrorMode (uMode=0x0) returned 0x1 [0165.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.192] SetErrorMode (uMode=0x1) returned 0x0 [0165.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.194] GetFileType (hFile=0x18c) returned 0x1 [0165.194] SetErrorMode (uMode=0x0) returned 0x1 [0165.194] GetFileType (hFile=0x18c) returned 0x1 [0165.194] WriteFile (in: hFile=0x18c, lpBuffer=0x27fc1b8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x27fc1b8*, lpNumberOfBytesWritten=0x27e4a8*=0x330, lpOverlapped=0x0) returned 1 [0165.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\K0*YuBUI09ioJLzl_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\K0*YuBUI09ioJLzl_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0165.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0165.203] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 1 [0165.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.206] SetErrorMode (uMode=0x1) returned 0x0 [0165.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.208] GetFileType (hFile=0x18c) returned 0x1 [0165.208] SetErrorMode (uMode=0x0) returned 0x1 [0165.208] GetFileType (hFile=0x18c) returned 0x1 [0165.208] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x59c [0165.208] ReadFile (in: hFile=0x18c, lpBuffer=0x27ff3e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27ff3e8*, lpNumberOfBytesRead=0x27e508*=0x59c, lpOverlapped=0x0) returned 1 [0165.210] CloseHandle (hObject=0x18c) returned 1 [0165.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.210] SetErrorMode (uMode=0x1) returned 0x0 [0165.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1 [0165.211] SetErrorMode (uMode=0x0) returned 0x1 [0165.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.320] SetErrorMode (uMode=0x1) returned 0x0 [0165.320] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.321] GetFileType (hFile=0x18c) returned 0x1 [0165.321] SetErrorMode (uMode=0x0) returned 0x1 [0165.321] GetFileType (hFile=0x18c) returned 0x1 [0165.321] WriteFile (in: hFile=0x18c, lpBuffer=0x285de78*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x285de78*, lpNumberOfBytesWritten=0x27e4a8*=0x6a0, lpOverlapped=0x0) returned 1 [0165.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\u3GCILQQNULhll*5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\u3GCILQQNULhll*5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0165.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0165.325] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 1 [0165.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0165.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0165.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0165.328] SetErrorMode (uMode=0x1) returned 0x0 [0165.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.328] GetFileType (hFile=0x18c) returned 0x1 [0165.328] SetErrorMode (uMode=0x0) returned 0x1 [0165.328] GetFileType (hFile=0x18c) returned 0x1 [0165.328] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x558 [0165.328] ReadFile (in: hFile=0x18c, lpBuffer=0x2861060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2861060*, lpNumberOfBytesRead=0x27e508*=0x558, lpOverlapped=0x0) returned 1 [0165.330] CloseHandle (hObject=0x18c) returned 1 [0165.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0165.331] SetErrorMode (uMode=0x1) returned 0x0 [0165.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x558)) returned 1 [0165.331] SetErrorMode (uMode=0x0) returned 0x1 [0165.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0165.425] SetErrorMode (uMode=0x1) returned 0x0 [0165.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.426] GetFileType (hFile=0x18c) returned 0x1 [0165.426] SetErrorMode (uMode=0x0) returned 0x1 [0165.426] GetFileType (hFile=0x18c) returned 0x1 [0165.426] WriteFile (in: hFile=0x18c, lpBuffer=0x28bf550*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x28bf550*, lpNumberOfBytesWritten=0x27e4a8*=0x660, lpOverlapped=0x0) returned 1 [0165.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0165.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\NH4i01RyfZRSgnF9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\NH4i01RyfZRSgnF9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0165.427] SetErrorMode (uMode=0x1) returned 0x0 [0165.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x332badd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0165.428] SetErrorMode (uMode=0x0) returned 0x1 [0165.428] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\NH4i01RyfZRSgnF9_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\nh4i01ryfzrsgnf9_encrypted_by.whiterose")) returned 1 [0165.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0165.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0165.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0165.526] SetErrorMode (uMode=0x1) returned 0x0 [0165.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.527] GetFileType (hFile=0x18c) returned 0x1 [0165.527] SetErrorMode (uMode=0x0) returned 0x1 [0165.527] GetFileType (hFile=0x18c) returned 0x1 [0165.527] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x251 [0165.527] ReadFile (in: hFile=0x18c, lpBuffer=0x28c1f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28c1f90*, lpNumberOfBytesRead=0x27e508*=0x251, lpOverlapped=0x0) returned 1 [0165.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0165.528] SetErrorMode (uMode=0x1) returned 0x0 [0165.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251)) returned 1 [0165.528] SetErrorMode (uMode=0x0) returned 0x1 [0165.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0165.590] SetErrorMode (uMode=0x1) returned 0x0 [0165.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.591] GetFileType (hFile=0x18c) returned 0x1 [0165.591] SetErrorMode (uMode=0x0) returned 0x1 [0165.591] GetFileType (hFile=0x18c) returned 0x1 [0165.591] WriteFile (in: hFile=0x18c, lpBuffer=0x291efb8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x291efb8*, lpNumberOfBytesWritten=0x27e4a8*=0x360, lpOverlapped=0x0) returned 1 [0165.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0165.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\kYeplwmTetGA0s4h_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\kYeplwmTetGA0s4h_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0165.592] SetErrorMode (uMode=0x1) returned 0x0 [0165.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3345dcf0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0165.593] SetErrorMode (uMode=0x0) returned 0x1 [0165.593] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\kYeplwmTetGA0s4h_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\kyeplwmtetga0s4h_encrypted_by.whiterose")) returned 1 [0165.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x75 [0165.701] SetErrorMode (uMode=0x1) returned 0x0 [0165.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0165.702] GetFileType (hFile=0x18c) returned 0x1 [0165.702] SetErrorMode (uMode=0x0) returned 0x1 [0165.702] GetFileType (hFile=0x18c) returned 0x1 [0165.704] WriteFile (in: hFile=0x18c, lpBuffer=0x273a118*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x273a118*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0165.705] WriteFile (in: hFile=0x18c, lpBuffer=0x273a118*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x273a118*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0165.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x70 [0165.706] SetErrorMode (uMode=0x1) returned 0x0 [0165.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0165.706] GetFileType (hFile=0x18c) returned 0x1 [0165.706] SetErrorMode (uMode=0x0) returned 0x1 [0165.706] GetFileType (hFile=0x18c) returned 0x1 [0165.708] WriteFile (in: hFile=0x18c, lpBuffer=0x2750298*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x2750298*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0165.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", lpFilePart=0x0) returned 0x5b [0165.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", lpFilePart=0x0) returned 0x5b [0165.710] SetErrorMode (uMode=0x1) returned 0x0 [0165.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0165.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0165.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0165.711] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0165.712] SetErrorMode (uMode=0x0) returned 0x1 [0165.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", lpFilePart=0x0) returned 0x5b [0165.712] SetErrorMode (uMode=0x1) returned 0x0 [0165.712] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0165.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0165.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0165.713] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0165.713] SetErrorMode (uMode=0x0) returned 0x1 [0165.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", lpFilePart=0x0) returned 0x60 [0165.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", lpFilePart=0x0) returned 0x60 [0165.713] SetErrorMode (uMode=0x1) returned 0x0 [0165.714] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0165.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0165.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0165.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0165.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0165.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0165.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0 [0165.718] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0165.719] SetErrorMode (uMode=0x0) returned 0x1 [0165.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", lpFilePart=0x0) returned 0x60 [0165.719] SetErrorMode (uMode=0x1) returned 0x0 [0165.719] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0165.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0165.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0165.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0165.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0165.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0 [0165.723] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0165.724] SetErrorMode (uMode=0x0) returned 0x1 [0165.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0165.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0165.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0165.724] SetErrorMode (uMode=0x1) returned 0x0 [0165.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.725] GetFileType (hFile=0x18c) returned 0x1 [0165.725] SetErrorMode (uMode=0x0) returned 0x1 [0165.725] GetFileType (hFile=0x18c) returned 0x1 [0165.726] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x45d [0165.726] ReadFile (in: hFile=0x18c, lpBuffer=0x275d3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x275d3b8*, lpNumberOfBytesRead=0x27e508*=0x45d, lpOverlapped=0x0) returned 1 [0165.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0165.729] SetErrorMode (uMode=0x1) returned 0x0 [0165.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0165.729] SetErrorMode (uMode=0x0) returned 0x1 [0165.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0165.805] SetErrorMode (uMode=0x1) returned 0x0 [0165.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.806] GetFileType (hFile=0x18c) returned 0x1 [0165.806] SetErrorMode (uMode=0x0) returned 0x1 [0165.806] GetFileType (hFile=0x18c) returned 0x1 [0165.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0165.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\x0ExdOBcvOalngEH_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\x0ExdOBcvOalngEH_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0165.808] SetErrorMode (uMode=0x1) returned 0x0 [0165.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33673030, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0165.808] SetErrorMode (uMode=0x0) returned 0x1 [0165.808] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\x0ExdOBcvOalngEH_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\x0exdobcvoalngeh_encrypted_by.whiterose")) returned 1 [0165.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0165.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0165.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0165.916] SetErrorMode (uMode=0x1) returned 0x0 [0165.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0165.916] GetFileType (hFile=0x18c) returned 0x1 [0165.916] SetErrorMode (uMode=0x0) returned 0x1 [0165.916] GetFileType (hFile=0x18c) returned 0x1 [0165.916] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x485 [0165.916] ReadFile (in: hFile=0x18c, lpBuffer=0x27b6580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27b6580*, lpNumberOfBytesRead=0x27e508*=0x485, lpOverlapped=0x0) returned 1 [0165.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0165.918] SetErrorMode (uMode=0x1) returned 0x0 [0165.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1 [0165.918] SetErrorMode (uMode=0x0) returned 0x1 [0165.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0165.999] SetErrorMode (uMode=0x1) returned 0x0 [0165.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.003] GetFileType (hFile=0x18c) returned 0x1 [0166.003] SetErrorMode (uMode=0x0) returned 0x1 [0166.003] GetFileType (hFile=0x18c) returned 0x1 [0166.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0166.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\6pREql8yuh15fm4Q_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\6pREql8yuh15fm4Q_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0166.006] SetErrorMode (uMode=0x1) returned 0x0 [0166.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3383c0b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0166.006] SetErrorMode (uMode=0x0) returned 0x1 [0166.006] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\6pREql8yuh15fm4Q_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\6preql8yuh15fm4q_encrypted_by.whiterose")) returned 1 [0166.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0166.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0166.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0166.119] SetErrorMode (uMode=0x1) returned 0x0 [0166.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.120] GetFileType (hFile=0x18c) returned 0x1 [0166.120] SetErrorMode (uMode=0x0) returned 0x1 [0166.120] GetFileType (hFile=0x18c) returned 0x1 [0166.120] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x24d [0166.120] ReadFile (in: hFile=0x18c, lpBuffer=0x2817188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2817188*, lpNumberOfBytesRead=0x27e508*=0x24d, lpOverlapped=0x0) returned 1 [0166.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0166.121] SetErrorMode (uMode=0x1) returned 0x0 [0166.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d)) returned 1 [0166.122] SetErrorMode (uMode=0x0) returned 0x1 [0166.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0166.183] SetErrorMode (uMode=0x1) returned 0x0 [0166.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.185] GetFileType (hFile=0x18c) returned 0x1 [0166.185] SetErrorMode (uMode=0x0) returned 0x1 [0166.185] GetFileType (hFile=0x18c) returned 0x1 [0166.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0166.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\9YKZ6K5oB0yxNZ0C_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\9YKZ6K5oB0yxNZ0C_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0166.186] SetErrorMode (uMode=0x1) returned 0x0 [0166.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33a05130, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0166.187] SetErrorMode (uMode=0x0) returned 0x1 [0166.187] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\9YKZ6K5oB0yxNZ0C_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\9ykz6k5ob0yxnz0c_encrypted_by.whiterose")) returned 1 [0166.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0166.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0166.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0166.290] SetErrorMode (uMode=0x1) returned 0x0 [0166.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.291] GetFileType (hFile=0x18c) returned 0x1 [0166.291] SetErrorMode (uMode=0x0) returned 0x1 [0166.291] GetFileType (hFile=0x18c) returned 0x1 [0166.291] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4a8 [0166.291] ReadFile (in: hFile=0x18c, lpBuffer=0x2876f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2876f08*, lpNumberOfBytesRead=0x27e508*=0x4a8, lpOverlapped=0x0) returned 1 [0166.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0166.301] SetErrorMode (uMode=0x1) returned 0x0 [0166.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8)) returned 1 [0166.301] SetErrorMode (uMode=0x0) returned 0x1 [0166.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0166.369] SetErrorMode (uMode=0x1) returned 0x0 [0166.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.370] GetFileType (hFile=0x18c) returned 0x1 [0166.370] SetErrorMode (uMode=0x0) returned 0x1 [0166.370] GetFileType (hFile=0x18c) returned 0x1 [0166.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0166.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ZrYHJ59GTzgP4sx4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ZrYHJ59GTzgP4sx4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0166.371] SetErrorMode (uMode=0x1) returned 0x0 [0166.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bce1b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0166.372] SetErrorMode (uMode=0x0) returned 0x1 [0166.372] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ZrYHJ59GTzgP4sx4_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\zryhj59gtzgp4sx4_encrypted_by.whiterose")) returned 1 [0166.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.478] SetErrorMode (uMode=0x1) returned 0x0 [0166.478] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.478] GetFileType (hFile=0x18c) returned 0x1 [0166.478] SetErrorMode (uMode=0x0) returned 0x1 [0166.478] GetFileType (hFile=0x18c) returned 0x1 [0166.478] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x7f4 [0166.478] ReadFile (in: hFile=0x18c, lpBuffer=0x28d82c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28d82c8*, lpNumberOfBytesRead=0x27e508*=0x7f4, lpOverlapped=0x0) returned 1 [0166.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.480] SetErrorMode (uMode=0x1) returned 0x0 [0166.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4)) returned 1 [0166.480] SetErrorMode (uMode=0x0) returned 0x1 [0166.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.549] SetErrorMode (uMode=0x1) returned 0x0 [0166.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.550] GetFileType (hFile=0x18c) returned 0x1 [0166.550] SetErrorMode (uMode=0x0) returned 0x1 [0166.550] GetFileType (hFile=0x18c) returned 0x1 [0166.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\GiGB*tUu3w4PAKqP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\GiGB*tUu3w4PAKqP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0166.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0166.563] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 1 [0166.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0166.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0166.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0166.565] SetErrorMode (uMode=0x1) returned 0x0 [0166.565] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.565] GetFileType (hFile=0x18c) returned 0x1 [0166.565] SetErrorMode (uMode=0x0) returned 0x1 [0166.565] GetFileType (hFile=0x18c) returned 0x1 [0166.565] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x35b [0166.565] ReadFile (in: hFile=0x18c, lpBuffer=0x273ab80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x273ab80*, lpNumberOfBytesRead=0x27e508*=0x35b, lpOverlapped=0x0) returned 1 [0166.567] CloseHandle (hObject=0x18c) returned 1 [0166.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0166.568] SetErrorMode (uMode=0x1) returned 0x0 [0166.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b)) returned 1 [0166.568] SetErrorMode (uMode=0x0) returned 0x1 [0166.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0166.700] SetErrorMode (uMode=0x1) returned 0x0 [0166.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.701] GetFileType (hFile=0x18c) returned 0x1 [0166.701] SetErrorMode (uMode=0x0) returned 0x1 [0166.702] GetFileType (hFile=0x18c) returned 0x1 [0166.702] WriteFile (in: hFile=0x18c, lpBuffer=0x27980a8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x27980a8*, lpNumberOfBytesWritten=0x27e4a8*=0x460, lpOverlapped=0x0) returned 1 [0166.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0166.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\qbcfnDRCFhvIdk3x_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\qbcfnDRCFhvIdk3x_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0166.704] SetErrorMode (uMode=0x1) returned 0x0 [0166.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33eede90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0166.704] SetErrorMode (uMode=0x0) returned 0x1 [0166.704] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\qbcfnDRCFhvIdk3x_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\qbcfndrcfhvidk3x_encrypted_by.whiterose")) returned 1 [0166.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0166.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0166.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0166.812] SetErrorMode (uMode=0x1) returned 0x0 [0166.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.813] GetFileType (hFile=0x18c) returned 0x1 [0166.813] SetErrorMode (uMode=0x0) returned 0x1 [0166.813] GetFileType (hFile=0x18c) returned 0x1 [0166.813] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4faa [0166.813] ReadFile (in: hFile=0x18c, lpBuffer=0x279a910, nNumberOfBytesToRead=0x4faa, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x279a910*, lpNumberOfBytesRead=0x27e508*=0x4faa, lpOverlapped=0x0) returned 1 [0166.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0166.815] SetErrorMode (uMode=0x1) returned 0x0 [0166.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa)) returned 1 [0166.816] SetErrorMode (uMode=0x0) returned 0x1 [0166.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0166.883] SetErrorMode (uMode=0x1) returned 0x0 [0166.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.884] GetFileType (hFile=0x18c) returned 0x1 [0166.884] SetErrorMode (uMode=0x0) returned 0x1 [0166.884] GetFileType (hFile=0x18c) returned 0x1 [0166.885] WriteFile (in: hFile=0x18c, lpBuffer=0x28183e8*, nNumberOfBytesToWrite=0x50b0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28183e8*, lpNumberOfBytesWritten=0x27e588*=0x50b0, lpOverlapped=0x0) returned 1 [0166.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0166.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\3yXCe8S4BtHT6o2F_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\3yXCe8S4BtHT6o2F_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0166.886] SetErrorMode (uMode=0x1) returned 0x0 [0166.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x340b6f10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x50b0)) returned 1 [0166.886] SetErrorMode (uMode=0x0) returned 0x1 [0166.886] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\3yXCe8S4BtHT6o2F_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\3yxce8s4btht6o2f_encrypted_by.whiterose")) returned 1 [0166.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0166.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0166.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0166.992] SetErrorMode (uMode=0x1) returned 0x0 [0166.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0166.992] GetFileType (hFile=0x18c) returned 0x1 [0166.992] SetErrorMode (uMode=0x0) returned 0x1 [0166.992] GetFileType (hFile=0x18c) returned 0x1 [0166.993] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x514 [0166.993] ReadFile (in: hFile=0x18c, lpBuffer=0x281f598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x281f598*, lpNumberOfBytesRead=0x27e508*=0x514, lpOverlapped=0x0) returned 1 [0167.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0167.020] SetErrorMode (uMode=0x1) returned 0x0 [0167.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0167.020] SetErrorMode (uMode=0x0) returned 0x1 [0167.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0167.090] SetErrorMode (uMode=0x1) returned 0x0 [0167.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.092] GetFileType (hFile=0x18c) returned 0x1 [0167.092] SetErrorMode (uMode=0x0) returned 0x1 [0167.092] GetFileType (hFile=0x18c) returned 0x1 [0167.092] WriteFile (in: hFile=0x18c, lpBuffer=0x2878ec8*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x2878ec8*, lpNumberOfBytesWritten=0x27e4a8*=0x620, lpOverlapped=0x0) returned 1 [0167.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0167.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\JpFxFxFRKrsTDGVs_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\JpFxFxFRKrsTDGVs_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0167.093] SetErrorMode (uMode=0x1) returned 0x0 [0167.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342a60f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0167.093] SetErrorMode (uMode=0x0) returned 0x1 [0167.093] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\JpFxFxFRKrsTDGVs_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\jpfxfxfrkrstdgvs_encrypted_by.whiterose")) returned 1 [0167.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0167.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0167.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0167.195] SetErrorMode (uMode=0x1) returned 0x0 [0167.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.196] GetFileType (hFile=0x18c) returned 0x1 [0167.196] SetErrorMode (uMode=0x0) returned 0x1 [0167.196] GetFileType (hFile=0x18c) returned 0x1 [0167.196] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xb090 [0167.196] ReadFile (in: hFile=0x18c, lpBuffer=0x287b710, nNumberOfBytesToRead=0xb090, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x287b710*, lpNumberOfBytesRead=0x27e508*=0xb090, lpOverlapped=0x0) returned 1 [0167.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0167.199] SetErrorMode (uMode=0x1) returned 0x0 [0167.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090)) returned 1 [0167.199] SetErrorMode (uMode=0x0) returned 0x1 [0167.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0167.268] SetErrorMode (uMode=0x1) returned 0x0 [0167.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.270] GetFileType (hFile=0x18c) returned 0x1 [0167.270] SetErrorMode (uMode=0x0) returned 0x1 [0167.270] GetFileType (hFile=0x18c) returned 0x1 [0167.270] WriteFile (in: hFile=0x18c, lpBuffer=0x290d368*, nNumberOfBytesToWrite=0xb1a0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x290d368*, lpNumberOfBytesWritten=0x27e588*=0xb1a0, lpOverlapped=0x0) returned 1 [0167.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0167.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MZyRjWCHRh2nbh1e_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MZyRjWCHRh2nbh1e_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0167.272] SetErrorMode (uMode=0x1) returned 0x0 [0167.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34449010, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0167.272] SetErrorMode (uMode=0x0) returned 0x1 [0167.272] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MZyRjWCHRh2nbh1e_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mzyrjwchrh2nbh1e_encrypted_by.whiterose")) returned 1 [0167.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0167.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0167.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0167.382] SetErrorMode (uMode=0x1) returned 0x0 [0167.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.382] GetFileType (hFile=0x18c) returned 0x1 [0167.382] SetErrorMode (uMode=0x0) returned 0x1 [0167.382] GetFileType (hFile=0x18c) returned 0x1 [0167.382] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x36b7 [0167.382] ReadFile (in: hFile=0x18c, lpBuffer=0x291a108, nNumberOfBytesToRead=0x36b7, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x291a108*, lpNumberOfBytesRead=0x27e508*=0x36b7, lpOverlapped=0x0) returned 1 [0167.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0167.385] SetErrorMode (uMode=0x1) returned 0x0 [0167.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7)) returned 1 [0167.385] SetErrorMode (uMode=0x0) returned 0x1 [0167.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0167.460] SetErrorMode (uMode=0x1) returned 0x0 [0167.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.462] GetFileType (hFile=0x18c) returned 0x1 [0167.462] SetErrorMode (uMode=0x0) returned 0x1 [0167.462] GetFileType (hFile=0x18c) returned 0x1 [0167.462] WriteFile (in: hFile=0x18c, lpBuffer=0x2782008*, nNumberOfBytesToWrite=0x37c0, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x2782008*, lpNumberOfBytesWritten=0x27e588*=0x37c0, lpOverlapped=0x0) returned 1 [0167.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0167.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\tRgMKlowZfMmJzU2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\tRgMKlowZfMmJzU2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0167.463] SetErrorMode (uMode=0x1) returned 0x0 [0167.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x346381f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x37c0)) returned 1 [0167.464] SetErrorMode (uMode=0x0) returned 0x1 [0167.464] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\tRgMKlowZfMmJzU2_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\trgmklowzfmmjzu2_encrypted_by.whiterose")) returned 1 [0167.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.569] SetErrorMode (uMode=0x1) returned 0x0 [0167.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.570] GetFileType (hFile=0x18c) returned 0x1 [0167.570] SetErrorMode (uMode=0x0) returned 0x1 [0167.570] GetFileType (hFile=0x18c) returned 0x1 [0167.570] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x24f [0167.570] ReadFile (in: hFile=0x18c, lpBuffer=0x2787600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2787600*, lpNumberOfBytesRead=0x27e508*=0x24f, lpOverlapped=0x0) returned 1 [0167.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.571] SetErrorMode (uMode=0x1) returned 0x0 [0167.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f)) returned 1 [0167.572] SetErrorMode (uMode=0x0) returned 0x1 [0167.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.632] SetErrorMode (uMode=0x1) returned 0x0 [0167.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.633] GetFileType (hFile=0x18c) returned 0x1 [0167.633] SetErrorMode (uMode=0x0) returned 0x1 [0167.633] GetFileType (hFile=0x18c) returned 0x1 [0167.633] WriteFile (in: hFile=0x18c, lpBuffer=0x27e14d8*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x27e14d8*, lpNumberOfBytesWritten=0x27e4a8*=0x350, lpOverlapped=0x0) returned 1 [0167.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*IZGaMbk9cymhSNO_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*IZGaMbk9cymhSNO_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0167.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0167.645] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 1 [0167.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0167.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0167.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0167.648] SetErrorMode (uMode=0x1) returned 0x0 [0167.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.648] GetFileType (hFile=0x18c) returned 0x1 [0167.648] SetErrorMode (uMode=0x0) returned 0x1 [0167.648] GetFileType (hFile=0x18c) returned 0x1 [0167.648] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x89b [0167.648] ReadFile (in: hFile=0x18c, lpBuffer=0x27e4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27e4ab0*, lpNumberOfBytesRead=0x27e508*=0x89b, lpOverlapped=0x0) returned 1 [0167.650] CloseHandle (hObject=0x18c) returned 1 [0167.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0167.651] SetErrorMode (uMode=0x1) returned 0x0 [0167.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b)) returned 1 [0167.651] SetErrorMode (uMode=0x0) returned 0x1 [0167.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0167.820] SetErrorMode (uMode=0x1) returned 0x0 [0167.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.822] GetFileType (hFile=0x18c) returned 0x1 [0167.822] SetErrorMode (uMode=0x0) returned 0x1 [0167.822] GetFileType (hFile=0x18c) returned 0x1 [0167.822] WriteFile (in: hFile=0x18c, lpBuffer=0x2844a58*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x2844a58*, lpNumberOfBytesWritten=0x27e4a8*=0x9a0, lpOverlapped=0x0) returned 1 [0167.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0167.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UBukoW0sMY2fUrov_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UBukoW0sMY2fUrov_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0167.824] SetErrorMode (uMode=0x1) returned 0x0 [0167.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x349a4190, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0167.824] SetErrorMode (uMode=0x0) returned 0x1 [0167.824] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UBukoW0sMY2fUrov_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\ubukow0smy2furov_encrypted_by.whiterose")) returned 1 [0167.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0167.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0167.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0167.928] SetErrorMode (uMode=0x1) returned 0x0 [0167.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.929] GetFileType (hFile=0x18c) returned 0x1 [0167.929] SetErrorMode (uMode=0x0) returned 0x1 [0167.929] GetFileType (hFile=0x18c) returned 0x1 [0167.929] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x419 [0167.929] ReadFile (in: hFile=0x18c, lpBuffer=0x2847768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x2847768*, lpNumberOfBytesRead=0x27e508*=0x419, lpOverlapped=0x0) returned 1 [0167.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0167.931] SetErrorMode (uMode=0x1) returned 0x0 [0167.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419)) returned 1 [0167.931] SetErrorMode (uMode=0x0) returned 0x1 [0167.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0167.992] SetErrorMode (uMode=0x1) returned 0x0 [0167.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0167.993] GetFileType (hFile=0x18c) returned 0x1 [0167.993] SetErrorMode (uMode=0x0) returned 0x1 [0167.993] GetFileType (hFile=0x18c) returned 0x1 [0167.993] WriteFile (in: hFile=0x18c, lpBuffer=0x28a50c8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x28a50c8*, lpNumberOfBytesWritten=0x27e4a8*=0x520, lpOverlapped=0x0) returned 1 [0168.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0168.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\I5Vjgv4rxA3D6D61_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\I5Vjgv4rxA3D6D61_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0168.002] SetErrorMode (uMode=0x1) returned 0x0 [0168.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34b470b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0168.002] SetErrorMode (uMode=0x0) returned 0x1 [0168.002] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\I5Vjgv4rxA3D6D61_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\i5vjgv4rxa3d6d61_encrypted_by.whiterose")) returned 1 [0168.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0168.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0168.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0168.100] SetErrorMode (uMode=0x1) returned 0x0 [0168.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.100] GetFileType (hFile=0x18c) returned 0x1 [0168.100] SetErrorMode (uMode=0x0) returned 0x1 [0168.100] GetFileType (hFile=0x18c) returned 0x1 [0168.100] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0xec16 [0168.100] ReadFile (in: hFile=0x18c, lpBuffer=0x28a7970, nNumberOfBytesToRead=0xec16, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x28a7970*, lpNumberOfBytesRead=0x27e508*=0xec16, lpOverlapped=0x0) returned 1 [0168.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0168.103] SetErrorMode (uMode=0x1) returned 0x0 [0168.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16)) returned 1 [0168.103] SetErrorMode (uMode=0x0) returned 0x1 [0168.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0168.180] SetErrorMode (uMode=0x1) returned 0x0 [0168.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.182] GetFileType (hFile=0x18c) returned 0x1 [0168.182] SetErrorMode (uMode=0x0) returned 0x1 [0168.182] GetFileType (hFile=0x18c) returned 0x1 [0168.182] WriteFile (in: hFile=0x18c, lpBuffer=0x273a4c8*, nNumberOfBytesToWrite=0xed20, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x273a4c8*, lpNumberOfBytesWritten=0x27e588*=0xed20, lpOverlapped=0x0) returned 1 [0168.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0168.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\4erOsWFdHE20DBMN_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\4erOsWFdHE20DBMN_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0168.184] SetErrorMode (uMode=0x1) returned 0x0 [0168.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34d10130, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xed20)) returned 1 [0168.184] SetErrorMode (uMode=0x0) returned 0x1 [0168.184] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\4erOsWFdHE20DBMN_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\4eroswfdhe20dbmn_encrypted_by.whiterose")) returned 1 [0168.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0168.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0168.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0168.287] SetErrorMode (uMode=0x1) returned 0x0 [0168.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.288] GetFileType (hFile=0x18c) returned 0x1 [0168.288] SetErrorMode (uMode=0x0) returned 0x1 [0168.288] GetFileType (hFile=0x18c) returned 0x1 [0168.288] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x22b [0168.288] ReadFile (in: hFile=0x18c, lpBuffer=0x274b020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x274b020*, lpNumberOfBytesRead=0x27e508*=0x22b, lpOverlapped=0x0) returned 1 [0168.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0168.290] SetErrorMode (uMode=0x1) returned 0x0 [0168.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b)) returned 1 [0168.290] SetErrorMode (uMode=0x0) returned 0x1 [0168.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0168.350] SetErrorMode (uMode=0x1) returned 0x0 [0168.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.352] GetFileType (hFile=0x18c) returned 0x1 [0168.352] SetErrorMode (uMode=0x0) returned 0x1 [0168.352] GetFileType (hFile=0x18c) returned 0x1 [0168.352] WriteFile (in: hFile=0x18c, lpBuffer=0x2799b58*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x2799b58*, lpNumberOfBytesWritten=0x27e4a8*=0x330, lpOverlapped=0x0) returned 1 [0168.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0168.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\goRWldTxXYwVTpnc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\goRWldTxXYwVTpnc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0168.353] SetErrorMode (uMode=0x1) returned 0x0 [0168.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34eb3050, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0168.353] SetErrorMode (uMode=0x0) returned 0x1 [0168.353] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\goRWldTxXYwVTpnc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\gorwldtxxywvtpnc_encrypted_by.whiterose")) returned 1 [0168.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0168.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0168.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0168.459] SetErrorMode (uMode=0x1) returned 0x0 [0168.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.459] GetFileType (hFile=0x18c) returned 0x1 [0168.459] SetErrorMode (uMode=0x0) returned 0x1 [0168.459] GetFileType (hFile=0x18c) returned 0x1 [0168.459] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x5b1 [0168.459] ReadFile (in: hFile=0x18c, lpBuffer=0x279c988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x279c988*, lpNumberOfBytesRead=0x27e508*=0x5b1, lpOverlapped=0x0) returned 1 [0168.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0168.461] SetErrorMode (uMode=0x1) returned 0x0 [0168.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0168.462] SetErrorMode (uMode=0x0) returned 0x1 [0168.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0168.521] SetErrorMode (uMode=0x1) returned 0x0 [0168.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.523] GetFileType (hFile=0x18c) returned 0x1 [0168.523] SetErrorMode (uMode=0x0) returned 0x1 [0168.523] GetFileType (hFile=0x18c) returned 0x1 [0168.523] WriteFile (in: hFile=0x18c, lpBuffer=0x27fb518*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x27e4a8, lpOverlapped=0x0 | out: lpBuffer=0x27fb518*, lpNumberOfBytesWritten=0x27e4a8*=0x6c0, lpOverlapped=0x0) returned 1 [0168.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0168.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\BznryFvk83vpqn61_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\BznryFvk83vpqn61_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0168.524] SetErrorMode (uMode=0x1) returned 0x0 [0168.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35055f70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0168.524] SetErrorMode (uMode=0x0) returned 0x1 [0168.524] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\BznryFvk83vpqn61_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\bznryfvk83vpqn61_encrypted_by.whiterose")) returned 1 [0168.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0168.630] SetErrorMode (uMode=0x1) returned 0x0 [0168.630] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.632] GetFileType (hFile=0x18c) returned 0x1 [0168.632] SetErrorMode (uMode=0x0) returned 0x1 [0168.632] GetFileType (hFile=0x18c) returned 0x1 [0168.634] WriteFile (in: hFile=0x18c, lpBuffer=0x280eb60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x280eb60*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0168.635] WriteFile (in: hFile=0x18c, lpBuffer=0x280eb60*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x280eb60*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0168.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x75 [0168.644] SetErrorMode (uMode=0x1) returned 0x0 [0168.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.644] GetFileType (hFile=0x18c) returned 0x1 [0168.644] SetErrorMode (uMode=0x0) returned 0x1 [0168.645] GetFileType (hFile=0x18c) returned 0x1 [0168.646] WriteFile (in: hFile=0x18c, lpBuffer=0x2824cf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x2824cf0*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0168.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0168.648] SetErrorMode (uMode=0x1) returned 0x0 [0168.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.649] GetFileType (hFile=0x18c) returned 0x1 [0168.649] SetErrorMode (uMode=0x0) returned 0x1 [0168.649] GetFileType (hFile=0x18c) returned 0x1 [0168.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5b [0168.651] SetErrorMode (uMode=0x1) returned 0x0 [0168.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.651] GetFileType (hFile=0x18c) returned 0x1 [0168.651] SetErrorMode (uMode=0x0) returned 0x1 [0168.651] GetFileType (hFile=0x18c) returned 0x1 [0168.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0168.652] SetErrorMode (uMode=0x1) returned 0x0 [0168.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.655] GetFileType (hFile=0x18c) returned 0x1 [0168.655] SetErrorMode (uMode=0x0) returned 0x1 [0168.655] GetFileType (hFile=0x18c) returned 0x1 [0168.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", lpFilePart=0x0) returned 0x41 [0168.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", lpFilePart=0x0) returned 0x41 [0168.657] SetErrorMode (uMode=0x1) returned 0x0 [0168.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0168.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0168.658] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.658] SetErrorMode (uMode=0x0) returned 0x1 [0168.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", lpFilePart=0x0) returned 0x41 [0168.658] SetErrorMode (uMode=0x1) returned 0x0 [0168.658] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.659] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.659] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0168.659] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0168.659] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.659] SetErrorMode (uMode=0x0) returned 0x1 [0168.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", lpFilePart=0x0) returned 0x4a [0168.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", lpFilePart=0x0) returned 0x4a [0168.660] SetErrorMode (uMode=0x1) returned 0x0 [0168.660] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.661] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.661] SetErrorMode (uMode=0x0) returned 0x1 [0168.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", lpFilePart=0x0) returned 0x4a [0168.661] SetErrorMode (uMode=0x1) returned 0x0 [0168.661] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.662] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.662] SetErrorMode (uMode=0x0) returned 0x1 [0168.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x64 [0168.662] SetErrorMode (uMode=0x1) returned 0x0 [0168.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\debugger\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.663] GetFileType (hFile=0x18c) returned 0x1 [0168.663] SetErrorMode (uMode=0x0) returned 0x1 [0168.663] GetFileType (hFile=0x18c) returned 0x1 [0168.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5b [0168.664] SetErrorMode (uMode=0x1) returned 0x0 [0168.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.665] GetFileType (hFile=0x18c) returned 0x1 [0168.665] SetErrorMode (uMode=0x0) returned 0x1 [0168.665] GetFileType (hFile=0x18c) returned 0x1 [0168.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x52 [0168.666] SetErrorMode (uMode=0x1) returned 0x0 [0168.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.667] GetFileType (hFile=0x18c) returned 0x1 [0168.667] SetErrorMode (uMode=0x0) returned 0x1 [0168.667] GetFileType (hFile=0x18c) returned 0x1 [0168.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", lpFilePart=0x0) returned 0x34 [0168.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", lpFilePart=0x0) returned 0x34 [0168.668] SetErrorMode (uMode=0x1) returned 0x0 [0168.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.669] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.669] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.669] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.669] SetErrorMode (uMode=0x0) returned 0x1 [0168.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", lpFilePart=0x0) returned 0x34 [0168.669] SetErrorMode (uMode=0x1) returned 0x0 [0168.670] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.670] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.670] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.670] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.670] SetErrorMode (uMode=0x0) returned 0x1 [0168.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0168.671] SetErrorMode (uMode=0x1) returned 0x0 [0168.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\sdk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.671] GetFileType (hFile=0x18c) returned 0x1 [0168.671] SetErrorMode (uMode=0x0) returned 0x1 [0168.671] GetFileType (hFile=0x18c) returned 0x1 [0168.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", lpFilePart=0x0) returned 0x35 [0168.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", lpFilePart=0x0) returned 0x35 [0168.673] SetErrorMode (uMode=0x1) returned 0x0 [0168.673] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0168.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0168.674] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.674] SetErrorMode (uMode=0x0) returned 0x1 [0168.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", lpFilePart=0x0) returned 0x35 [0168.674] SetErrorMode (uMode=0x1) returned 0x0 [0168.674] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0168.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0168.675] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.675] SetErrorMode (uMode=0x0) returned 0x1 [0168.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", lpFilePart=0x0) returned 0x39 [0168.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", lpFilePart=0x0) returned 0x39 [0168.675] SetErrorMode (uMode=0x1) returned 0x0 [0168.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0168.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0168.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0168.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0168.677] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.677] SetErrorMode (uMode=0x0) returned 0x1 [0168.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", lpFilePart=0x0) returned 0x39 [0168.677] SetErrorMode (uMode=0x1) returned 0x0 [0168.677] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0168.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0168.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0168.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0168.679] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.679] SetErrorMode (uMode=0x0) returned 0x1 [0168.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll", lpFilePart=0x0) returned 0x4b [0168.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll", lpFilePart=0x0) returned 0x4b [0168.679] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.679] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.680] CoTaskMemFree (pv=0xfe030) [0168.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll", lpFilePart=0x0) returned 0x49 [0168.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll", lpFilePart=0x0) returned 0x49 [0168.680] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.680] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.680] CoTaskMemFree (pv=0xfe030) [0168.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", lpFilePart=0x0) returned 0x3e [0168.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", lpFilePart=0x0) returned 0x3e [0168.681] SetErrorMode (uMode=0x1) returned 0x0 [0168.681] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0168.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0168.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0168.682] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.682] SetErrorMode (uMode=0x0) returned 0x1 [0168.682] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", lpFilePart=0x0) returned 0x3e [0168.682] SetErrorMode (uMode=0x1) returned 0x0 [0168.682] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0168.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0168.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0168.683] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.683] SetErrorMode (uMode=0x0) returned 0x1 [0168.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll", lpFilePart=0x0) returned 0x52 [0168.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll", lpFilePart=0x0) returned 0x52 [0168.684] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.684] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.684] CoTaskMemFree (pv=0xfe030) [0168.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll", lpFilePart=0x0) returned 0x50 [0168.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll", lpFilePart=0x0) returned 0x50 [0168.684] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.684] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.685] CoTaskMemFree (pv=0xfe030) [0168.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0168.685] SetErrorMode (uMode=0x1) returned 0x0 [0168.685] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.687] GetFileType (hFile=0x18c) returned 0x1 [0168.687] SetErrorMode (uMode=0x0) returned 0x1 [0168.687] GetFileType (hFile=0x18c) returned 0x1 [0168.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0168.688] SetErrorMode (uMode=0x1) returned 0x0 [0168.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.690] GetFileType (hFile=0x18c) returned 0x1 [0168.690] SetErrorMode (uMode=0x0) returned 0x1 [0168.690] GetFileType (hFile=0x18c) returned 0x1 [0168.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4f [0168.692] SetErrorMode (uMode=0x1) returned 0x0 [0168.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.692] GetFileType (hFile=0x18c) returned 0x1 [0168.692] SetErrorMode (uMode=0x0) returned 0x1 [0168.692] GetFileType (hFile=0x18c) returned 0x1 [0168.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0168.694] SetErrorMode (uMode=0x1) returned 0x0 [0168.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.694] GetFileType (hFile=0x18c) returned 0x1 [0168.695] SetErrorMode (uMode=0x0) returned 0x1 [0168.695] GetFileType (hFile=0x18c) returned 0x1 [0168.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET", lpFilePart=0x0) returned 0x24 [0168.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET", lpFilePart=0x0) returned 0x24 [0168.699] SetErrorMode (uMode=0x1) returned 0x0 [0168.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0168.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0168.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0 [0168.700] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.700] SetErrorMode (uMode=0x0) returned 0x1 [0168.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET", lpFilePart=0x0) returned 0x24 [0168.700] SetErrorMode (uMode=0x1) returned 0x0 [0168.700] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0168.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0168.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0 [0168.701] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.702] SetErrorMode (uMode=0x0) returned 0x1 [0168.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpFilePart=0x0) returned 0x3f [0168.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpFilePart=0x0) returned 0x3f [0168.702] SetErrorMode (uMode=0x1) returned 0x0 [0168.702] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0168.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0168.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0168.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0168.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0168.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0168.705] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.706] SetErrorMode (uMode=0x0) returned 0x1 [0168.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpFilePart=0x0) returned 0x3f [0168.706] SetErrorMode (uMode=0x1) returned 0x0 [0168.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0168.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0168.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0168.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0168.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0168.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0168.708] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.709] SetErrorMode (uMode=0x0) returned 0x1 [0168.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll", lpFilePart=0x0) returned 0x49 [0168.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll", lpFilePart=0x0) returned 0x49 [0168.710] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.710] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.710] CoTaskMemFree (pv=0xfe030) [0168.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll", lpFilePart=0x0) returned 0x54 [0168.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll", lpFilePart=0x0) returned 0x54 [0168.710] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.710] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.711] CoTaskMemFree (pv=0xfe030) [0168.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll", lpFilePart=0x0) returned 0x57 [0168.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll", lpFilePart=0x0) returned 0x57 [0168.711] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.711] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.711] CoTaskMemFree (pv=0xfe030) [0168.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll", lpFilePart=0x0) returned 0x4d [0168.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll", lpFilePart=0x0) returned 0x4d [0168.712] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.712] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.712] CoTaskMemFree (pv=0xfe030) [0168.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll", lpFilePart=0x0) returned 0x4a [0168.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll", lpFilePart=0x0) returned 0x4a [0168.712] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0168.712] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0168.713] CoTaskMemFree (pv=0xfe030) [0168.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0168.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0168.713] SetErrorMode (uMode=0x1) returned 0x0 [0168.713] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.714] GetFileType (hFile=0x18c) returned 0x1 [0168.714] SetErrorMode (uMode=0x0) returned 0x1 [0168.714] GetFileType (hFile=0x18c) returned 0x1 [0168.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpFilePart=0x0) returned 0x2f [0168.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpFilePart=0x0) returned 0x2f [0168.716] SetErrorMode (uMode=0x1) returned 0x0 [0168.716] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0168.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0168.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0 [0168.718] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.718] SetErrorMode (uMode=0x0) returned 0x1 [0168.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpFilePart=0x0) returned 0x2f [0168.718] SetErrorMode (uMode=0x1) returned 0x0 [0168.718] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0168.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0168.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0168.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0 [0168.719] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0168.719] SetErrorMode (uMode=0x0) returned 0x1 [0168.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0168.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0168.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0168.720] SetErrorMode (uMode=0x1) returned 0x0 [0168.720] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.720] SetErrorMode (uMode=0x0) returned 0x1 [0168.720] GetFileType (hFile=0x18c) returned 0x1 [0168.721] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x3d63 [0168.721] ReadFile (in: hFile=0x18c, lpBuffer=0x274e7a8, nNumberOfBytesToRead=0x3d63, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x274e7a8*, lpNumberOfBytesRead=0x27e828*=0x3d63, lpOverlapped=0x0) returned 1 [0168.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0168.723] SetErrorMode (uMode=0x1) returned 0x0 [0168.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63)) returned 1 [0168.723] SetErrorMode (uMode=0x0) returned 0x1 [0168.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0168.800] SetErrorMode (uMode=0x1) returned 0x0 [0168.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.801] SetErrorMode (uMode=0x0) returned 0x1 [0168.801] GetFileType (hFile=0x18c) returned 0x1 [0168.801] WriteFile (in: hFile=0x18c, lpBuffer=0x27bffd0*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bffd0*, lpNumberOfBytesWritten=0x27e8a8*=0x3e70, lpOverlapped=0x0) returned 1 [0168.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0168.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\cV9Nq0wK3cGBir59_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\cV9Nq0wK3cGBir59_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x57 [0168.802] SetErrorMode (uMode=0x1) returned 0x0 [0168.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x35303830, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0168.803] SetErrorMode (uMode=0x0) returned 0x1 [0168.803] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\cV9Nq0wK3cGBir59_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\cv9nq0wk3cgbir59_encrypted_by.whiterose")) returned 1 [0168.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.911] SetErrorMode (uMode=0x1) returned 0x0 [0168.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.913] SetErrorMode (uMode=0x0) returned 0x1 [0168.913] GetFileType (hFile=0x18c) returned 0x1 [0168.913] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x201c [0168.913] ReadFile (in: hFile=0x18c, lpBuffer=0x27c57b8, nNumberOfBytesToRead=0x201c, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27c57b8*, lpNumberOfBytesRead=0x27e828*=0x201c, lpOverlapped=0x0) returned 1 [0168.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.915] SetErrorMode (uMode=0x1) returned 0x0 [0168.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c)) returned 1 [0168.915] SetErrorMode (uMode=0x0) returned 0x1 [0168.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.975] SetErrorMode (uMode=0x1) returned 0x0 [0168.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0168.976] SetErrorMode (uMode=0x0) returned 0x1 [0168.976] GetFileType (hFile=0x18c) returned 0x1 [0168.976] WriteFile (in: hFile=0x18c, lpBuffer=0x282ab50*, nNumberOfBytesToWrite=0x2120, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x282ab50*, lpNumberOfBytesWritten=0x27e8a8*=0x2120, lpOverlapped=0x0) returned 1 [0168.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\fu296xtA05e6R4*U_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\fu296xtA05e6R4*U_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x57 [0168.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0168.987] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 1 [0168.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0168.990] SetErrorMode (uMode=0x1) returned 0x0 [0168.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0168.990] GetFileType (hFile=0x18c) returned 0x1 [0168.990] SetErrorMode (uMode=0x0) returned 0x1 [0168.990] GetFileType (hFile=0x18c) returned 0x1 [0168.992] WriteFile (in: hFile=0x18c, lpBuffer=0x283f7d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x283f7d0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0168.994] WriteFile (in: hFile=0x18c, lpBuffer=0x283f7d0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x283f7d0*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0168.994] CloseHandle (hObject=0x18c) returned 1 [0168.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3e [0168.994] SetErrorMode (uMode=0x1) returned 0x0 [0168.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\microsoft.net\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0169.003] GetFileType (hFile=0x18c) returned 0x1 [0169.003] SetErrorMode (uMode=0x0) returned 0x1 [0169.003] GetFileType (hFile=0x18c) returned 0x1 [0169.005] WriteFile (in: hFile=0x18c, lpBuffer=0x2855880*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x2855880*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0169.006] WriteFile (in: hFile=0x18c, lpBuffer=0x2855880*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x2855880*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0169.007] CloseHandle (hObject=0x18c) returned 1 [0169.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox", lpFilePart=0x0) returned 0x26 [0169.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox", lpFilePart=0x0) returned 0x26 [0169.007] SetErrorMode (uMode=0x1) returned 0x0 [0169.007] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.007] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0169.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0169.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0169.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f629dc0, ftCreationTime.dwHighDateTime=0x1d4b0b3, ftLastAccessTime.dwLowDateTime=0xa7d3690, ftLastAccessTime.dwHighDateTime=0x1d4f013, ftLastWriteTime.dwLowDateTime=0xa7d3690, ftLastWriteTime.dwHighDateTime=0x1d4f013, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="long_storm_shows.exe", cAlternateFileName="LONG_S~1.EXE")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1 [0169.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0169.011] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0169.012] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1 [0169.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1 [0169.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1 [0169.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0169.013] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0169.013] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.013] SetErrorMode (uMode=0x0) returned 0x1 [0169.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox", lpFilePart=0x0) returned 0x26 [0169.013] SetErrorMode (uMode=0x1) returned 0x0 [0169.013] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0169.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0169.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0169.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1 [0169.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0169.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0169.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0169.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f629dc0, ftCreationTime.dwHighDateTime=0x1d4b0b3, ftLastAccessTime.dwLowDateTime=0xa7d3690, ftLastAccessTime.dwHighDateTime=0x1d4f013, ftLastWriteTime.dwLowDateTime=0xa7d3690, ftLastWriteTime.dwHighDateTime=0x1d4f013, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="long_storm_shows.exe", cAlternateFileName="LONG_S~1.EXE")) returned 1 [0169.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0169.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0169.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0169.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0169.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0169.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0169.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0169.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0169.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0169.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0169.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0169.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1 [0169.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1 [0169.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1 [0169.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0169.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0169.021] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.021] SetErrorMode (uMode=0x0) returned 0x1 [0169.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll", lpFilePart=0x0) returned 0x3c [0169.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll", lpFilePart=0x0) returned 0x3c [0169.021] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.021] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.022] CoTaskMemFree (pv=0xffa70) [0169.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\application.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\application.ini", lpFilePart=0x0) returned 0x36 [0169.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\application.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\application.ini", lpFilePart=0x0) returned 0x36 [0169.022] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.022] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.022] CoTaskMemFree (pv=0xffa70) [0169.022] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll", lpFilePart=0x0) returned 0x3b [0169.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll", lpFilePart=0x0) returned 0x3b [0169.023] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.023] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.023] CoTaskMemFree (pv=0xffa70) [0169.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe", lpFilePart=0x0) returned 0x38 [0169.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe", lpFilePart=0x0) returned 0x38 [0169.023] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.023] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.023] CoTaskMemFree (pv=0xffa70) [0169.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini", lpFilePart=0x0) returned 0x38 [0169.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini", lpFilePart=0x0) returned 0x38 [0169.024] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.024] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.024] CoTaskMemFree (pv=0xffa70) [0169.024] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll", lpFilePart=0x0) returned 0x39 [0169.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll", lpFilePart=0x0) returned 0x39 [0169.025] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.025] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.025] CoTaskMemFree (pv=0xffa70) [0169.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list", lpFilePart=0x0) returned 0x39 [0169.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list", lpFilePart=0x0) returned 0x39 [0169.025] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.025] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.025] CoTaskMemFree (pv=0xffa70) [0169.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x32 [0169.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x32 [0169.026] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.026] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.026] CoTaskMemFree (pv=0xffa70) [0169.026] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk", lpFilePart=0x0) returned 0x32 [0169.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk", lpFilePart=0x0) returned 0x32 [0169.026] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.026] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.027] CoTaskMemFree (pv=0xffa70) [0169.027] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll", lpFilePart=0x0) returned 0x32 [0169.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll", lpFilePart=0x0) returned 0x32 [0169.027] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.027] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.027] CoTaskMemFree (pv=0xffa70) [0169.027] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll", lpFilePart=0x0) returned 0x33 [0169.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll", lpFilePart=0x0) returned 0x33 [0169.028] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.028] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.028] CoTaskMemFree (pv=0xffa70) [0169.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x0) returned 0x32 [0169.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x105, lpBuffer=0x27e670, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x0) returned 0x32 [0169.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x0) returned 0x32 [0169.028] SetErrorMode (uMode=0x1) returned 0x0 [0169.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.029] GetFileType (hFile=0x18c) returned 0x1 [0169.029] SetErrorMode (uMode=0x0) returned 0x1 [0169.030] GetFileType (hFile=0x18c) returned 0x1 [0169.030] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e9e8 | out: lpFileSizeHigh=0x27e9e8*=0x0) returned 0x5aea [0169.030] ReadFile (in: hFile=0x18c, lpBuffer=0x2868468, nNumberOfBytesToRead=0x5aea, lpNumberOfBytesRead=0x27e8c8, lpOverlapped=0x0 | out: lpBuffer=0x2868468*, lpNumberOfBytesRead=0x27e8c8*=0x5aea, lpOverlapped=0x0) returned 1 [0169.033] CloseHandle (hObject=0x18c) returned 1 [0169.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x105, lpBuffer=0x27e660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x0) returned 0x32 [0169.034] SetErrorMode (uMode=0x1) returned 0x0 [0169.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), fInfoLevelId=0x0, lpFileInformation=0x27e8d0 | out: lpFileInformation=0x27e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea)) returned 1 [0169.034] SetErrorMode (uMode=0x0) returned 0x1 [0169.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x105, lpBuffer=0x27e390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x0) returned 0x32 [0169.169] SetErrorMode (uMode=0x1) returned 0x0 [0169.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.169] GetFileType (hFile=0x18c) returned 0x1 [0169.169] SetErrorMode (uMode=0x0) returned 0x1 [0169.169] GetFileType (hFile=0x18c) returned 0x1 [0169.169] WriteFile (in: hFile=0x18c, lpBuffer=0x28e9888*, nNumberOfBytesToWrite=0x5bf0, lpNumberOfBytesWritten=0x27e948, lpOverlapped=0x0 | out: lpBuffer=0x28e9888*, lpNumberOfBytesWritten=0x27e948*=0x5bf0, lpOverlapped=0x0) returned 1 [0169.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x105, lpBuffer=0x27e620, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x0) returned 0x32 [0169.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\ctcohNjgDgyaMLsZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e620, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\ctcohNjgDgyaMLsZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x4e [0169.171] SetErrorMode (uMode=0x1) returned 0x0 [0169.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), fInfoLevelId=0x0, lpFileInformation=0x27e870 | out: lpFileInformation=0x27e870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3566f7d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5bf0)) returned 1 [0169.171] SetErrorMode (uMode=0x0) returned 0x1 [0169.171] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\ctcohNjgDgyaMLsZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\ctcohnjgdgyamlsz_encrypted_by.whiterose")) returned 1 [0169.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll", lpFilePart=0x0) returned 0x31 [0169.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll", lpFilePart=0x0) returned 0x31 [0169.269] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.270] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.270] CoTaskMemFree (pv=0xfe030) [0169.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll", lpFilePart=0x0) returned 0x34 [0169.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll", lpFilePart=0x0) returned 0x34 [0169.270] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.271] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.271] CoTaskMemFree (pv=0xfe030) [0169.271] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\long_storm_shows.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\long_storm_shows.exe", lpFilePart=0x0) returned 0x3b [0169.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\long_storm_shows.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\long_storm_shows.exe", lpFilePart=0x0) returned 0x3b [0169.271] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.271] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.271] CoTaskMemFree (pv=0xfe030) [0169.271] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe", lpFilePart=0x0) returned 0x3d [0169.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe", lpFilePart=0x0) returned 0x3d [0169.272] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.272] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.272] CoTaskMemFree (pv=0xfe030) [0169.272] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe", lpFilePart=0x0) returned 0x47 [0169.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe", lpFilePart=0x0) returned 0x47 [0169.272] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.272] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.273] CoTaskMemFree (pv=0xfe030) [0169.273] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll", lpFilePart=0x0) returned 0x33 [0169.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll", lpFilePart=0x0) returned 0x33 [0169.273] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.273] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.273] CoTaskMemFree (pv=0xfe030) [0169.273] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll", lpFilePart=0x0) returned 0x32 [0169.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll", lpFilePart=0x0) returned 0x32 [0169.274] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.274] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.274] CoTaskMemFree (pv=0xfe030) [0169.274] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll", lpFilePart=0x0) returned 0x30 [0169.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll", lpFilePart=0x0) returned 0x30 [0169.274] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.274] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.274] CoTaskMemFree (pv=0xfe030) [0169.274] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll", lpFilePart=0x0) returned 0x33 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll", lpFilePart=0x0) returned 0x33 [0169.275] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.275] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.275] CoTaskMemFree (pv=0xfe030) [0169.275] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll", lpFilePart=0x0) returned 0x33 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll", lpFilePart=0x0) returned 0x33 [0169.275] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.276] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.276] CoTaskMemFree (pv=0xfe030) [0169.276] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", lpFilePart=0x0) returned 0x2f [0169.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", lpFilePart=0x0) returned 0x2f [0169.276] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.276] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.276] CoTaskMemFree (pv=0xfe030) [0169.276] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll", lpFilePart=0x0) returned 0x32 [0169.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll", lpFilePart=0x0) returned 0x32 [0169.277] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.277] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.277] CoTaskMemFree (pv=0xfe030) [0169.277] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk", lpFilePart=0x0) returned 0x32 [0169.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk", lpFilePart=0x0) returned 0x32 [0169.277] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.277] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.278] CoTaskMemFree (pv=0xfe030) [0169.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll", lpFilePart=0x0) returned 0x32 [0169.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll", lpFilePart=0x0) returned 0x32 [0169.278] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.278] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.278] CoTaskMemFree (pv=0xfe030) [0169.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja", lpFilePart=0x0) returned 0x2e [0169.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja", lpFilePart=0x0) returned 0x2e [0169.279] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.279] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.279] CoTaskMemFree (pv=0xfe030) [0169.279] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini", lpFilePart=0x0) returned 0x33 [0169.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini", lpFilePart=0x0) returned 0x33 [0169.279] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.279] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.279] CoTaskMemFree (pv=0xfe030) [0169.280] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe", lpFilePart=0x0) returned 0x3b [0169.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe", lpFilePart=0x0) returned 0x3b [0169.280] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.280] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.280] CoTaskMemFree (pv=0xfe030) [0169.280] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe", lpFilePart=0x0) returned 0x39 [0169.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe", lpFilePart=0x0) returned 0x39 [0169.281] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.281] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.281] CoTaskMemFree (pv=0xfe030) [0169.281] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete", lpFilePart=0x0) returned 0x32 [0169.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete", lpFilePart=0x0) returned 0x32 [0169.281] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.281] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.281] CoTaskMemFree (pv=0xfe030) [0169.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\removed-files", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\removed-files", lpFilePart=0x0) returned 0x34 [0169.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\removed-files", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\removed-files", lpFilePart=0x0) returned 0x34 [0169.282] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.282] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.282] CoTaskMemFree (pv=0xfe030) [0169.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk", lpFilePart=0x0) returned 0x33 [0169.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk", lpFilePart=0x0) returned 0x33 [0169.283] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.283] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.283] CoTaskMemFree (pv=0xfe030) [0169.283] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll", lpFilePart=0x0) returned 0x33 [0169.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll", lpFilePart=0x0) returned 0x33 [0169.283] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.283] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.283] CoTaskMemFree (pv=0xfe030) [0169.283] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini", lpFilePart=0x0) returned 0x3a [0169.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini", lpFilePart=0x0) returned 0x3a [0169.283] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.283] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.284] CoTaskMemFree (pv=0xfe030) [0169.284] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe", lpFilePart=0x0) returned 0x32 [0169.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe", lpFilePart=0x0) returned 0x32 [0169.284] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.284] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.284] CoTaskMemFree (pv=0xfe030) [0169.284] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini", lpFilePart=0x0) returned 0x32 [0169.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini", lpFilePart=0x0) returned 0x32 [0169.284] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.284] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.284] CoTaskMemFree (pv=0xfe030) [0169.284] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe", lpFilePart=0x0) returned 0x3d [0169.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe", lpFilePart=0x0) returned 0x3d [0169.285] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.285] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.285] CoTaskMemFree (pv=0xfe030) [0169.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe", lpFilePart=0x0) returned 0x38 [0169.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe", lpFilePart=0x0) returned 0x38 [0169.285] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.285] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.285] CoTaskMemFree (pv=0xfe030) [0169.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll", lpFilePart=0x0) returned 0x2e [0169.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll", lpFilePart=0x0) returned 0x2e [0169.286] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.286] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.286] CoTaskMemFree (pv=0xfe030) [0169.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser", lpFilePart=0x0) returned 0x2e [0169.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser", lpFilePart=0x0) returned 0x2e [0169.286] SetErrorMode (uMode=0x1) returned 0x0 [0169.286] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0169.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0169.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1 [0169.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0169.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0169.290] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0169.290] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1 [0169.290] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 0 [0169.290] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.291] SetErrorMode (uMode=0x0) returned 0x1 [0169.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser", lpFilePart=0x0) returned 0x2e [0169.291] SetErrorMode (uMode=0x1) returned 0x0 [0169.291] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0169.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0169.292] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1 [0169.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0169.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0169.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0169.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1 [0169.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 0 [0169.293] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.294] SetErrorMode (uMode=0x0) returned 0x1 [0169.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0169.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0169.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0169.294] SetErrorMode (uMode=0x1) returned 0x0 [0169.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.296] SetErrorMode (uMode=0x0) returned 0x1 [0169.296] GetFileType (hFile=0x18c) returned 0x1 [0169.296] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x14623 [0169.296] ReadFile (in: hFile=0x18c, lpBuffer=0x2906160, nNumberOfBytesToRead=0x14623, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2906160*, lpNumberOfBytesRead=0x27e828*=0x14623, lpOverlapped=0x0) returned 1 [0169.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0169.311] SetErrorMode (uMode=0x1) returned 0x0 [0169.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623)) returned 1 [0169.312] SetErrorMode (uMode=0x0) returned 0x1 [0169.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0169.385] SetErrorMode (uMode=0x1) returned 0x0 [0169.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.387] SetErrorMode (uMode=0x0) returned 0x1 [0169.387] GetFileType (hFile=0x18c) returned 0x1 [0169.387] WriteFile (in: hFile=0x18c, lpBuffer=0x2758800*, nNumberOfBytesToWrite=0x14730, lpNumberOfBytesWritten=0x27e8a8, lpOverlapped=0x0 | out: lpBuffer=0x2758800*, lpNumberOfBytesWritten=0x27e8a8*=0x14730, lpOverlapped=0x0) returned 1 [0169.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0169.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\EdrXWn4dqZM5XCXt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\EdrXWn4dqZM5XCXt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x56 [0169.389] SetErrorMode (uMode=0x1) returned 0x0 [0169.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x35884b10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x14730)) returned 1 [0169.389] SetErrorMode (uMode=0x0) returned 0x1 [0169.389] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\EdrXWn4dqZM5XCXt_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\edrxwn4dqzm5xcxt_encrypted_by.whiterose")) returned 1 [0169.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest", lpFilePart=0x0) returned 0x3e [0169.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest", lpFilePart=0x0) returned 0x3e [0169.491] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.491] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.492] CoTaskMemFree (pv=0xffa70) [0169.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini", lpFilePart=0x0) returned 0x49 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini", lpFilePart=0x0) returned 0x49 [0169.492] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.492] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.492] CoTaskMemFree (pv=0xffa70) [0169.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja", lpFilePart=0x0) returned 0x36 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja", lpFilePart=0x0) returned 0x36 [0169.492] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.492] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.492] CoTaskMemFree (pv=0xffa70) [0169.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", lpFilePart=0x0) returned 0x39 [0169.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", lpFilePart=0x0) returned 0x39 [0169.493] SetErrorMode (uMode=0x1) returned 0x0 [0169.493] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.494] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.494] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1 [0169.494] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1 [0169.494] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 0 [0169.495] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.495] SetErrorMode (uMode=0x0) returned 0x1 [0169.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", lpFilePart=0x0) returned 0x39 [0169.495] SetErrorMode (uMode=0x1) returned 0x0 [0169.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.495] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1 [0169.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1 [0169.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 0 [0169.496] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.496] SetErrorMode (uMode=0x0) returned 0x1 [0169.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll", lpFilePart=0x0) returned 0x4a [0169.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll", lpFilePart=0x0) returned 0x4a [0169.496] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.496] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.497] CoTaskMemFree (pv=0xffa70) [0169.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest", lpFilePart=0x0) returned 0x4d [0169.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest", lpFilePart=0x0) returned 0x4d [0169.497] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0169.497] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.497] CoTaskMemFree (pv=0xffa70) [0169.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0169.497] SetErrorMode (uMode=0x1) returned 0x0 [0169.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0169.501] SetErrorMode (uMode=0x0) returned 0x1 [0169.501] GetFileType (hFile=0x18c) returned 0x1 [0169.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", lpFilePart=0x0) returned 0x39 [0169.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", lpFilePart=0x0) returned 0x39 [0169.502] SetErrorMode (uMode=0x1) returned 0x0 [0169.503] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.503] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1 [0169.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 0 [0169.504] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.504] SetErrorMode (uMode=0x0) returned 0x1 [0169.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", lpFilePart=0x0) returned 0x39 [0169.504] SetErrorMode (uMode=0x1) returned 0x0 [0169.504] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1 [0169.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 0 [0169.505] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.505] SetErrorMode (uMode=0x0) returned 0x1 [0169.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpFilePart=0x0) returned 0x60 [0169.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpFilePart=0x0) returned 0x60 [0169.506] SetErrorMode (uMode=0x1) returned 0x0 [0169.506] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0169.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1 [0169.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0 [0169.507] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.507] SetErrorMode (uMode=0x0) returned 0x1 [0169.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpFilePart=0x0) returned 0x60 [0169.508] SetErrorMode (uMode=0x1) returned 0x0 [0169.508] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0169.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1 [0169.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0 [0169.508] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.509] SetErrorMode (uMode=0x0) returned 0x1 [0169.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0169.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0169.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0169.509] SetErrorMode (uMode=0x1) returned 0x0 [0169.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.510] SetErrorMode (uMode=0x0) returned 0x1 [0169.510] GetFileType (hFile=0x18c) returned 0x1 [0169.510] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x889 [0169.510] ReadFile (in: hFile=0x18c, lpBuffer=0x2790c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2790c20*, lpNumberOfBytesRead=0x27e6e8*=0x889, lpOverlapped=0x0) returned 1 [0169.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0169.512] SetErrorMode (uMode=0x1) returned 0x0 [0169.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889)) returned 1 [0169.512] SetErrorMode (uMode=0x0) returned 0x1 [0169.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0169.567] SetErrorMode (uMode=0x1) returned 0x0 [0169.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.568] SetErrorMode (uMode=0x0) returned 0x1 [0169.568] GetFileType (hFile=0x18c) returned 0x1 [0169.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0169.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\xbPulTJAomogP4xC_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\xbPulTJAomogP4xC_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x88 [0169.570] SetErrorMode (uMode=0x1) returned 0x0 [0169.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x35a4db90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0169.570] SetErrorMode (uMode=0x0) returned 0x1 [0169.570] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\xbPulTJAomogP4xC_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\xbpultjaomogp4xc_encrypted_by.whiterose")) returned 1 [0169.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf", lpFilePart=0x0) returned 0x6c [0169.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf", lpFilePart=0x0) returned 0x6c [0169.675] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0169.675] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0169.675] CoTaskMemFree (pv=0xfe030) [0169.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0169.675] SetErrorMode (uMode=0x1) returned 0x0 [0169.676] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0169.678] SetErrorMode (uMode=0x0) returned 0x1 [0169.678] GetFileType (hFile=0x18c) returned 0x1 [0169.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0169.679] SetErrorMode (uMode=0x1) returned 0x0 [0169.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0169.680] SetErrorMode (uMode=0x0) returned 0x1 [0169.680] GetFileType (hFile=0x18c) returned 0x1 [0169.681] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", lpFilePart=0x0) returned 0x3c [0169.681] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", lpFilePart=0x0) returned 0x3c [0169.681] SetErrorMode (uMode=0x1) returned 0x0 [0169.681] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1 [0169.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1 [0169.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1 [0169.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1 [0169.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1 [0169.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1 [0169.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1 [0169.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0 [0169.684] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.685] SetErrorMode (uMode=0x0) returned 0x1 [0169.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", lpFilePart=0x0) returned 0x3c [0169.685] SetErrorMode (uMode=0x1) returned 0x0 [0169.685] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0169.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1 [0169.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1 [0169.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1 [0169.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1 [0169.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1 [0169.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1 [0169.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1 [0169.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0 [0169.687] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0169.688] SetErrorMode (uMode=0x0) returned 0x1 [0169.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0169.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0169.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0169.688] SetErrorMode (uMode=0x1) returned 0x0 [0169.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.689] SetErrorMode (uMode=0x0) returned 0x1 [0169.689] GetFileType (hFile=0x18c) returned 0x1 [0169.689] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x9a0 [0169.689] ReadFile (in: hFile=0x18c, lpBuffer=0x28266c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28266c8*, lpNumberOfBytesRead=0x27e788*=0x9a0, lpOverlapped=0x0) returned 1 [0169.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0169.691] SetErrorMode (uMode=0x1) returned 0x0 [0169.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0169.691] SetErrorMode (uMode=0x0) returned 0x1 [0169.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0169.781] SetErrorMode (uMode=0x1) returned 0x0 [0169.781] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.783] SetErrorMode (uMode=0x0) returned 0x1 [0169.783] GetFileType (hFile=0x18c) returned 0x1 [0169.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0169.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\oF4c2cNTFN8x5wW4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\oF4c2cNTFN8x5wW4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0169.785] SetErrorMode (uMode=0x1) returned 0x0 [0169.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x35c62ed0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0169.785] SetErrorMode (uMode=0x0) returned 0x1 [0169.786] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\oF4c2cNTFN8x5wW4_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\of4c2cntfn8x5ww4_encrypted_by.whiterose")) returned 1 [0169.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0169.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0169.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0169.894] SetErrorMode (uMode=0x1) returned 0x0 [0169.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.895] SetErrorMode (uMode=0x0) returned 0x1 [0169.895] GetFileType (hFile=0x18c) returned 0x1 [0169.895] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0xb3e [0169.895] ReadFile (in: hFile=0x18c, lpBuffer=0x288cfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x288cfe0*, lpNumberOfBytesRead=0x27e788*=0xb3e, lpOverlapped=0x0) returned 1 [0169.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0169.898] SetErrorMode (uMode=0x1) returned 0x0 [0169.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e)) returned 1 [0169.899] SetErrorMode (uMode=0x0) returned 0x1 [0169.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0169.954] SetErrorMode (uMode=0x1) returned 0x0 [0169.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0169.956] SetErrorMode (uMode=0x0) returned 0x1 [0169.956] GetFileType (hFile=0x18c) returned 0x1 [0169.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0169.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\hCqJqItfDbIKVWxb_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\hCqJqItfDbIKVWxb_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0169.957] SetErrorMode (uMode=0x1) returned 0x0 [0169.957] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x35e05df0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0169.957] SetErrorMode (uMode=0x0) returned 0x1 [0169.957] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\hCqJqItfDbIKVWxb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\hcqjqitfdbikvwxb_encrypted_by.whiterose")) returned 1 [0170.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0170.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0170.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0170.066] SetErrorMode (uMode=0x1) returned 0x0 [0170.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.066] SetErrorMode (uMode=0x0) returned 0x1 [0170.066] GetFileType (hFile=0x18c) returned 0x1 [0170.066] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0xa17 [0170.067] ReadFile (in: hFile=0x18c, lpBuffer=0x28f2ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28f2ef8*, lpNumberOfBytesRead=0x27e788*=0xa17, lpOverlapped=0x0) returned 1 [0170.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0170.069] SetErrorMode (uMode=0x1) returned 0x0 [0170.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17)) returned 1 [0170.069] SetErrorMode (uMode=0x0) returned 0x1 [0170.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0170.134] SetErrorMode (uMode=0x1) returned 0x0 [0170.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.136] SetErrorMode (uMode=0x0) returned 0x1 [0170.136] GetFileType (hFile=0x18c) returned 0x1 [0170.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0170.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\07Er72xxVBq3aqVB_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\07Er72xxVBq3aqVB_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0170.137] SetErrorMode (uMode=0x1) returned 0x0 [0170.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x35fa8d10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0170.137] SetErrorMode (uMode=0x0) returned 0x1 [0170.137] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\07Er72xxVBq3aqVB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\07er72xxvbq3aqvb_encrypted_by.whiterose")) returned 1 [0170.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.237] SetErrorMode (uMode=0x1) returned 0x0 [0170.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.240] SetErrorMode (uMode=0x0) returned 0x1 [0170.240] GetFileType (hFile=0x18c) returned 0x1 [0170.240] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0xb9b [0170.240] ReadFile (in: hFile=0x18c, lpBuffer=0x2756080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2756080*, lpNumberOfBytesRead=0x27e788*=0xb9b, lpOverlapped=0x0) returned 1 [0170.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.242] SetErrorMode (uMode=0x1) returned 0x0 [0170.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b)) returned 1 [0170.242] SetErrorMode (uMode=0x0) returned 0x1 [0170.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.300] SetErrorMode (uMode=0x1) returned 0x0 [0170.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.302] SetErrorMode (uMode=0x0) returned 0x1 [0170.302] GetFileType (hFile=0x18c) returned 0x1 [0170.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\1yS*KkBPc30ipUj3_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\1yS*KkBPc30ipUj3_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0170.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x27bff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0170.316] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml")) returned 1 [0170.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0170.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0170.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0170.318] SetErrorMode (uMode=0x1) returned 0x0 [0170.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.318] GetFileType (hFile=0x18c) returned 0x1 [0170.318] SetErrorMode (uMode=0x0) returned 0x1 [0170.318] GetFileType (hFile=0x18c) returned 0x1 [0170.318] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0xb91 [0170.318] ReadFile (in: hFile=0x18c, lpBuffer=0x27ba240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27ba240*, lpNumberOfBytesRead=0x27e788*=0xb91, lpOverlapped=0x0) returned 1 [0170.320] CloseHandle (hObject=0x18c) returned 1 [0170.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0170.321] SetErrorMode (uMode=0x1) returned 0x0 [0170.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91)) returned 1 [0170.321] SetErrorMode (uMode=0x0) returned 0x1 [0170.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0170.433] SetErrorMode (uMode=0x1) returned 0x0 [0170.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.434] GetFileType (hFile=0x18c) returned 0x1 [0170.434] SetErrorMode (uMode=0x0) returned 0x1 [0170.434] GetFileType (hFile=0x18c) returned 0x1 [0170.434] WriteFile (in: hFile=0x18c, lpBuffer=0x281ae38*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x281ae38*, lpNumberOfBytesWritten=0x27e728*=0xca0, lpOverlapped=0x0) returned 1 [0170.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0170.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\KroOXuyXQNCc3uVJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\KroOXuyXQNCc3uVJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0170.435] SetErrorMode (uMode=0x1) returned 0x0 [0170.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3627c730, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xca0)) returned 1 [0170.435] SetErrorMode (uMode=0x0) returned 0x1 [0170.435] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\KroOXuyXQNCc3uVJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\krooxuyxqncc3uvj_encrypted_by.whiterose")) returned 1 [0170.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0170.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0170.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0170.533] SetErrorMode (uMode=0x1) returned 0x0 [0170.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.535] GetFileType (hFile=0x18c) returned 0x1 [0170.535] SetErrorMode (uMode=0x0) returned 0x1 [0170.535] GetFileType (hFile=0x18c) returned 0x1 [0170.535] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x8b2 [0170.535] ReadFile (in: hFile=0x18c, lpBuffer=0x281dd20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x281dd20*, lpNumberOfBytesRead=0x27e788*=0x8b2, lpOverlapped=0x0) returned 1 [0170.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0170.537] SetErrorMode (uMode=0x1) returned 0x0 [0170.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0170.537] SetErrorMode (uMode=0x0) returned 0x1 [0170.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0170.596] SetErrorMode (uMode=0x1) returned 0x0 [0170.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.597] GetFileType (hFile=0x18c) returned 0x1 [0170.597] SetErrorMode (uMode=0x0) returned 0x1 [0170.597] GetFileType (hFile=0x18c) returned 0x1 [0170.597] WriteFile (in: hFile=0x18c, lpBuffer=0x287d368*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x287d368*, lpNumberOfBytesWritten=0x27e728*=0x9c0, lpOverlapped=0x0) returned 1 [0170.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0170.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\DpMkn1dkPbdoTUvT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\DpMkn1dkPbdoTUvT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0170.599] SetErrorMode (uMode=0x1) returned 0x0 [0170.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3641f650, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0170.599] SetErrorMode (uMode=0x0) returned 0x1 [0170.599] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\DpMkn1dkPbdoTUvT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\dpmkn1dkpbdotuvt_encrypted_by.whiterose")) returned 1 [0170.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0170.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0170.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0170.705] SetErrorMode (uMode=0x1) returned 0x0 [0170.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.705] GetFileType (hFile=0x18c) returned 0x1 [0170.705] SetErrorMode (uMode=0x0) returned 0x1 [0170.705] GetFileType (hFile=0x18c) returned 0x1 [0170.705] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0xa73 [0170.706] ReadFile (in: hFile=0x18c, lpBuffer=0x28803e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28803e0*, lpNumberOfBytesRead=0x27e788*=0xa73, lpOverlapped=0x0) returned 1 [0170.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0170.708] SetErrorMode (uMode=0x1) returned 0x0 [0170.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73)) returned 1 [0170.708] SetErrorMode (uMode=0x0) returned 0x1 [0170.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0170.783] SetErrorMode (uMode=0x1) returned 0x0 [0170.783] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.784] GetFileType (hFile=0x18c) returned 0x1 [0170.784] SetErrorMode (uMode=0x0) returned 0x1 [0170.784] GetFileType (hFile=0x18c) returned 0x1 [0170.784] WriteFile (in: hFile=0x18c, lpBuffer=0x28e08d8*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x28e08d8*, lpNumberOfBytesWritten=0x27e728*=0xb80, lpOverlapped=0x0) returned 1 [0170.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0170.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\uS143jiC7BWG0nUi_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\uS143jiC7BWG0nUi_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x64 [0170.785] SetErrorMode (uMode=0x1) returned 0x0 [0170.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x365e86d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0170.786] SetErrorMode (uMode=0x0) returned 0x1 [0170.786] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\uS143jiC7BWG0nUi_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\us143jic7bwg0nui_encrypted_by.whiterose")) returned 1 [0170.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0170.893] SetErrorMode (uMode=0x1) returned 0x0 [0170.893] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0170.893] GetFileType (hFile=0x18c) returned 0x1 [0170.893] SetErrorMode (uMode=0x0) returned 0x1 [0170.894] GetFileType (hFile=0x18c) returned 0x1 [0170.895] WriteFile (in: hFile=0x18c, lpBuffer=0x28f3d08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x28f3d08*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0170.897] WriteFile (in: hFile=0x18c, lpBuffer=0x28f3d08*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x28f3d08*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0170.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x48 [0170.897] SetErrorMode (uMode=0x1) returned 0x0 [0170.897] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0170.898] GetFileType (hFile=0x18c) returned 0x1 [0170.898] SetErrorMode (uMode=0x0) returned 0x1 [0170.898] GetFileType (hFile=0x18c) returned 0x1 [0170.899] WriteFile (in: hFile=0x18c, lpBuffer=0x2909de8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2909de8*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0170.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpFilePart=0x0) returned 0x2f [0170.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpFilePart=0x0) returned 0x2f [0170.901] SetErrorMode (uMode=0x1) returned 0x0 [0170.901] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0170.902] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0170.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0170.903] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0170.903] SetErrorMode (uMode=0x0) returned 0x1 [0170.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpFilePart=0x0) returned 0x2f [0170.903] SetErrorMode (uMode=0x1) returned 0x0 [0170.903] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0170.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0170.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0170.904] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0170.904] SetErrorMode (uMode=0x0) returned 0x1 [0170.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", lpFilePart=0x0) returned 0x34 [0170.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", lpFilePart=0x0) returned 0x34 [0170.905] SetErrorMode (uMode=0x1) returned 0x0 [0170.905] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0170.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.906] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0170.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0 [0170.910] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0170.910] SetErrorMode (uMode=0x0) returned 0x1 [0170.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", lpFilePart=0x0) returned 0x34 [0170.910] SetErrorMode (uMode=0x1) returned 0x0 [0170.910] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0170.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0170.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0 [0170.911] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0170.911] SetErrorMode (uMode=0x0) returned 0x1 [0170.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.912] SetErrorMode (uMode=0x1) returned 0x0 [0170.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.913] GetFileType (hFile=0x18c) returned 0x1 [0170.913] SetErrorMode (uMode=0x0) returned 0x1 [0170.913] GetFileType (hFile=0x18c) returned 0x1 [0170.913] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x166 [0170.913] ReadFile (in: hFile=0x18c, lpBuffer=0x2715010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2715010*, lpNumberOfBytesRead=0x27e788*=0x166, lpOverlapped=0x0) returned 1 [0170.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.914] SetErrorMode (uMode=0x1) returned 0x0 [0170.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166)) returned 1 [0170.914] SetErrorMode (uMode=0x0) returned 0x1 [0170.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.985] SetErrorMode (uMode=0x1) returned 0x0 [0170.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0170.986] GetFileType (hFile=0x18c) returned 0x1 [0170.987] SetErrorMode (uMode=0x0) returned 0x1 [0170.987] GetFileType (hFile=0x18c) returned 0x1 [0170.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\2*b*eQOX77Ln1tis_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\2*b*eQOX77Ln1tis_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x5c [0170.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", nBufferLength=0x105, lpBuffer=0x27bff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js", lpFilePart=0x0) returned 0x45 [0170.998] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js")) returned 1 [0171.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0171.000] SetErrorMode (uMode=0x1) returned 0x0 [0171.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.001] GetFileType (hFile=0x18c) returned 0x1 [0171.001] SetErrorMode (uMode=0x0) returned 0x1 [0171.001] GetFileType (hFile=0x18c) returned 0x1 [0171.003] WriteFile (in: hFile=0x18c, lpBuffer=0x2785c10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x2785c10*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0171.004] WriteFile (in: hFile=0x18c, lpBuffer=0x2785c10*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2785c10*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0171.004] CloseHandle (hObject=0x18c) returned 1 [0171.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0171.005] SetErrorMode (uMode=0x1) returned 0x0 [0171.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.005] GetFileType (hFile=0x18c) returned 0x1 [0171.005] SetErrorMode (uMode=0x0) returned 0x1 [0171.005] GetFileType (hFile=0x18c) returned 0x1 [0171.007] WriteFile (in: hFile=0x18c, lpBuffer=0x279bcf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x279bcf0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0171.008] WriteFile (in: hFile=0x18c, lpBuffer=0x279bcf0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x279bcf0*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0171.009] CloseHandle (hObject=0x18c) returned 1 [0171.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpFilePart=0x0) returned 0x33 [0171.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpFilePart=0x0) returned 0x33 [0171.009] SetErrorMode (uMode=0x1) returned 0x0 [0171.009] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.017] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0171.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0171.018] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0171.018] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.018] SetErrorMode (uMode=0x0) returned 0x1 [0171.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpFilePart=0x0) returned 0x33 [0171.018] SetErrorMode (uMode=0x1) returned 0x0 [0171.018] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0171.019] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.019] SetErrorMode (uMode=0x0) returned 0x1 [0171.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff", lpFilePart=0x0) returned 0x3d [0171.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff", lpFilePart=0x0) returned 0x3d [0171.020] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.020] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.020] CoTaskMemFree (pv=0xfe030) [0171.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic", lpFilePart=0x0) returned 0x3d [0171.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic", lpFilePart=0x0) returned 0x3d [0171.020] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.020] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.021] CoTaskMemFree (pv=0xfe030) [0171.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4d [0171.021] SetErrorMode (uMode=0x1) returned 0x0 [0171.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.022] GetFileType (hFile=0x18c) returned 0x1 [0171.022] SetErrorMode (uMode=0x0) returned 0x1 [0171.022] GetFileType (hFile=0x18c) returned 0x1 [0171.022] WriteFile (in: hFile=0x18c, lpBuffer=0x27b5b90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x27b5b90*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0171.023] WriteFile (in: hFile=0x18c, lpBuffer=0x27b5b90*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x27b5b90*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0171.023] CloseHandle (hObject=0x18c) returned 1 [0171.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpFilePart=0x0) returned 0x30 [0171.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpFilePart=0x0) returned 0x30 [0171.024] SetErrorMode (uMode=0x1) returned 0x0 [0171.024] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.025] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.025] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0171.025] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0171.025] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0171.025] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0171.025] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.025] SetErrorMode (uMode=0x0) returned 0x1 [0171.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpFilePart=0x0) returned 0x30 [0171.026] SetErrorMode (uMode=0x1) returned 0x0 [0171.026] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0171.027] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.027] SetErrorMode (uMode=0x0) returned 0x1 [0171.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe", lpFilePart=0x0) returned 0x3b [0171.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe", lpFilePart=0x0) returned 0x3b [0171.027] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.027] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.027] CoTaskMemFree (pv=0xfe030) [0171.027] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini", lpFilePart=0x0) returned 0x42 [0171.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini", lpFilePart=0x0) returned 0x42 [0171.028] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.028] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.028] CoTaskMemFree (pv=0xfe030) [0171.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.028] SetErrorMode (uMode=0x1) returned 0x0 [0171.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.029] GetFileType (hFile=0x18c) returned 0x1 [0171.029] SetErrorMode (uMode=0x0) returned 0x1 [0171.029] GetFileType (hFile=0x18c) returned 0x1 [0171.029] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x794 [0171.029] ReadFile (in: hFile=0x18c, lpBuffer=0x27bf5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27bf5f8*, lpNumberOfBytesRead=0x27e828*=0x794, lpOverlapped=0x0) returned 1 [0171.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.033] SetErrorMode (uMode=0x1) returned 0x0 [0171.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1 [0171.033] SetErrorMode (uMode=0x0) returned 0x1 [0171.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.134] SetErrorMode (uMode=0x1) returned 0x0 [0171.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.135] GetFileType (hFile=0x18c) returned 0x1 [0171.135] SetErrorMode (uMode=0x0) returned 0x1 [0171.135] GetFileType (hFile=0x18c) returned 0x1 [0171.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uq6DUY70HFNgCIi*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uq6DUY70HFNgCIi*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0171.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x105, lpBuffer=0x27c090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x0) returned 0x3e [0171.140] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log")) returned 1 [0171.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0171.141] SetErrorMode (uMode=0x1) returned 0x0 [0171.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.155] GetFileType (hFile=0x18c) returned 0x1 [0171.155] SetErrorMode (uMode=0x0) returned 0x1 [0171.155] GetFileType (hFile=0x18c) returned 0x1 [0171.156] WriteFile (in: hFile=0x18c, lpBuffer=0x2831850*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2831850*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0171.158] WriteFile (in: hFile=0x18c, lpBuffer=0x2831850*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2831850*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0171.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpFilePart=0x0) returned 0x2f [0171.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpFilePart=0x0) returned 0x2f [0171.158] SetErrorMode (uMode=0x1) returned 0x0 [0171.159] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.159] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.159] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0171.159] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1 [0171.159] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0 [0171.160] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.160] SetErrorMode (uMode=0x0) returned 0x1 [0171.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpFilePart=0x0) returned 0x2f [0171.160] SetErrorMode (uMode=0x1) returned 0x0 [0171.160] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0171.160] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1 [0171.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0 [0171.161] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.161] SetErrorMode (uMode=0x0) returned 0x1 [0171.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja", lpFilePart=0x0) returned 0x37 [0171.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja", lpFilePart=0x0) returned 0x37 [0171.161] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.161] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.161] CoTaskMemFree (pv=0xfe030) [0171.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini", lpFilePart=0x0) returned 0x3c [0171.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini", lpFilePart=0x0) returned 0x3c [0171.162] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.162] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.162] CoTaskMemFree (pv=0xfe030) [0171.162] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0171.163] SetErrorMode (uMode=0x1) returned 0x0 [0171.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.163] GetFileType (hFile=0x18c) returned 0x1 [0171.163] SetErrorMode (uMode=0x0) returned 0x1 [0171.163] GetFileType (hFile=0x18c) returned 0x1 [0171.165] WriteFile (in: hFile=0x18c, lpBuffer=0x284b618*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x284b618*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0171.166] WriteFile (in: hFile=0x18c, lpBuffer=0x284b618*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x284b618*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0171.166] CloseHandle (hObject=0x18c) returned 1 [0171.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x40 [0171.167] SetErrorMode (uMode=0x1) returned 0x0 [0171.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla firefox\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.168] GetFileType (hFile=0x18c) returned 0x1 [0171.168] SetErrorMode (uMode=0x0) returned 0x1 [0171.168] GetFileType (hFile=0x18c) returned 0x1 [0171.168] WriteFile (in: hFile=0x18c, lpBuffer=0x28616d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x28616d8*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0171.169] WriteFile (in: hFile=0x18c, lpBuffer=0x28616d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x28616d8*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0171.169] CloseHandle (hObject=0x18c) returned 1 [0171.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0171.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0171.170] SetErrorMode (uMode=0x1) returned 0x0 [0171.170] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.170] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.170] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31a0540, ftCreationTime.dwHighDateTime=0x1d51c86, ftLastAccessTime.dwLowDateTime=0x22ade270, ftLastAccessTime.dwHighDateTime=0x1d516f4, ftLastWriteTime.dwLowDateTime=0x22ade270, ftLastWriteTime.dwHighDateTime=0x1d516f4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="contents_rapids.exe", cAlternateFileName="CONTEN~1.EXE")) returned 1 [0171.170] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0171.171] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0171.171] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0171.171] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0171.171] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.171] SetErrorMode (uMode=0x0) returned 0x1 [0171.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0171.171] SetErrorMode (uMode=0x1) returned 0x0 [0171.172] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.172] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.172] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31a0540, ftCreationTime.dwHighDateTime=0x1d51c86, ftLastAccessTime.dwLowDateTime=0x22ade270, ftLastAccessTime.dwHighDateTime=0x1d516f4, ftLastWriteTime.dwLowDateTime=0x22ade270, ftLastWriteTime.dwHighDateTime=0x1d516f4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="contents_rapids.exe", cAlternateFileName="CONTEN~1.EXE")) returned 1 [0171.172] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0171.172] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0171.172] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0171.172] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0171.172] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.173] SetErrorMode (uMode=0x0) returned 0x1 [0171.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\contents_rapids.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\contents_rapids.exe", lpFilePart=0x0) returned 0x46 [0171.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\contents_rapids.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\contents_rapids.exe", lpFilePart=0x0) returned 0x46 [0171.173] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.173] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.173] CoTaskMemFree (pv=0xfe030) [0171.173] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0171.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0171.174] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.174] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.174] CoTaskMemFree (pv=0xfe030) [0171.174] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0171.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0171.175] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.175] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.175] CoTaskMemFree (pv=0xfe030) [0171.175] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini", lpFilePart=0x0) returned 0x3e [0171.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini", lpFilePart=0x0) returned 0x3e [0171.175] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.176] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.176] CoTaskMemFree (pv=0xfe030) [0171.176] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4c [0171.176] SetErrorMode (uMode=0x1) returned 0x0 [0171.176] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.177] GetFileType (hFile=0x18c) returned 0x1 [0171.177] SetErrorMode (uMode=0x0) returned 0x1 [0171.177] GetFileType (hFile=0x18c) returned 0x1 [0171.177] WriteFile (in: hFile=0x18c, lpBuffer=0x287cf98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x287cf98*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0171.178] WriteFile (in: hFile=0x18c, lpBuffer=0x287cf98*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x287cf98*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0171.178] CloseHandle (hObject=0x18c) returned 1 [0171.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0171.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0171.179] SetErrorMode (uMode=0x1) returned 0x0 [0171.179] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0171.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0171.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 0 [0171.180] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.180] SetErrorMode (uMode=0x0) returned 0x1 [0171.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0171.181] SetErrorMode (uMode=0x1) returned 0x0 [0171.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0171.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0171.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 0 [0171.181] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.182] SetErrorMode (uMode=0x0) returned 0x1 [0171.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets", lpFilePart=0x0) returned 0x40 [0171.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets", lpFilePart=0x0) returned 0x40 [0171.182] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.182] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.182] CoTaskMemFree (pv=0xfe030) [0171.182] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x28 [0171.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x38 [0171.183] SetErrorMode (uMode=0x1) returned 0x0 [0171.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\msbuild\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.184] SetErrorMode (uMode=0x0) returned 0x1 [0171.185] GetFileType (hFile=0x18c) returned 0x1 [0171.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies", lpFilePart=0x0) returned 0x2b [0171.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies", lpFilePart=0x0) returned 0x2b [0171.186] SetErrorMode (uMode=0x1) returned 0x0 [0171.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.186] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0171.187] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0171.187] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.187] SetErrorMode (uMode=0x0) returned 0x1 [0171.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies", lpFilePart=0x0) returned 0x2b [0171.187] SetErrorMode (uMode=0x1) returned 0x0 [0171.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0171.188] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.188] SetErrorMode (uMode=0x0) returned 0x1 [0171.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpFilePart=0x0) returned 0x35 [0171.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0171.189] SetErrorMode (uMode=0x1) returned 0x0 [0171.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\reference assemblies\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.189] SetErrorMode (uMode=0x0) returned 0x1 [0171.190] GetFileType (hFile=0x18c) returned 0x1 [0171.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information", lpFilePart=0x0) returned 0x2c [0171.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information", lpFilePart=0x0) returned 0x2c [0171.191] SetErrorMode (uMode=0x1) returned 0x0 [0171.191] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.191] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.192] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.192] SetErrorMode (uMode=0x0) returned 0x1 [0171.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information", lpFilePart=0x0) returned 0x2c [0171.192] SetErrorMode (uMode=0x1) returned 0x0 [0171.192] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.192] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.193] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.193] SetErrorMode (uMode=0x0) returned 0x1 [0171.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x46 [0171.193] SetErrorMode (uMode=0x1) returned 0x0 [0171.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Uninstall Information\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\uninstall information\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.194] SetErrorMode (uMode=0x0) returned 0x1 [0171.194] GetFileType (hFile=0x18c) returned 0x1 [0171.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender", lpFilePart=0x0) returned 0x27 [0171.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender", lpFilePart=0x0) returned 0x27 [0171.195] SetErrorMode (uMode=0x1) returned 0x0 [0171.195] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8e5930, ftCreationTime.dwHighDateTime=0x1d4d927, ftLastAccessTime.dwLowDateTime=0x66f49f0, ftLastAccessTime.dwHighDateTime=0x1d4f66a, ftLastWriteTime.dwLowDateTime=0x66f49f0, ftLastWriteTime.dwHighDateTime=0x1d4f66a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tricks-bangladesh.exe", cAlternateFileName="TRICKS~1.EXE")) returned 1 [0171.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8e5930, ftCreationTime.dwHighDateTime=0x1d4d927, ftLastAccessTime.dwLowDateTime=0x66f49f0, ftLastAccessTime.dwHighDateTime=0x1d4f66a, ftLastWriteTime.dwLowDateTime=0x66f49f0, ftLastWriteTime.dwHighDateTime=0x1d4f66a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tricks-bangladesh.exe", cAlternateFileName="TRICKS~1.EXE")) returned 0 [0171.197] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.197] SetErrorMode (uMode=0x0) returned 0x1 [0171.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender", lpFilePart=0x0) returned 0x27 [0171.197] SetErrorMode (uMode=0x1) returned 0x0 [0171.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dace30, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dace30, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8e5930, ftCreationTime.dwHighDateTime=0x1d4d927, ftLastAccessTime.dwLowDateTime=0x66f49f0, ftLastAccessTime.dwHighDateTime=0x1d4f66a, ftLastWriteTime.dwLowDateTime=0x66f49f0, ftLastWriteTime.dwHighDateTime=0x1d4f66a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tricks-bangladesh.exe", cAlternateFileName="TRICKS~1.EXE")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8e5930, ftCreationTime.dwHighDateTime=0x1d4d927, ftLastAccessTime.dwLowDateTime=0x66f49f0, ftLastAccessTime.dwHighDateTime=0x1d4f66a, ftLastWriteTime.dwLowDateTime=0x66f49f0, ftLastWriteTime.dwHighDateTime=0x1d4f66a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tricks-bangladesh.exe", cAlternateFileName="TRICKS~1.EXE")) returned 0 [0171.198] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.198] SetErrorMode (uMode=0x0) returned 0x1 [0171.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll", lpFilePart=0x0) returned 0x34 [0171.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll", lpFilePart=0x0) returned 0x34 [0171.199] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.199] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.199] CoTaskMemFree (pv=0xfe030) [0171.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll", lpFilePart=0x0) returned 0x34 [0171.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll", lpFilePart=0x0) returned 0x34 [0171.199] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.199] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.199] CoTaskMemFree (pv=0xfe030) [0171.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll", lpFilePart=0x0) returned 0x31 [0171.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll", lpFilePart=0x0) returned 0x31 [0171.200] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.200] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.200] CoTaskMemFree (pv=0xfe030) [0171.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll", lpFilePart=0x0) returned 0x34 [0171.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll", lpFilePart=0x0) returned 0x34 [0171.200] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.200] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.200] CoTaskMemFree (pv=0xfe030) [0171.200] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\tricks-bangladesh.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\tricks-bangladesh.exe", lpFilePart=0x0) returned 0x3d [0171.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\tricks-bangladesh.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\tricks-bangladesh.exe", lpFilePart=0x0) returned 0x3d [0171.200] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.201] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.201] CoTaskMemFree (pv=0xfe030) [0171.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US", lpFilePart=0x0) returned 0x2d [0171.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US", lpFilePart=0x0) returned 0x2d [0171.201] SetErrorMode (uMode=0x1) returned 0x0 [0171.201] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.201] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.202] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0171.202] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0171.202] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0171.202] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.202] SetErrorMode (uMode=0x0) returned 0x1 [0171.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US", lpFilePart=0x0) returned 0x2d [0171.202] SetErrorMode (uMode=0x1) returned 0x0 [0171.202] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0171.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0171.203] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0171.203] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.203] SetErrorMode (uMode=0x0) returned 0x1 [0171.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui", lpFilePart=0x0) returned 0x3e [0171.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui", lpFilePart=0x0) returned 0x3e [0171.204] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.204] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.204] CoTaskMemFree (pv=0xfe030) [0171.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui", lpFilePart=0x0) returned 0x3d [0171.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui", lpFilePart=0x0) returned 0x3d [0171.204] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.204] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.204] CoTaskMemFree (pv=0xfe030) [0171.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x47 [0171.205] SetErrorMode (uMode=0x1) returned 0x0 [0171.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.205] SetErrorMode (uMode=0x0) returned 0x1 [0171.205] GetFileType (hFile=0x18c) returned 0x1 [0171.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x41 [0171.207] SetErrorMode (uMode=0x1) returned 0x0 [0171.207] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows defender\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.207] SetErrorMode (uMode=0x0) returned 0x1 [0171.207] GetFileType (hFile=0x18c) returned 0x1 [0171.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail", lpFilePart=0x0) returned 0x23 [0171.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail", lpFilePart=0x0) returned 0x23 [0171.209] SetErrorMode (uMode=0x1) returned 0x0 [0171.209] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.210] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0171.212] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.212] SetErrorMode (uMode=0x0) returned 0x1 [0171.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail", lpFilePart=0x0) returned 0x23 [0171.213] SetErrorMode (uMode=0x1) returned 0x0 [0171.213] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.213] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0171.214] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0171.215] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.215] SetErrorMode (uMode=0x0) returned 0x1 [0171.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\msoe.dll", lpFilePart=0x0) returned 0x2c [0171.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\msoe.dll", lpFilePart=0x0) returned 0x2c [0171.216] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.216] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.216] CoTaskMemFree (pv=0xfe030) [0171.216] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll", lpFilePart=0x0) returned 0x2f [0171.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll", lpFilePart=0x0) returned 0x2f [0171.216] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.216] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.216] CoTaskMemFree (pv=0xfe030) [0171.216] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll", lpFilePart=0x0) returned 0x30 [0171.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll", lpFilePart=0x0) returned 0x30 [0171.217] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.217] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.217] CoTaskMemFree (pv=0xfe030) [0171.217] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wab.exe", lpFilePart=0x0) returned 0x2b [0171.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wab.exe", lpFilePart=0x0) returned 0x2b [0171.217] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.217] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.217] CoTaskMemFree (pv=0xfe030) [0171.217] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabfind.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabfind.dll", lpFilePart=0x0) returned 0x2f [0171.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabfind.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabfind.dll", lpFilePart=0x0) returned 0x2f [0171.218] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.218] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.218] CoTaskMemFree (pv=0xfe030) [0171.218] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll", lpFilePart=0x0) returned 0x2e [0171.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll", lpFilePart=0x0) returned 0x2e [0171.218] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.218] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.218] CoTaskMemFree (pv=0xfe030) [0171.218] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe", lpFilePart=0x0) returned 0x2e [0171.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe", lpFilePart=0x0) returned 0x2e [0171.218] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.218] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.219] CoTaskMemFree (pv=0xfe030) [0171.219] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe", lpFilePart=0x0) returned 0x2f [0171.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe", lpFilePart=0x0) returned 0x2f [0171.219] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.219] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.219] CoTaskMemFree (pv=0xfe030) [0171.219] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US", lpFilePart=0x0) returned 0x29 [0171.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US", lpFilePart=0x0) returned 0x29 [0171.219] SetErrorMode (uMode=0x1) returned 0x0 [0171.220] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.220] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0171.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0171.221] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0171.221] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.221] SetErrorMode (uMode=0x0) returned 0x1 [0171.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US", lpFilePart=0x0) returned 0x29 [0171.221] SetErrorMode (uMode=0x1) returned 0x0 [0171.221] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0171.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0171.222] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0171.222] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.222] SetErrorMode (uMode=0x0) returned 0x1 [0171.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui", lpFilePart=0x0) returned 0x39 [0171.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui", lpFilePart=0x0) returned 0x39 [0171.223] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.223] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.223] CoTaskMemFree (pv=0xfe030) [0171.223] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui", lpFilePart=0x0) returned 0x39 [0171.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui", lpFilePart=0x0) returned 0x39 [0171.223] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.223] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.223] CoTaskMemFree (pv=0xfe030) [0171.223] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x43 [0171.227] SetErrorMode (uMode=0x1) returned 0x0 [0171.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.227] SetErrorMode (uMode=0x0) returned 0x1 [0171.227] GetFileType (hFile=0x18c) returned 0x1 [0171.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3d [0171.229] SetErrorMode (uMode=0x1) returned 0x0 [0171.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows mail\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.229] SetErrorMode (uMode=0x0) returned 0x1 [0171.229] GetFileType (hFile=0x18c) returned 0x1 [0171.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player", lpFilePart=0x0) returned 0x2b [0171.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player", lpFilePart=0x0) returned 0x2b [0171.231] SetErrorMode (uMode=0x1) returned 0x0 [0171.231] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0171.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0171.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3d83d0, ftCreationTime.dwHighDateTime=0x1d4d0fd, ftLastAccessTime.dwLowDateTime=0x3bb28db0, ftLastAccessTime.dwHighDateTime=0x1d52a2d, ftLastWriteTime.dwLowDateTime=0x3bb28db0, ftLastWriteTime.dwHighDateTime=0x1d52a2d, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mail-pensions-constraints.exe", cAlternateFileName="MAIL-P~1.EXE")) returned 1 [0171.231] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0171.232] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0171.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0171.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0171.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0171.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0171.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0171.233] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0171.233] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.233] SetErrorMode (uMode=0x0) returned 0x1 [0171.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player", lpFilePart=0x0) returned 0x2b [0171.234] SetErrorMode (uMode=0x1) returned 0x0 [0171.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0171.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0171.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3d83d0, ftCreationTime.dwHighDateTime=0x1d4d0fd, ftLastAccessTime.dwLowDateTime=0x3bb28db0, ftLastAccessTime.dwHighDateTime=0x1d52a2d, ftLastWriteTime.dwLowDateTime=0x3bb28db0, ftLastWriteTime.dwHighDateTime=0x1d52a2d, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mail-pensions-constraints.exe", cAlternateFileName="MAIL-P~1.EXE")) returned 1 [0171.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0171.234] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0171.235] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0171.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0171.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0171.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0171.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0171.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0171.236] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0171.236] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.236] SetErrorMode (uMode=0x0) returned 0x1 [0171.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mail-pensions-constraints.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\mail-pensions-constraints.exe", lpFilePart=0x0) returned 0x49 [0171.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mail-pensions-constraints.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\mail-pensions-constraints.exe", lpFilePart=0x0) returned 0x49 [0171.237] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.237] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.237] CoTaskMemFree (pv=0xfe030) [0171.237] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL", lpFilePart=0x0) returned 0x35 [0171.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL", lpFilePart=0x0) returned 0x35 [0171.237] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.237] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.237] CoTaskMemFree (pv=0xfe030) [0171.237] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe", lpFilePart=0x0) returned 0x38 [0171.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe", lpFilePart=0x0) returned 0x38 [0171.238] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.238] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.238] CoTaskMemFree (pv=0xfe030) [0171.238] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe", lpFilePart=0x0) returned 0x38 [0171.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe", lpFilePart=0x0) returned 0x38 [0171.238] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.238] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.238] CoTaskMemFree (pv=0xfe030) [0171.238] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe", lpFilePart=0x0) returned 0x39 [0171.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe", lpFilePart=0x0) returned 0x39 [0171.238] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.238] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.239] CoTaskMemFree (pv=0xfe030) [0171.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe", lpFilePart=0x0) returned 0x36 [0171.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe", lpFilePart=0x0) returned 0x36 [0171.239] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.239] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.239] CoTaskMemFree (pv=0xfe030) [0171.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll", lpFilePart=0x0) returned 0x3a [0171.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll", lpFilePart=0x0) returned 0x3a [0171.239] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.239] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.239] CoTaskMemFree (pv=0xfe030) [0171.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe", lpFilePart=0x0) returned 0x36 [0171.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe", lpFilePart=0x0) returned 0x36 [0171.240] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.240] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.240] CoTaskMemFree (pv=0xfe030) [0171.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe", lpFilePart=0x0) returned 0x38 [0171.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe", lpFilePart=0x0) returned 0x38 [0171.240] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.240] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.240] CoTaskMemFree (pv=0xfe030) [0171.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll", lpFilePart=0x0) returned 0x3f [0171.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll", lpFilePart=0x0) returned 0x3f [0171.241] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.241] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.241] CoTaskMemFree (pv=0xfe030) [0171.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll", lpFilePart=0x0) returned 0x38 [0171.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll", lpFilePart=0x0) returned 0x38 [0171.241] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.241] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.241] CoTaskMemFree (pv=0xfe030) [0171.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll", lpFilePart=0x0) returned 0x38 [0171.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll", lpFilePart=0x0) returned 0x38 [0171.242] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.242] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.242] CoTaskMemFree (pv=0xfe030) [0171.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe", lpFilePart=0x0) returned 0x36 [0171.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe", lpFilePart=0x0) returned 0x36 [0171.242] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.242] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.242] CoTaskMemFree (pv=0xfe030) [0171.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe", lpFilePart=0x0) returned 0x38 [0171.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe", lpFilePart=0x0) returned 0x38 [0171.242] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.243] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.243] CoTaskMemFree (pv=0xfe030) [0171.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US", lpFilePart=0x0) returned 0x31 [0171.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US", lpFilePart=0x0) returned 0x31 [0171.243] SetErrorMode (uMode=0x1) returned 0x0 [0171.243] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.243] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0171.244] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0171.244] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.245] SetErrorMode (uMode=0x0) returned 0x1 [0171.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US", lpFilePart=0x0) returned 0x31 [0171.245] SetErrorMode (uMode=0x1) returned 0x0 [0171.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.245] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.245] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0171.245] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0171.246] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0171.246] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.246] SetErrorMode (uMode=0x0) returned 0x1 [0171.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui", lpFilePart=0x0) returned 0x3f [0171.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui", lpFilePart=0x0) returned 0x3f [0171.247] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.247] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.247] CoTaskMemFree (pv=0xfe030) [0171.247] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui", lpFilePart=0x0) returned 0x42 [0171.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui", lpFilePart=0x0) returned 0x42 [0171.247] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.247] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.247] CoTaskMemFree (pv=0xfe030) [0171.247] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui", lpFilePart=0x0) returned 0x42 [0171.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui", lpFilePart=0x0) returned 0x42 [0171.248] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.248] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.248] CoTaskMemFree (pv=0xfe030) [0171.248] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui", lpFilePart=0x0) returned 0x40 [0171.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui", lpFilePart=0x0) returned 0x40 [0171.248] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.248] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.248] CoTaskMemFree (pv=0xfe030) [0171.248] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui", lpFilePart=0x0) returned 0x44 [0171.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui", lpFilePart=0x0) returned 0x44 [0171.249] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.249] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.249] CoTaskMemFree (pv=0xfe030) [0171.249] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui", lpFilePart=0x0) returned 0x42 [0171.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui", lpFilePart=0x0) returned 0x42 [0171.249] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.249] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.249] CoTaskMemFree (pv=0xfe030) [0171.249] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui", lpFilePart=0x0) returned 0x49 [0171.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui", lpFilePart=0x0) returned 0x49 [0171.250] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.250] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.250] CoTaskMemFree (pv=0xfe030) [0171.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui", lpFilePart=0x0) returned 0x42 [0171.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui", lpFilePart=0x0) returned 0x42 [0171.250] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.250] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.250] CoTaskMemFree (pv=0xfe030) [0171.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui", lpFilePart=0x0) returned 0x42 [0171.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui", lpFilePart=0x0) returned 0x42 [0171.251] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0171.251] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0171.251] CoTaskMemFree (pv=0xfe030) [0171.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0171.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0171.251] SetErrorMode (uMode=0x1) returned 0x0 [0171.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.252] SetErrorMode (uMode=0x0) returned 0x1 [0171.252] GetFileType (hFile=0x18c) returned 0x1 [0171.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Icons", lpFilePart=0x0) returned 0x31 [0171.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Icons", lpFilePart=0x0) returned 0x31 [0171.253] SetErrorMode (uMode=0x1) returned 0x0 [0171.254] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.254] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.254] SetErrorMode (uMode=0x0) returned 0x1 [0171.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Icons", lpFilePart=0x0) returned 0x31 [0171.255] SetErrorMode (uMode=0x1) returned 0x0 [0171.255] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.255] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.256] SetErrorMode (uMode=0x0) returned 0x1 [0171.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Icons\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0171.256] SetErrorMode (uMode=0x1) returned 0x0 [0171.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\icons\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.262] SetErrorMode (uMode=0x0) returned 0x1 [0171.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpFilePart=0x0) returned 0x3a [0171.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpFilePart=0x0) returned 0x3a [0171.263] SetErrorMode (uMode=0x1) returned 0x0 [0171.264] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0171.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0171.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0171.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0171.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0171.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0171.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0171.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0171.266] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.267] SetErrorMode (uMode=0x0) returned 0x1 [0171.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", lpFilePart=0x0) returned 0x3a [0171.267] SetErrorMode (uMode=0x1) returned 0x0 [0171.267] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0171.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0171.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0171.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0171.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0171.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0171.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0171.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0171.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0171.269] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0171.270] SetErrorMode (uMode=0x0) returned 0x1 [0171.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x4a [0171.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x4a [0171.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x4a [0171.271] SetErrorMode (uMode=0x1) returned 0x0 [0171.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.272] GetFileType (hFile=0x18c) returned 0x1 [0171.272] SetErrorMode (uMode=0x0) returned 0x1 [0171.272] GetFileType (hFile=0x18c) returned 0x1 [0171.272] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x4d82 [0171.273] ReadFile (in: hFile=0x18c, lpBuffer=0x27806e0, nNumberOfBytesToRead=0x4d82, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27806e0*, lpNumberOfBytesRead=0x27e828*=0x4d82, lpOverlapped=0x0) returned 1 [0171.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x4a [0171.275] SetErrorMode (uMode=0x1) returned 0x0 [0171.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82)) returned 1 [0171.275] SetErrorMode (uMode=0x0) returned 0x1 [0171.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x4a [0171.368] SetErrorMode (uMode=0x1) returned 0x0 [0171.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.376] SetErrorMode (uMode=0x0) returned 0x1 [0171.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x4a [0171.378] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml")) returned 0 [0171.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x0) returned 0x54 [0171.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x0) returned 0x54 [0171.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x0) returned 0x54 [0171.386] SetErrorMode (uMode=0x1) returned 0x0 [0171.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.386] GetFileType (hFile=0x18c) returned 0x1 [0171.386] SetErrorMode (uMode=0x0) returned 0x1 [0171.387] GetFileType (hFile=0x18c) returned 0x1 [0171.387] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x14ff [0171.387] ReadFile (in: hFile=0x18c, lpBuffer=0x28038f8, nNumberOfBytesToRead=0x14ff, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28038f8*, lpNumberOfBytesRead=0x27e828*=0x14ff, lpOverlapped=0x0) returned 1 [0171.388] CloseHandle (hObject=0x18c) returned 1 [0171.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x0) returned 0x54 [0171.389] SetErrorMode (uMode=0x1) returned 0x0 [0171.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0171.389] SetErrorMode (uMode=0x0) returned 0x1 [0171.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x0) returned 0x54 [0171.490] SetErrorMode (uMode=0x1) returned 0x0 [0171.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.494] SetErrorMode (uMode=0x0) returned 0x1 [0171.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x0) returned 0x54 [0171.495] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0 [0171.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x0) returned 0x46 [0171.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x0) returned 0x46 [0171.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x0) returned 0x46 [0171.500] SetErrorMode (uMode=0x1) returned 0x0 [0171.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.501] GetFileType (hFile=0x18c) returned 0x1 [0171.501] SetErrorMode (uMode=0x0) returned 0x1 [0171.501] GetFileType (hFile=0x18c) returned 0x1 [0171.501] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xba3 [0171.501] ReadFile (in: hFile=0x18c, lpBuffer=0x2867620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2867620*, lpNumberOfBytesRead=0x27e828*=0xba3, lpOverlapped=0x0) returned 1 [0171.532] CloseHandle (hObject=0x18c) returned 1 [0171.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x0) returned 0x46 [0171.533] SetErrorMode (uMode=0x1) returned 0x0 [0171.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3)) returned 1 [0171.533] SetErrorMode (uMode=0x0) returned 0x1 [0171.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x0) returned 0x46 [0171.648] SetErrorMode (uMode=0x1) returned 0x0 [0171.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.652] SetErrorMode (uMode=0x0) returned 0x1 [0171.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x0) returned 0x46 [0171.653] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg")) returned 0 [0171.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x0) returned 0x46 [0171.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x0) returned 0x46 [0171.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x0) returned 0x46 [0171.658] SetErrorMode (uMode=0x1) returned 0x0 [0171.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.659] GetFileType (hFile=0x18c) returned 0x1 [0171.659] SetErrorMode (uMode=0x0) returned 0x1 [0171.659] GetFileType (hFile=0x18c) returned 0x1 [0171.659] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x3a1c [0171.659] ReadFile (in: hFile=0x18c, lpBuffer=0x28c98d8, nNumberOfBytesToRead=0x3a1c, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28c98d8*, lpNumberOfBytesRead=0x27e828*=0x3a1c, lpOverlapped=0x0) returned 1 [0171.661] CloseHandle (hObject=0x18c) returned 1 [0171.662] SetErrorMode (uMode=0x1) returned 0x0 [0171.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c)) returned 1 [0171.662] SetErrorMode (uMode=0x0) returned 0x1 [0171.775] SetErrorMode (uMode=0x1) returned 0x0 [0171.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.778] SetErrorMode (uMode=0x0) returned 0x1 [0171.779] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png")) returned 0 [0171.782] SetErrorMode (uMode=0x1) returned 0x0 [0171.782] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.783] GetFileType (hFile=0x18c) returned 0x1 [0171.783] SetErrorMode (uMode=0x0) returned 0x1 [0171.783] GetFileType (hFile=0x18c) returned 0x1 [0171.783] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x4c4 [0171.783] ReadFile (in: hFile=0x18c, lpBuffer=0x2743940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2743940*, lpNumberOfBytesRead=0x27e828*=0x4c4, lpOverlapped=0x0) returned 1 [0171.785] SetErrorMode (uMode=0x1) returned 0x0 [0171.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0171.785] SetErrorMode (uMode=0x0) returned 0x1 [0171.851] SetErrorMode (uMode=0x1) returned 0x0 [0171.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.854] SetErrorMode (uMode=0x0) returned 0x1 [0171.855] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg")) returned 0 [0171.858] SetErrorMode (uMode=0x1) returned 0x0 [0171.858] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.859] GetFileType (hFile=0x18c) returned 0x1 [0171.859] SetErrorMode (uMode=0x0) returned 0x1 [0171.859] GetFileType (hFile=0x18c) returned 0x1 [0171.859] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x10a9 [0171.859] ReadFile (in: hFile=0x18c, lpBuffer=0x27a0700, nNumberOfBytesToRead=0x10a9, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27a0700*, lpNumberOfBytesRead=0x27e828*=0x10a9, lpOverlapped=0x0) returned 1 [0171.861] SetErrorMode (uMode=0x1) returned 0x0 [0171.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9)) returned 1 [0171.861] SetErrorMode (uMode=0x0) returned 0x1 [0171.919] SetErrorMode (uMode=0x1) returned 0x0 [0171.920] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.922] SetErrorMode (uMode=0x0) returned 0x1 [0171.923] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png")) returned 0 [0171.926] SetErrorMode (uMode=0x1) returned 0x0 [0171.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0171.927] GetFileType (hFile=0x18c) returned 0x1 [0171.927] SetErrorMode (uMode=0x0) returned 0x1 [0171.927] GetFileType (hFile=0x18c) returned 0x1 [0171.927] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x18db [0171.928] ReadFile (in: hFile=0x18c, lpBuffer=0x2805e50, nNumberOfBytesToRead=0x18db, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2805e50*, lpNumberOfBytesRead=0x27e828*=0x18db, lpOverlapped=0x0) returned 1 [0171.929] SetErrorMode (uMode=0x1) returned 0x0 [0171.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db)) returned 1 [0171.930] SetErrorMode (uMode=0x0) returned 0x1 [0171.988] SetErrorMode (uMode=0x1) returned 0x0 [0171.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.991] SetErrorMode (uMode=0x0) returned 0x1 [0171.992] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0 [0171.995] SetErrorMode (uMode=0x1) returned 0x0 [0171.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0171.996] GetFileType (hFile=0x18c) returned 0x1 [0171.996] SetErrorMode (uMode=0x0) returned 0x1 [0171.996] GetFileType (hFile=0x18c) returned 0x1 [0171.998] WriteFile (in: hFile=0x18c, lpBuffer=0x287fa30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x287fa30*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0171.999] WriteFile (in: hFile=0x18c, lpBuffer=0x287fa30*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x287fa30*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0172.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x3b [0172.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x3b [0172.000] SetErrorMode (uMode=0x1) returned 0x0 [0172.000] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.001] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.001] SetErrorMode (uMode=0x0) returned 0x1 [0172.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x3b [0172.002] SetErrorMode (uMode=0x1) returned 0x0 [0172.002] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.002] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.002] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.003] SetErrorMode (uMode=0x0) returned 0x1 [0172.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x55 [0172.003] SetErrorMode (uMode=0x1) returned 0x0 [0172.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\network sharing\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0172.004] GetFileType (hFile=0x18c) returned 0x1 [0172.004] SetErrorMode (uMode=0x0) returned 0x1 [0172.004] GetFileType (hFile=0x18c) returned 0x1 [0172.005] WriteFile (in: hFile=0x18c, lpBuffer=0x2897f60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2897f60*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0172.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x31 [0172.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x31 [0172.007] SetErrorMode (uMode=0x1) returned 0x0 [0172.007] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0172.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0172.008] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.008] SetErrorMode (uMode=0x0) returned 0x1 [0172.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x31 [0172.009] SetErrorMode (uMode=0x1) returned 0x0 [0172.009] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0172.010] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0172.010] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.010] SetErrorMode (uMode=0x0) returned 0x1 [0172.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz", lpFilePart=0x0) returned 0x3c [0172.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz", lpFilePart=0x0) returned 0x3c [0172.010] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0172.011] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0172.011] CoTaskMemFree (pv=0xfe030) [0172.011] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0172.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0172.011] SetErrorMode (uMode=0x1) returned 0x0 [0172.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\skins\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0172.012] GetFileType (hFile=0x18c) returned 0x1 [0172.012] SetErrorMode (uMode=0x0) returned 0x1 [0172.012] GetFileType (hFile=0x18c) returned 0x1 [0172.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x3a [0172.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x3a [0172.013] SetErrorMode (uMode=0x1) returned 0x0 [0172.013] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.014] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.014] SetErrorMode (uMode=0x0) returned 0x1 [0172.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x3a [0172.014] SetErrorMode (uMode=0x1) returned 0x0 [0172.014] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.015] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.015] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.015] SetErrorMode (uMode=0x0) returned 0x1 [0172.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x54 [0172.016] SetErrorMode (uMode=0x1) returned 0x0 [0172.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\visualizations\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0172.016] GetFileType (hFile=0x18c) returned 0x1 [0172.016] SetErrorMode (uMode=0x0) returned 0x1 [0172.016] GetFileType (hFile=0x18c) returned 0x1 [0172.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0172.018] SetErrorMode (uMode=0x1) returned 0x0 [0172.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows media player\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0172.018] GetFileType (hFile=0x18c) returned 0x1 [0172.018] SetErrorMode (uMode=0x0) returned 0x1 [0172.018] GetFileType (hFile=0x18c) returned 0x1 [0172.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT", lpFilePart=0x0) returned 0x21 [0172.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT", lpFilePart=0x0) returned 0x21 [0172.020] SetErrorMode (uMode=0x1) returned 0x0 [0172.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0172.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692a6930, ftCreationTime.dwHighDateTime=0x1d4e346, ftLastAccessTime.dwLowDateTime=0x34be3260, ftLastAccessTime.dwHighDateTime=0x1d4eb09, ftLastWriteTime.dwLowDateTime=0x34be3260, ftLastWriteTime.dwHighDateTime=0x1d4eb09, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fiscal objectives brisbane.exe", cAlternateFileName="FISCAL~1.EXE")) returned 1 [0172.020] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0172.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0172.021] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.021] SetErrorMode (uMode=0x0) returned 0x1 [0172.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT", lpFilePart=0x0) returned 0x21 [0172.021] SetErrorMode (uMode=0x1) returned 0x0 [0172.021] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd6dd2f90, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6dd2f90, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0172.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692a6930, ftCreationTime.dwHighDateTime=0x1d4e346, ftLastAccessTime.dwLowDateTime=0x34be3260, ftLastAccessTime.dwHighDateTime=0x1d4eb09, ftLastWriteTime.dwLowDateTime=0x34be3260, ftLastWriteTime.dwHighDateTime=0x1d4eb09, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fiscal objectives brisbane.exe", cAlternateFileName="FISCAL~1.EXE")) returned 1 [0172.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0172.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0172.022] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.022] SetErrorMode (uMode=0x0) returned 0x1 [0172.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\fiscal objectives brisbane.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\fiscal objectives brisbane.exe", lpFilePart=0x0) returned 0x40 [0172.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\fiscal objectives brisbane.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\fiscal objectives brisbane.exe", lpFilePart=0x0) returned 0x40 [0172.023] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0172.023] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0172.023] CoTaskMemFree (pv=0xfe030) [0172.023] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0172.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x2d [0172.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x2d [0172.023] SetErrorMode (uMode=0x1) returned 0x0 [0172.023] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.031] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.031] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0172.031] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0172.032] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0172.032] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0172.032] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.032] SetErrorMode (uMode=0x0) returned 0x1 [0172.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x2d [0172.032] SetErrorMode (uMode=0x1) returned 0x0 [0172.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0172.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0172.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0172.033] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0172.033] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.033] SetErrorMode (uMode=0x0) returned 0x1 [0172.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe", lpFilePart=0x0) returned 0x39 [0172.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe", lpFilePart=0x0) returned 0x39 [0172.034] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0172.034] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0172.034] CoTaskMemFree (pv=0xfe030) [0172.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0172.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll", lpFilePart=0x0) returned 0x3f [0172.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll", lpFilePart=0x0) returned 0x3f [0172.035] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0172.035] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0172.035] CoTaskMemFree (pv=0xfe030) [0172.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0172.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x33 [0172.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x33 [0172.035] SetErrorMode (uMode=0x1) returned 0x0 [0172.035] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.036] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.036] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0172.036] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0172.036] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.036] SetErrorMode (uMode=0x0) returned 0x1 [0172.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x33 [0172.037] SetErrorMode (uMode=0x1) returned 0x0 [0172.037] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.037] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.037] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0172.037] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0172.037] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.037] SetErrorMode (uMode=0x0) returned 0x1 [0172.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui", lpFilePart=0x0) returned 0x43 [0172.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui", lpFilePart=0x0) returned 0x43 [0172.038] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0172.038] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0172.038] CoTaskMemFree (pv=0xfe030) [0172.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0172.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4d [0172.039] SetErrorMode (uMode=0x1) returned 0x0 [0172.039] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0172.039] GetFileType (hFile=0x18c) returned 0x1 [0172.039] SetErrorMode (uMode=0x0) returned 0x1 [0172.039] GetFileType (hFile=0x18c) returned 0x1 [0172.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x47 [0172.041] SetErrorMode (uMode=0x1) returned 0x0 [0172.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0172.042] GetFileType (hFile=0x18c) returned 0x1 [0172.042] SetErrorMode (uMode=0x0) returned 0x1 [0172.043] GetFileType (hFile=0x18c) returned 0x1 [0172.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x32 [0172.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x32 [0172.047] SetErrorMode (uMode=0x1) returned 0x0 [0172.047] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0172.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0172.050] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0172.050] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0172.050] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0172.050] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0172.050] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.051] SetErrorMode (uMode=0x0) returned 0x1 [0172.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x32 [0172.051] SetErrorMode (uMode=0x1) returned 0x0 [0172.051] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0172.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0172.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0172.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0172.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0172.052] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0172.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0172.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0172.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0172.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0172.053] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0172.053] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0172.054] SetErrorMode (uMode=0x0) returned 0x1 [0172.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll", lpFilePart=0x0) returned 0x47 [0172.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll", lpFilePart=0x0) returned 0x47 [0172.055] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0172.055] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0172.055] CoTaskMemFree (pv=0xfe030) [0172.055] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0172.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0172.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0172.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0172.055] SetErrorMode (uMode=0x1) returned 0x0 [0172.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0172.056] GetFileType (hFile=0x18c) returned 0x1 [0172.056] SetErrorMode (uMode=0x0) returned 0x1 [0172.057] GetFileType (hFile=0x18c) returned 0x1 [0172.057] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x3f54 [0172.057] ReadFile (in: hFile=0x18c, lpBuffer=0x2721a78, nNumberOfBytesToRead=0x3f54, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2721a78*, lpNumberOfBytesRead=0x27e828*=0x3f54, lpOverlapped=0x0) returned 1 [0172.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0172.059] SetErrorMode (uMode=0x1) returned 0x0 [0172.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54)) returned 1 [0172.059] SetErrorMode (uMode=0x0) returned 0x1 [0172.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0172.156] SetErrorMode (uMode=0x1) returned 0x0 [0172.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0172.165] SetErrorMode (uMode=0x0) returned 0x1 [0172.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0172.166] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0 [0172.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x0) returned 0x4c [0172.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x0) returned 0x4c [0172.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x0) returned 0x4c [0172.174] SetErrorMode (uMode=0x1) returned 0x0 [0172.174] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0172.175] GetFileType (hFile=0x18c) returned 0x1 [0172.175] SetErrorMode (uMode=0x0) returned 0x1 [0172.175] GetFileType (hFile=0x18c) returned 0x1 [0172.175] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x136bf6 [0172.178] ReadFile (in: hFile=0x18c, lpBuffer=0x2631fff0, nNumberOfBytesToRead=0x136bf6, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x2631fff0*, lpNumberOfBytesRead=0x27e828*=0x136bf6, lpOverlapped=0x0) returned 1 [0172.204] CloseHandle (hObject=0x18c) returned 1 [0172.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x0) returned 0x4c [0172.217] SetErrorMode (uMode=0x1) returned 0x0 [0172.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6)) returned 1 [0172.217] SetErrorMode (uMode=0x0) returned 0x1 [0172.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x0) returned 0x4c [0172.406] SetErrorMode (uMode=0x1) returned 0x0 [0172.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0172.410] SetErrorMode (uMode=0x0) returned 0x1 [0172.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x0) returned 0x4c [0172.412] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0 [0172.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x0) returned 0x4b [0172.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x0) returned 0x4b [0172.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x0) returned 0x4b [0172.416] SetErrorMode (uMode=0x1) returned 0x0 [0172.416] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0172.417] GetFileType (hFile=0x18c) returned 0x1 [0172.417] SetErrorMode (uMode=0x0) returned 0x1 [0172.417] GetFileType (hFile=0x18c) returned 0x1 [0172.417] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xef486 [0172.419] ReadFile (in: hFile=0x18c, lpBuffer=0x26b9fac0, nNumberOfBytesToRead=0xef486, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x26b9fac0*, lpNumberOfBytesRead=0x27e828*=0xef486, lpOverlapped=0x0) returned 1 [0172.438] CloseHandle (hObject=0x18c) returned 1 [0172.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x0) returned 0x4b [0172.449] SetErrorMode (uMode=0x1) returned 0x0 [0172.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486)) returned 1 [0172.449] SetErrorMode (uMode=0x0) returned 0x1 [0172.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x0) returned 0x4b [0172.600] SetErrorMode (uMode=0x1) returned 0x0 [0172.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0172.610] SetErrorMode (uMode=0x0) returned 0x1 [0172.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x0) returned 0x4b [0172.611] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0 [0172.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", lpFilePart=0x0) returned 0x58 [0172.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", lpFilePart=0x0) returned 0x58 [0172.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", lpFilePart=0x0) returned 0x58 [0172.620] SetErrorMode (uMode=0x1) returned 0x0 [0172.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0172.620] GetFileType (hFile=0x18c) returned 0x1 [0172.620] SetErrorMode (uMode=0x0) returned 0x1 [0172.620] GetFileType (hFile=0x18c) returned 0x1 [0172.621] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x196b56 [0172.625] ReadFile (in: hFile=0x18c, lpBuffer=0x340d1010, nNumberOfBytesToRead=0x196b56, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x340d1010*, lpNumberOfBytesRead=0x27e828*=0x196b56, lpOverlapped=0x0) returned 1 [0172.659] CloseHandle (hObject=0x18c) returned 1 [0172.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", lpFilePart=0x0) returned 0x58 [0172.674] SetErrorMode (uMode=0x1) returned 0x0 [0172.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56)) returned 1 [0172.674] SetErrorMode (uMode=0x0) returned 0x1 [0172.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", lpFilePart=0x0) returned 0x58 [0172.911] SetErrorMode (uMode=0x1) returned 0x0 [0172.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0172.915] SetErrorMode (uMode=0x0) returned 0x1 [0172.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt", lpFilePart=0x0) returned 0x58 [0172.917] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt")) returned 0 [0172.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", lpFilePart=0x0) returned 0x5a [0172.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", lpFilePart=0x0) returned 0x5a [0172.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", lpFilePart=0x0) returned 0x5a [0172.922] SetErrorMode (uMode=0x1) returned 0x0 [0172.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0172.928] GetFileType (hFile=0x18c) returned 0x1 [0172.928] SetErrorMode (uMode=0x0) returned 0x1 [0172.928] GetFileType (hFile=0x18c) returned 0x1 [0172.929] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x160e36 [0172.931] ReadFile (in: hFile=0x18c, lpBuffer=0x34bf0680, nNumberOfBytesToRead=0x160e36, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x34bf0680*, lpNumberOfBytesRead=0x27e828*=0x160e36, lpOverlapped=0x0) returned 1 [0172.978] CloseHandle (hObject=0x18c) returned 1 [0172.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", lpFilePart=0x0) returned 0x5a [0172.992] SetErrorMode (uMode=0x1) returned 0x0 [0172.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36)) returned 1 [0172.992] SetErrorMode (uMode=0x0) returned 0x1 [0173.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", lpFilePart=0x0) returned 0x5a [0173.219] SetErrorMode (uMode=0x1) returned 0x0 [0173.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0173.223] SetErrorMode (uMode=0x0) returned 0x1 [0173.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt", lpFilePart=0x0) returned 0x5a [0173.224] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt")) returned 0 [0173.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", lpFilePart=0x0) returned 0x58 [0173.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", lpFilePart=0x0) returned 0x58 [0173.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", lpFilePart=0x0) returned 0x58 [0173.233] SetErrorMode (uMode=0x1) returned 0x0 [0173.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0173.233] GetFileType (hFile=0x18c) returned 0x1 [0173.233] SetErrorMode (uMode=0x0) returned 0x1 [0173.233] GetFileType (hFile=0x18c) returned 0x1 [0173.233] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0x1b9fb0 [0173.237] ReadFile (in: hFile=0x18c, lpBuffer=0x35597110, nNumberOfBytesToRead=0x1b9fb0, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x35597110*, lpNumberOfBytesRead=0x27e828*=0x1b9fb0, lpOverlapped=0x0) returned 1 [0173.272] CloseHandle (hObject=0x18c) returned 1 [0173.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", lpFilePart=0x0) returned 0x58 [0173.291] SetErrorMode (uMode=0x1) returned 0x0 [0173.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0)) returned 1 [0173.291] SetErrorMode (uMode=0x0) returned 0x1 [0173.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", lpFilePart=0x0) returned 0x58 [0173.522] SetErrorMode (uMode=0x1) returned 0x0 [0173.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0173.526] SetErrorMode (uMode=0x0) returned 0x1 [0173.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt", lpFilePart=0x0) returned 0x58 [0173.527] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt")) returned 0 [0173.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x0) returned 0x49 [0173.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x0) returned 0x49 [0173.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x0) returned 0x49 [0173.536] SetErrorMode (uMode=0x1) returned 0x0 [0173.536] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0173.537] GetFileType (hFile=0x18c) returned 0x1 [0173.537] SetErrorMode (uMode=0x0) returned 0x1 [0173.537] GetFileType (hFile=0x18c) returned 0x1 [0173.537] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xafa8 [0173.537] ReadFile (in: hFile=0x18c, lpBuffer=0x27676e8, nNumberOfBytesToRead=0xafa8, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x27676e8*, lpNumberOfBytesRead=0x27e828*=0xafa8, lpOverlapped=0x0) returned 1 [0173.539] CloseHandle (hObject=0x18c) returned 1 [0173.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x0) returned 0x49 [0173.540] SetErrorMode (uMode=0x1) returned 0x0 [0173.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8)) returned 1 [0173.541] SetErrorMode (uMode=0x0) returned 0x1 [0173.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x0) returned 0x49 [0173.638] SetErrorMode (uMode=0x1) returned 0x0 [0173.638] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0173.642] SetErrorMode (uMode=0x0) returned 0x1 [0173.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x105, lpBuffer=0x27bec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x0) returned 0x49 [0173.643] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0 [0173.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", lpFilePart=0x0) returned 0x38 [0173.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", lpFilePart=0x0) returned 0x38 [0173.646] SetErrorMode (uMode=0x1) returned 0x0 [0173.646] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0173.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0173.647] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.648] SetErrorMode (uMode=0x0) returned 0x1 [0173.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", lpFilePart=0x0) returned 0x38 [0173.648] SetErrorMode (uMode=0x1) returned 0x0 [0173.648] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.648] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.648] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0173.649] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0173.649] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.649] SetErrorMode (uMode=0x0) returned 0x1 [0173.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui", lpFilePart=0x0) returned 0x51 [0173.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui", lpFilePart=0x0) returned 0x51 [0173.649] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.649] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.649] CoTaskMemFree (pv=0xfe030) [0173.649] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x52 [0173.650] SetErrorMode (uMode=0x1) returned 0x0 [0173.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.650] GetFileType (hFile=0x18c) returned 0x1 [0173.650] SetErrorMode (uMode=0x0) returned 0x1 [0173.650] GetFileType (hFile=0x18c) returned 0x1 [0173.652] WriteFile (in: hFile=0x18c, lpBuffer=0x281ac58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x281ac58*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0173.654] WriteFile (in: hFile=0x18c, lpBuffer=0x281ac58*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x281ac58*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0173.654] CloseHandle (hObject=0x18c) returned 1 [0173.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4c [0173.655] SetErrorMode (uMode=0x1) returned 0x0 [0173.655] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.655] GetFileType (hFile=0x18c) returned 0x1 [0173.655] SetErrorMode (uMode=0x0) returned 0x1 [0173.655] GetFileType (hFile=0x18c) returned 0x1 [0173.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3b [0173.658] SetErrorMode (uMode=0x1) returned 0x0 [0173.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows nt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.659] GetFileType (hFile=0x18c) returned 0x1 [0173.659] SetErrorMode (uMode=0x0) returned 0x1 [0173.659] GetFileType (hFile=0x18c) returned 0x1 [0173.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer", lpFilePart=0x0) returned 0x2b [0173.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer", lpFilePart=0x0) returned 0x2b [0173.660] SetErrorMode (uMode=0x1) returned 0x0 [0173.660] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6d86cd0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6d86cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6d86cd0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6d86cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc269fc0, ftCreationTime.dwHighDateTime=0x1d4d878, ftLastAccessTime.dwLowDateTime=0x30c57ab0, ftLastAccessTime.dwHighDateTime=0x1d512fa, ftLastWriteTime.dwLowDateTime=0x30c57ab0, ftLastWriteTime.dwHighDateTime=0x1d512fa, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="je-overnight-command.exe", cAlternateFileName="JE-OVE~1.EXE")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0173.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0173.661] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.662] SetErrorMode (uMode=0x0) returned 0x1 [0173.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer", lpFilePart=0x0) returned 0x2b [0173.662] SetErrorMode (uMode=0x1) returned 0x0 [0173.662] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6d86cd0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6d86cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6d86cd0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6d86cd0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0173.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0173.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc269fc0, ftCreationTime.dwHighDateTime=0x1d4d878, ftLastAccessTime.dwLowDateTime=0x30c57ab0, ftLastAccessTime.dwHighDateTime=0x1d512fa, ftLastWriteTime.dwLowDateTime=0x30c57ab0, ftLastWriteTime.dwHighDateTime=0x1d512fa, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="je-overnight-command.exe", cAlternateFileName="JE-OVE~1.EXE")) returned 1 [0173.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0173.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0173.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0173.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0173.663] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.663] SetErrorMode (uMode=0x0) returned 0x1 [0173.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe", lpFilePart=0x0) returned 0x3e [0173.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe", lpFilePart=0x0) returned 0x3e [0173.664] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.664] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.664] CoTaskMemFree (pv=0xfe030) [0173.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll", lpFilePart=0x0) returned 0x3d [0173.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll", lpFilePart=0x0) returned 0x3d [0173.664] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.664] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.664] CoTaskMemFree (pv=0xfe030) [0173.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\je-overnight-command.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\je-overnight-command.exe", lpFilePart=0x0) returned 0x44 [0173.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\je-overnight-command.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\je-overnight-command.exe", lpFilePart=0x0) returned 0x44 [0173.664] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.664] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.665] CoTaskMemFree (pv=0xfe030) [0173.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll", lpFilePart=0x0) returned 0x38 [0173.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll", lpFilePart=0x0) returned 0x38 [0173.665] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.665] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.665] CoTaskMemFree (pv=0xfe030) [0173.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll", lpFilePart=0x0) returned 0x39 [0173.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll", lpFilePart=0x0) returned 0x39 [0173.665] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.665] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.665] CoTaskMemFree (pv=0xfe030) [0173.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll", lpFilePart=0x0) returned 0x3b [0173.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll", lpFilePart=0x0) returned 0x3b [0173.666] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.666] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.666] CoTaskMemFree (pv=0xfe030) [0173.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x31 [0173.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x31 [0173.666] SetErrorMode (uMode=0x1) returned 0x0 [0173.666] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.667] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.667] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0173.667] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0173.667] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0173.667] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0173.667] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.667] SetErrorMode (uMode=0x0) returned 0x1 [0173.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x31 [0173.668] SetErrorMode (uMode=0x1) returned 0x0 [0173.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0173.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0173.668] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0173.669] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0173.669] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.669] SetErrorMode (uMode=0x0) returned 0x1 [0173.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui", lpFilePart=0x0) returned 0x48 [0173.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui", lpFilePart=0x0) returned 0x48 [0173.669] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.669] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.669] CoTaskMemFree (pv=0xfe030) [0173.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui", lpFilePart=0x0) returned 0x42 [0173.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui", lpFilePart=0x0) returned 0x42 [0173.670] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.670] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.670] CoTaskMemFree (pv=0xfe030) [0173.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui", lpFilePart=0x0) returned 0x45 [0173.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui", lpFilePart=0x0) returned 0x45 [0173.670] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.670] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.670] CoTaskMemFree (pv=0xfe030) [0173.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0173.671] SetErrorMode (uMode=0x1) returned 0x0 [0173.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.671] GetFileType (hFile=0x18c) returned 0x1 [0173.671] SetErrorMode (uMode=0x0) returned 0x1 [0173.671] GetFileType (hFile=0x18c) returned 0x1 [0173.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0173.673] SetErrorMode (uMode=0x1) returned 0x0 [0173.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows photo viewer\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.673] GetFileType (hFile=0x18c) returned 0x1 [0173.673] SetErrorMode (uMode=0x0) returned 0x1 [0173.673] GetFileType (hFile=0x18c) returned 0x1 [0173.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices", lpFilePart=0x0) returned 0x2f [0173.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices", lpFilePart=0x0) returned 0x2f [0173.675] SetErrorMode (uMode=0x1) returned 0x0 [0173.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0173.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ce8a20, ftCreationTime.dwHighDateTime=0x1d51c93, ftLastAccessTime.dwLowDateTime=0xe61cff70, ftLastAccessTime.dwHighDateTime=0x1d5056a, ftLastWriteTime.dwLowDateTime=0xe61cff70, ftLastWriteTime.dwHighDateTime=0x1d5056a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuck mailed.exe", cAlternateFileName="STUCKM~1.EXE")) returned 1 [0173.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ce8a20, ftCreationTime.dwHighDateTime=0x1d51c93, ftLastAccessTime.dwLowDateTime=0xe61cff70, ftLastAccessTime.dwHighDateTime=0x1d5056a, ftLastWriteTime.dwLowDateTime=0xe61cff70, ftLastWriteTime.dwHighDateTime=0x1d5056a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuck mailed.exe", cAlternateFileName="STUCKM~1.EXE")) returned 0 [0173.676] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.676] SetErrorMode (uMode=0x0) returned 0x1 [0173.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices", lpFilePart=0x0) returned 0x2f [0173.676] SetErrorMode (uMode=0x1) returned 0x0 [0173.676] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6df90f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6df90f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0173.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ce8a20, ftCreationTime.dwHighDateTime=0x1d51c93, ftLastAccessTime.dwLowDateTime=0xe61cff70, ftLastAccessTime.dwHighDateTime=0x1d5056a, ftLastWriteTime.dwLowDateTime=0xe61cff70, ftLastWriteTime.dwHighDateTime=0x1d5056a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuck mailed.exe", cAlternateFileName="STUCKM~1.EXE")) returned 1 [0173.676] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ce8a20, ftCreationTime.dwHighDateTime=0x1d51c93, ftLastAccessTime.dwLowDateTime=0xe61cff70, ftLastAccessTime.dwHighDateTime=0x1d5056a, ftLastWriteTime.dwLowDateTime=0xe61cff70, ftLastWriteTime.dwHighDateTime=0x1d5056a, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuck mailed.exe", cAlternateFileName="STUCKM~1.EXE")) returned 0 [0173.677] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.677] SetErrorMode (uMode=0x0) returned 0x1 [0173.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll", lpFilePart=0x0) returned 0x3a [0173.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll", lpFilePart=0x0) returned 0x3a [0173.677] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.677] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.677] CoTaskMemFree (pv=0xfe030) [0173.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\stuck mailed.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\stuck mailed.exe", lpFilePart=0x0) returned 0x40 [0173.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\stuck mailed.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\stuck mailed.exe", lpFilePart=0x0) returned 0x40 [0173.678] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.678] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.678] CoTaskMemFree (pv=0xfe030) [0173.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x49 [0173.678] SetErrorMode (uMode=0x1) returned 0x0 [0173.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows portable devices\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.680] GetFileType (hFile=0x18c) returned 0x1 [0173.680] SetErrorMode (uMode=0x0) returned 0x1 [0173.680] GetFileType (hFile=0x18c) returned 0x1 [0173.682] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar", lpFilePart=0x0) returned 0x26 [0173.682] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar", lpFilePart=0x0) returned 0x26 [0173.682] SetErrorMode (uMode=0x1) returned 0x0 [0173.682] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0173.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0173.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0173.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0173.685] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.686] SetErrorMode (uMode=0x0) returned 0x1 [0173.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar", lpFilePart=0x0) returned 0x26 [0173.686] SetErrorMode (uMode=0x1) returned 0x0 [0173.686] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0173.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0173.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0173.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0173.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0173.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0173.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0173.689] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.689] SetErrorMode (uMode=0x0) returned 0x1 [0173.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll", lpFilePart=0x0) returned 0x31 [0173.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll", lpFilePart=0x0) returned 0x31 [0173.690] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.690] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.690] CoTaskMemFree (pv=0xfe030) [0173.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\settings.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\settings.ini", lpFilePart=0x0) returned 0x33 [0173.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\settings.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\settings.ini", lpFilePart=0x0) returned 0x33 [0173.691] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.691] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.691] CoTaskMemFree (pv=0xfe030) [0173.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe", lpFilePart=0x0) returned 0x32 [0173.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe", lpFilePart=0x0) returned 0x32 [0173.691] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.691] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.691] CoTaskMemFree (pv=0xfe030) [0173.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll", lpFilePart=0x0) returned 0x31 [0173.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll", lpFilePart=0x0) returned 0x31 [0173.692] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.692] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.692] CoTaskMemFree (pv=0xfe030) [0173.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x2c [0173.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x2c [0173.693] SetErrorMode (uMode=0x1) returned 0x0 [0173.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0173.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0173.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0173.695] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.696] SetErrorMode (uMode=0x0) returned 0x1 [0173.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x2c [0173.696] SetErrorMode (uMode=0x1) returned 0x0 [0173.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0173.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0173.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0173.697] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.697] SetErrorMode (uMode=0x0) returned 0x1 [0173.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui", lpFilePart=0x0) returned 0x3b [0173.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui", lpFilePart=0x0) returned 0x3b [0173.698] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.698] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.698] CoTaskMemFree (pv=0xfe030) [0173.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui", lpFilePart=0x0) returned 0x3c [0173.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui", lpFilePart=0x0) returned 0x3c [0173.698] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0173.698] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0173.699] CoTaskMemFree (pv=0xfe030) [0173.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0173.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x46 [0173.699] SetErrorMode (uMode=0x1) returned 0x0 [0173.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0173.699] GetFileType (hFile=0x18c) returned 0x1 [0173.700] SetErrorMode (uMode=0x0) returned 0x1 [0173.700] GetFileType (hFile=0x18c) returned 0x1 [0173.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x2e [0173.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x2e [0173.701] SetErrorMode (uMode=0x1) returned 0x0 [0173.701] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1 [0173.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1 [0173.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1 [0173.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1 [0173.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1 [0173.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1 [0173.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1 [0173.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1 [0173.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 0 [0173.705] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.705] SetErrorMode (uMode=0x0) returned 0x1 [0173.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x2e [0173.706] SetErrorMode (uMode=0x1) returned 0x0 [0173.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1 [0173.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1 [0173.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1 [0173.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1 [0173.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1 [0173.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1 [0173.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1 [0173.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1 [0173.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 0 [0173.708] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.709] SetErrorMode (uMode=0x0) returned 0x1 [0173.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x3e [0173.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x3e [0173.710] SetErrorMode (uMode=0x1) returned 0x0 [0173.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0173.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0173.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0173.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0173.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0173.712] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.715] SetErrorMode (uMode=0x0) returned 0x1 [0173.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x3e [0173.715] SetErrorMode (uMode=0x1) returned 0x0 [0173.715] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0173.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0173.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0173.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0173.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0173.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0173.717] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0173.717] SetErrorMode (uMode=0x0) returned 0x1 [0173.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0173.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0173.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0173.718] SetErrorMode (uMode=0x1) returned 0x0 [0173.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0173.719] SetErrorMode (uMode=0x0) returned 0x1 [0173.719] GetFileType (hFile=0x18c) returned 0x1 [0173.719] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1a74 [0173.719] ReadFile (in: hFile=0x18c, lpBuffer=0x28c38f0, nNumberOfBytesToRead=0x1a74, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28c38f0*, lpNumberOfBytesRead=0x27e788*=0x1a74, lpOverlapped=0x0) returned 1 [0173.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0173.721] SetErrorMode (uMode=0x1) returned 0x0 [0173.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74)) returned 1 [0173.721] SetErrorMode (uMode=0x0) returned 0x1 [0173.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0173.838] SetErrorMode (uMode=0x1) returned 0x0 [0173.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0173.843] SetErrorMode (uMode=0x0) returned 0x1 [0173.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0173.845] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png")) returned 0 [0173.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0173.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0173.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0173.853] SetErrorMode (uMode=0x1) returned 0x0 [0173.853] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0173.853] GetFileType (hFile=0x18c) returned 0x1 [0173.853] SetErrorMode (uMode=0x0) returned 0x1 [0173.853] GetFileType (hFile=0x18c) returned 0x1 [0173.853] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0xd13 [0173.853] ReadFile (in: hFile=0x18c, lpBuffer=0x27251f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27251f8*, lpNumberOfBytesRead=0x27e788*=0xd13, lpOverlapped=0x0) returned 1 [0173.855] CloseHandle (hObject=0x18c) returned 1 [0173.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0173.856] SetErrorMode (uMode=0x1) returned 0x0 [0173.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13)) returned 1 [0173.856] SetErrorMode (uMode=0x0) returned 0x1 [0173.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0173.955] SetErrorMode (uMode=0x1) returned 0x0 [0173.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0173.959] SetErrorMode (uMode=0x0) returned 0x1 [0173.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0173.960] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png")) returned 0 [0173.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0173.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0173.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0173.968] SetErrorMode (uMode=0x1) returned 0x0 [0173.968] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0173.969] GetFileType (hFile=0x18c) returned 0x1 [0173.969] SetErrorMode (uMode=0x0) returned 0x1 [0173.969] GetFileType (hFile=0x18c) returned 0x1 [0173.969] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1816 [0173.969] ReadFile (in: hFile=0x18c, lpBuffer=0x27879c0, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27879c0*, lpNumberOfBytesRead=0x27e788*=0x1816, lpOverlapped=0x0) returned 1 [0173.970] CloseHandle (hObject=0x18c) returned 1 [0173.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0173.971] SetErrorMode (uMode=0x1) returned 0x0 [0173.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0173.971] SetErrorMode (uMode=0x0) returned 0x1 [0174.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0174.091] SetErrorMode (uMode=0x1) returned 0x0 [0174.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.096] SetErrorMode (uMode=0x0) returned 0x1 [0174.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0174.097] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png")) returned 0 [0174.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0174.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0174.100] SetErrorMode (uMode=0x1) returned 0x0 [0174.100] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1 [0174.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0174.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0174.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0174.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0174.102] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.103] SetErrorMode (uMode=0x0) returned 0x1 [0174.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0174.103] SetErrorMode (uMode=0x1) returned 0x0 [0174.103] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.103] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.103] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1 [0174.103] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0174.103] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0174.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0174.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0174.104] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.104] SetErrorMode (uMode=0x0) returned 0x1 [0174.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", lpFilePart=0x0) returned 0x52 [0174.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", lpFilePart=0x0) returned 0x52 [0174.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", lpFilePart=0x0) returned 0x52 [0174.104] SetErrorMode (uMode=0x1) returned 0x0 [0174.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.107] GetFileType (hFile=0x18c) returned 0x1 [0174.107] SetErrorMode (uMode=0x0) returned 0x1 [0174.107] GetFileType (hFile=0x18c) returned 0x1 [0174.107] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4a9e [0174.107] ReadFile (in: hFile=0x18c, lpBuffer=0x27f3448, nNumberOfBytesToRead=0x4a9e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27f3448*, lpNumberOfBytesRead=0x27e6e8*=0x4a9e, lpOverlapped=0x0) returned 1 [0174.109] CloseHandle (hObject=0x18c) returned 1 [0174.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", lpFilePart=0x0) returned 0x52 [0174.110] SetErrorMode (uMode=0x1) returned 0x0 [0174.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e)) returned 1 [0174.110] SetErrorMode (uMode=0x0) returned 0x1 [0174.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", lpFilePart=0x0) returned 0x52 [0174.198] SetErrorMode (uMode=0x1) returned 0x0 [0174.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.202] SetErrorMode (uMode=0x0) returned 0x1 [0174.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html", lpFilePart=0x0) returned 0x52 [0174.204] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html")) returned 0 [0174.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0174.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0174.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0174.212] SetErrorMode (uMode=0x1) returned 0x0 [0174.212] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.213] GetFileType (hFile=0x18c) returned 0x1 [0174.213] SetErrorMode (uMode=0x0) returned 0x1 [0174.213] GetFileType (hFile=0x18c) returned 0x1 [0174.213] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3f2 [0174.213] ReadFile (in: hFile=0x18c, lpBuffer=0x2875df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2875df0*, lpNumberOfBytesRead=0x27e6e8*=0x3f2, lpOverlapped=0x0) returned 1 [0174.215] CloseHandle (hObject=0x18c) returned 1 [0174.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0174.216] SetErrorMode (uMode=0x1) returned 0x0 [0174.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2)) returned 1 [0174.216] SetErrorMode (uMode=0x0) returned 0x1 [0174.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0174.310] SetErrorMode (uMode=0x1) returned 0x0 [0174.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.314] SetErrorMode (uMode=0x0) returned 0x1 [0174.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0174.316] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml")) returned 0 [0174.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0174.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0174.325] SetErrorMode (uMode=0x1) returned 0x0 [0174.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1 [0174.326] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0 [0174.326] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.327] SetErrorMode (uMode=0x0) returned 0x1 [0174.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0174.327] SetErrorMode (uMode=0x1) returned 0x0 [0174.327] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1 [0174.327] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0 [0174.328] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.328] SetErrorMode (uMode=0x0) returned 0x1 [0174.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x0) returned 0x55 [0174.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x0) returned 0x55 [0174.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x0) returned 0x55 [0174.328] SetErrorMode (uMode=0x1) returned 0x0 [0174.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.329] GetFileType (hFile=0x18c) returned 0x1 [0174.329] SetErrorMode (uMode=0x0) returned 0x1 [0174.329] GetFileType (hFile=0x18c) returned 0x1 [0174.329] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x12f0 [0174.330] ReadFile (in: hFile=0x18c, lpBuffer=0x28d40b8, nNumberOfBytesToRead=0x12f0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d40b8*, lpNumberOfBytesRead=0x27e648*=0x12f0, lpOverlapped=0x0) returned 1 [0174.331] CloseHandle (hObject=0x18c) returned 1 [0174.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x0) returned 0x55 [0174.332] SetErrorMode (uMode=0x1) returned 0x0 [0174.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0)) returned 1 [0174.332] SetErrorMode (uMode=0x0) returned 0x1 [0174.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x0) returned 0x55 [0174.482] SetErrorMode (uMode=0x1) returned 0x0 [0174.482] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.485] SetErrorMode (uMode=0x0) returned 0x1 [0174.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x0) returned 0x55 [0174.486] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css")) returned 0 [0174.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x62 [0174.490] SetErrorMode (uMode=0x1) returned 0x0 [0174.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0174.491] GetFileType (hFile=0x18c) returned 0x1 [0174.491] SetErrorMode (uMode=0x0) returned 0x1 [0174.491] GetFileType (hFile=0x18c) returned 0x1 [0174.493] WriteFile (in: hFile=0x18c, lpBuffer=0x274c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x274c9c0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0174.495] WriteFile (in: hFile=0x18c, lpBuffer=0x274c9c0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x274c9c0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0174.495] CloseHandle (hObject=0x18c) returned 1 [0174.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0174.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0174.496] SetErrorMode (uMode=0x1) returned 0x0 [0174.496] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.497] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.497] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1 [0174.497] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0 [0174.497] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.497] SetErrorMode (uMode=0x0) returned 0x1 [0174.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0174.497] SetErrorMode (uMode=0x1) returned 0x0 [0174.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.498] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.498] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1 [0174.498] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0 [0174.498] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.498] SetErrorMode (uMode=0x0) returned 0x1 [0174.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", lpFilePart=0x0) returned 0x53 [0174.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", lpFilePart=0x0) returned 0x53 [0174.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", lpFilePart=0x0) returned 0x53 [0174.499] SetErrorMode (uMode=0x1) returned 0x0 [0174.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.499] GetFileType (hFile=0x18c) returned 0x1 [0174.499] SetErrorMode (uMode=0x0) returned 0x1 [0174.499] GetFileType (hFile=0x18c) returned 0x1 [0174.499] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xff08 [0174.499] ReadFile (in: hFile=0x18c, lpBuffer=0x2754668, nNumberOfBytesToRead=0xff08, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2754668*, lpNumberOfBytesRead=0x27e648*=0xff08, lpOverlapped=0x0) returned 1 [0174.520] CloseHandle (hObject=0x18c) returned 1 [0174.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", lpFilePart=0x0) returned 0x53 [0174.521] SetErrorMode (uMode=0x1) returned 0x0 [0174.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08)) returned 1 [0174.521] SetErrorMode (uMode=0x0) returned 0x1 [0174.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", lpFilePart=0x0) returned 0x53 [0174.629] SetErrorMode (uMode=0x1) returned 0x0 [0174.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.635] SetErrorMode (uMode=0x0) returned 0x1 [0174.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js", lpFilePart=0x0) returned 0x53 [0174.636] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js")) returned 0 [0174.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0174.645] SetErrorMode (uMode=0x1) returned 0x0 [0174.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0174.646] GetFileType (hFile=0x18c) returned 0x1 [0174.646] SetErrorMode (uMode=0x0) returned 0x1 [0174.646] GetFileType (hFile=0x18c) returned 0x1 [0174.647] WriteFile (in: hFile=0x18c, lpBuffer=0x2821190*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2821190*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0174.650] CloseHandle (hObject=0x18c) returned 1 [0174.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0174.651] SetErrorMode (uMode=0x1) returned 0x0 [0174.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0174.652] GetFileType (hFile=0x18c) returned 0x1 [0174.652] SetErrorMode (uMode=0x0) returned 0x1 [0174.652] GetFileType (hFile=0x18c) returned 0x1 [0174.654] CloseHandle (hObject=0x18c) returned 1 [0174.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", lpFilePart=0x0) returned 0x45 [0174.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", lpFilePart=0x0) returned 0x45 [0174.654] SetErrorMode (uMode=0x1) returned 0x0 [0174.654] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1 [0174.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1 [0174.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb378fd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb38745bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ee3a28, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ee3a28, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3aafa5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f7bfa4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f7bfa4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1 [0174.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8014520, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8014520, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1 [0174.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1 [0174.659] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0 [0174.659] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.660] SetErrorMode (uMode=0x0) returned 0x1 [0174.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", lpFilePart=0x0) returned 0x45 [0174.660] SetErrorMode (uMode=0x1) returned 0x0 [0174.660] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb378fd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb38745bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1 [0174.661] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ee3a28, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ee3a28, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3aafa5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f7bfa4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f7bfa4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8014520, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8014520, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1 [0174.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1 [0174.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0 [0174.664] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0174.664] SetErrorMode (uMode=0x0) returned 0x1 [0174.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x0) returned 0x51 [0174.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x0) returned 0x51 [0174.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x0) returned 0x51 [0174.665] SetErrorMode (uMode=0x1) returned 0x0 [0174.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.667] GetFileType (hFile=0x18c) returned 0x1 [0174.667] SetErrorMode (uMode=0x0) returned 0x1 [0174.667] GetFileType (hFile=0x18c) returned 0x1 [0174.667] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6a6 [0174.667] ReadFile (in: hFile=0x18c, lpBuffer=0x2841c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2841c88*, lpNumberOfBytesRead=0x27e6e8*=0x6a6, lpOverlapped=0x0) returned 1 [0174.671] CloseHandle (hObject=0x18c) returned 1 [0174.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x0) returned 0x51 [0174.672] SetErrorMode (uMode=0x1) returned 0x0 [0174.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6)) returned 1 [0174.672] SetErrorMode (uMode=0x0) returned 0x1 [0174.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x0) returned 0x51 [0174.800] SetErrorMode (uMode=0x1) returned 0x0 [0174.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.806] SetErrorMode (uMode=0x0) returned 0x1 [0174.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x0) returned 0x51 [0174.807] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png")) returned 0 [0174.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x0) returned 0x51 [0174.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x0) returned 0x51 [0174.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x0) returned 0x51 [0174.812] SetErrorMode (uMode=0x1) returned 0x0 [0174.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.813] GetFileType (hFile=0x18c) returned 0x1 [0174.813] SetErrorMode (uMode=0x0) returned 0x1 [0174.813] GetFileType (hFile=0x18c) returned 0x1 [0174.813] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x557 [0174.813] ReadFile (in: hFile=0x18c, lpBuffer=0x2893b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2893b50*, lpNumberOfBytesRead=0x27e6e8*=0x557, lpOverlapped=0x0) returned 1 [0174.814] CloseHandle (hObject=0x18c) returned 1 [0174.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x0) returned 0x51 [0174.815] SetErrorMode (uMode=0x1) returned 0x0 [0174.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557)) returned 1 [0174.815] SetErrorMode (uMode=0x0) returned 0x1 [0174.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x0) returned 0x51 [0174.906] SetErrorMode (uMode=0x1) returned 0x0 [0174.907] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0174.916] SetErrorMode (uMode=0x0) returned 0x1 [0174.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x0) returned 0x51 [0174.918] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png")) returned 0 [0174.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x0) returned 0x52 [0174.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x0) returned 0x52 [0174.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x0) returned 0x52 [0174.927] SetErrorMode (uMode=0x1) returned 0x0 [0174.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0174.928] GetFileType (hFile=0x18c) returned 0x1 [0174.928] SetErrorMode (uMode=0x0) returned 0x1 [0174.928] GetFileType (hFile=0x18c) returned 0x1 [0174.928] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x496 [0174.928] ReadFile (in: hFile=0x18c, lpBuffer=0x28f4660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f4660*, lpNumberOfBytesRead=0x27e6e8*=0x496, lpOverlapped=0x0) returned 1 [0174.931] CloseHandle (hObject=0x18c) returned 1 [0174.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x0) returned 0x52 [0174.932] SetErrorMode (uMode=0x1) returned 0x0 [0174.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496)) returned 1 [0174.933] SetErrorMode (uMode=0x0) returned 0x1 [0175.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x0) returned 0x52 [0175.028] SetErrorMode (uMode=0x1) returned 0x0 [0175.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.032] SetErrorMode (uMode=0x0) returned 0x1 [0175.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x0) returned 0x52 [0175.033] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png")) returned 0 [0175.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", lpFilePart=0x0) returned 0x57 [0175.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", lpFilePart=0x0) returned 0x57 [0175.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", lpFilePart=0x0) returned 0x57 [0175.040] SetErrorMode (uMode=0x1) returned 0x0 [0175.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.041] GetFileType (hFile=0x18c) returned 0x1 [0175.041] SetErrorMode (uMode=0x0) returned 0x1 [0175.041] GetFileType (hFile=0x18c) returned 0x1 [0175.041] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc9 [0175.041] ReadFile (in: hFile=0x18c, lpBuffer=0x2754a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2754a68*, lpNumberOfBytesRead=0x27e6e8*=0xc9, lpOverlapped=0x0) returned 1 [0175.049] CloseHandle (hObject=0x18c) returned 1 [0175.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", lpFilePart=0x0) returned 0x57 [0175.050] SetErrorMode (uMode=0x1) returned 0x0 [0175.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb378fd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc9)) returned 1 [0175.050] SetErrorMode (uMode=0x0) returned 0x1 [0175.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", lpFilePart=0x0) returned 0x57 [0175.150] SetErrorMode (uMode=0x1) returned 0x0 [0175.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.153] SetErrorMode (uMode=0x0) returned 0x1 [0175.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png", lpFilePart=0x0) returned 0x57 [0175.154] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png")) returned 0 [0175.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", lpFilePart=0x0) returned 0x54 [0175.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", lpFilePart=0x0) returned 0x54 [0175.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", lpFilePart=0x0) returned 0x54 [0175.161] SetErrorMode (uMode=0x1) returned 0x0 [0175.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.177] GetFileType (hFile=0x18c) returned 0x1 [0175.177] SetErrorMode (uMode=0x0) returned 0x1 [0175.177] GetFileType (hFile=0x18c) returned 0x1 [0175.177] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x19d [0175.177] ReadFile (in: hFile=0x18c, lpBuffer=0x27b3540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27b3540*, lpNumberOfBytesRead=0x27e6e8*=0x19d, lpOverlapped=0x0) returned 1 [0175.178] CloseHandle (hObject=0x18c) returned 1 [0175.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", lpFilePart=0x0) returned 0x54 [0175.179] SetErrorMode (uMode=0x1) returned 0x0 [0175.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb38745bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x19d)) returned 1 [0175.179] SetErrorMode (uMode=0x0) returned 0x1 [0175.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", lpFilePart=0x0) returned 0x54 [0175.304] SetErrorMode (uMode=0x1) returned 0x0 [0175.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.308] SetErrorMode (uMode=0x0) returned 0x1 [0175.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png", lpFilePart=0x0) returned 0x54 [0175.310] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png")) returned 0 [0175.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", lpFilePart=0x0) returned 0x53 [0175.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", lpFilePart=0x0) returned 0x53 [0175.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", lpFilePart=0x0) returned 0x53 [0175.316] SetErrorMode (uMode=0x1) returned 0x0 [0175.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.316] GetFileType (hFile=0x18c) returned 0x1 [0175.316] SetErrorMode (uMode=0x0) returned 0x1 [0175.316] GetFileType (hFile=0x18c) returned 0x1 [0175.316] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x242 [0175.316] ReadFile (in: hFile=0x18c, lpBuffer=0x28129d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28129d0*, lpNumberOfBytesRead=0x27e6e8*=0x242, lpOverlapped=0x0) returned 1 [0175.318] CloseHandle (hObject=0x18c) returned 1 [0175.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", lpFilePart=0x0) returned 0x53 [0175.319] SetErrorMode (uMode=0x1) returned 0x0 [0175.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242)) returned 1 [0175.319] SetErrorMode (uMode=0x0) returned 0x1 [0175.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", lpFilePart=0x0) returned 0x53 [0175.417] SetErrorMode (uMode=0x1) returned 0x0 [0175.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.421] SetErrorMode (uMode=0x0) returned 0x1 [0175.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png", lpFilePart=0x0) returned 0x53 [0175.422] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png")) returned 0 [0175.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x0) returned 0x4f [0175.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x0) returned 0x4f [0175.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x0) returned 0x4f [0175.428] SetErrorMode (uMode=0x1) returned 0x0 [0175.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.429] GetFileType (hFile=0x18c) returned 0x1 [0175.429] SetErrorMode (uMode=0x0) returned 0x1 [0175.429] GetFileType (hFile=0x18c) returned 0x1 [0175.429] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcb [0175.429] ReadFile (in: hFile=0x18c, lpBuffer=0x28720c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28720c8*, lpNumberOfBytesRead=0x27e6e8*=0xcb, lpOverlapped=0x0) returned 1 [0175.430] CloseHandle (hObject=0x18c) returned 1 [0175.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x0) returned 0x4f [0175.432] SetErrorMode (uMode=0x1) returned 0x0 [0175.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0175.432] SetErrorMode (uMode=0x0) returned 0x1 [0175.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x0) returned 0x4f [0175.555] SetErrorMode (uMode=0x1) returned 0x0 [0175.555] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.558] SetErrorMode (uMode=0x0) returned 0x1 [0175.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x0) returned 0x4f [0175.559] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png")) returned 0 [0175.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", lpFilePart=0x0) returned 0x57 [0175.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", lpFilePart=0x0) returned 0x57 [0175.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", lpFilePart=0x0) returned 0x57 [0175.564] SetErrorMode (uMode=0x1) returned 0x0 [0175.564] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.564] GetFileType (hFile=0x18c) returned 0x1 [0175.564] SetErrorMode (uMode=0x0) returned 0x1 [0175.564] GetFileType (hFile=0x18c) returned 0x1 [0175.564] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd9 [0175.564] ReadFile (in: hFile=0x18c, lpBuffer=0x28d0c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d0c28*, lpNumberOfBytesRead=0x27e6e8*=0xd9, lpOverlapped=0x0) returned 1 [0175.565] CloseHandle (hObject=0x18c) returned 1 [0175.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", lpFilePart=0x0) returned 0x57 [0175.566] SetErrorMode (uMode=0x1) returned 0x0 [0175.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0175.567] SetErrorMode (uMode=0x0) returned 0x1 [0175.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", lpFilePart=0x0) returned 0x57 [0175.670] SetErrorMode (uMode=0x1) returned 0x0 [0175.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.674] SetErrorMode (uMode=0x0) returned 0x1 [0175.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png", lpFilePart=0x0) returned 0x57 [0175.675] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png")) returned 0 [0175.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", lpFilePart=0x0) returned 0x54 [0175.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", lpFilePart=0x0) returned 0x54 [0175.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", lpFilePart=0x0) returned 0x54 [0175.683] SetErrorMode (uMode=0x1) returned 0x0 [0175.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.684] GetFileType (hFile=0x18c) returned 0x1 [0175.684] SetErrorMode (uMode=0x0) returned 0x1 [0175.684] GetFileType (hFile=0x18c) returned 0x1 [0175.685] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x199 [0175.685] ReadFile (in: hFile=0x18c, lpBuffer=0x272fb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x272fb50*, lpNumberOfBytesRead=0x27e6e8*=0x199, lpOverlapped=0x0) returned 1 [0175.686] CloseHandle (hObject=0x18c) returned 1 [0175.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", lpFilePart=0x0) returned 0x54 [0175.687] SetErrorMode (uMode=0x1) returned 0x0 [0175.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ee3a28, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ee3a28, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x199)) returned 1 [0175.687] SetErrorMode (uMode=0x0) returned 0x1 [0175.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", lpFilePart=0x0) returned 0x54 [0175.829] SetErrorMode (uMode=0x1) returned 0x0 [0175.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.833] SetErrorMode (uMode=0x0) returned 0x1 [0175.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png", lpFilePart=0x0) returned 0x54 [0175.834] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png")) returned 0 [0175.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", lpFilePart=0x0) returned 0x53 [0175.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", lpFilePart=0x0) returned 0x53 [0175.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", lpFilePart=0x0) returned 0x53 [0175.839] SetErrorMode (uMode=0x1) returned 0x0 [0175.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.840] GetFileType (hFile=0x18c) returned 0x1 [0175.840] SetErrorMode (uMode=0x0) returned 0x1 [0175.840] GetFileType (hFile=0x18c) returned 0x1 [0175.840] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x23e [0175.840] ReadFile (in: hFile=0x18c, lpBuffer=0x278eff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x278eff8*, lpNumberOfBytesRead=0x27e6e8*=0x23e, lpOverlapped=0x0) returned 1 [0175.844] CloseHandle (hObject=0x18c) returned 1 [0175.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", lpFilePart=0x0) returned 0x53 [0175.845] SetErrorMode (uMode=0x1) returned 0x0 [0175.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3aafa5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e)) returned 1 [0175.845] SetErrorMode (uMode=0x0) returned 0x1 [0175.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", lpFilePart=0x0) returned 0x53 [0175.935] SetErrorMode (uMode=0x1) returned 0x0 [0175.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0175.939] SetErrorMode (uMode=0x0) returned 0x1 [0175.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png", lpFilePart=0x0) returned 0x53 [0175.941] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png")) returned 0 [0175.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x0) returned 0x4f [0175.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x0) returned 0x4f [0175.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x0) returned 0x4f [0175.947] SetErrorMode (uMode=0x1) returned 0x0 [0175.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0175.948] GetFileType (hFile=0x18c) returned 0x1 [0175.948] SetErrorMode (uMode=0x0) returned 0x1 [0175.948] GetFileType (hFile=0x18c) returned 0x1 [0175.949] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd8 [0175.949] ReadFile (in: hFile=0x18c, lpBuffer=0x27ee6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27ee6a0*, lpNumberOfBytesRead=0x27e6e8*=0xd8, lpOverlapped=0x0) returned 1 [0175.949] CloseHandle (hObject=0x18c) returned 1 [0175.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x0) returned 0x4f [0175.950] SetErrorMode (uMode=0x1) returned 0x0 [0175.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0175.951] SetErrorMode (uMode=0x0) returned 0x1 [0176.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x0) returned 0x4f [0176.041] SetErrorMode (uMode=0x1) returned 0x0 [0176.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.044] SetErrorMode (uMode=0x0) returned 0x1 [0176.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x0) returned 0x4f [0176.045] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png")) returned 0 [0176.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", lpFilePart=0x0) returned 0x59 [0176.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", lpFilePart=0x0) returned 0x59 [0176.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", lpFilePart=0x0) returned 0x59 [0176.050] SetErrorMode (uMode=0x1) returned 0x0 [0176.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.050] GetFileType (hFile=0x18c) returned 0x1 [0176.050] SetErrorMode (uMode=0x0) returned 0x1 [0176.050] GetFileType (hFile=0x18c) returned 0x1 [0176.050] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8d6 [0176.051] ReadFile (in: hFile=0x18c, lpBuffer=0x284dad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x284dad0*, lpNumberOfBytesRead=0x27e6e8*=0x8d6, lpOverlapped=0x0) returned 1 [0176.059] CloseHandle (hObject=0x18c) returned 1 [0176.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", lpFilePart=0x0) returned 0x59 [0176.060] SetErrorMode (uMode=0x1) returned 0x0 [0176.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f7bfa4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f7bfa4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0176.060] SetErrorMode (uMode=0x0) returned 0x1 [0176.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", lpFilePart=0x0) returned 0x59 [0176.148] SetErrorMode (uMode=0x1) returned 0x0 [0176.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.151] SetErrorMode (uMode=0x0) returned 0x1 [0176.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png", lpFilePart=0x0) returned 0x59 [0176.152] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png")) returned 0 [0176.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", lpFilePart=0x0) returned 0x5d [0176.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", lpFilePart=0x0) returned 0x5d [0176.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", lpFilePart=0x0) returned 0x5d [0176.156] SetErrorMode (uMode=0x1) returned 0x0 [0176.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.162] GetFileType (hFile=0x18c) returned 0x1 [0176.162] SetErrorMode (uMode=0x0) returned 0x1 [0176.162] GetFileType (hFile=0x18c) returned 0x1 [0176.162] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbc1 [0176.162] ReadFile (in: hFile=0x18c, lpBuffer=0x28b0ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b0ca0*, lpNumberOfBytesRead=0x27e6e8*=0xbc1, lpOverlapped=0x0) returned 1 [0176.164] CloseHandle (hObject=0x18c) returned 1 [0176.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", lpFilePart=0x0) returned 0x5d [0176.165] SetErrorMode (uMode=0x1) returned 0x0 [0176.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc1)) returned 1 [0176.165] SetErrorMode (uMode=0x0) returned 0x1 [0176.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", lpFilePart=0x0) returned 0x5d [0176.262] SetErrorMode (uMode=0x1) returned 0x0 [0176.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.266] SetErrorMode (uMode=0x0) returned 0x1 [0176.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png", lpFilePart=0x0) returned 0x5d [0176.268] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png")) returned 0 [0176.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", lpFilePart=0x0) returned 0x60 [0176.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", lpFilePart=0x0) returned 0x60 [0176.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", lpFilePart=0x0) returned 0x60 [0176.272] SetErrorMode (uMode=0x1) returned 0x0 [0176.272] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.273] GetFileType (hFile=0x18c) returned 0x1 [0176.273] SetErrorMode (uMode=0x0) returned 0x1 [0176.273] GetFileType (hFile=0x18c) returned 0x1 [0176.273] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xdd5 [0176.273] ReadFile (in: hFile=0x18c, lpBuffer=0x2914df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2914df0*, lpNumberOfBytesRead=0x27e6e8*=0xdd5, lpOverlapped=0x0) returned 1 [0176.275] CloseHandle (hObject=0x18c) returned 1 [0176.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", lpFilePart=0x0) returned 0x60 [0176.276] SetErrorMode (uMode=0x1) returned 0x0 [0176.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd5)) returned 1 [0176.276] SetErrorMode (uMode=0x0) returned 0x1 [0176.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", lpFilePart=0x0) returned 0x60 [0176.403] SetErrorMode (uMode=0x1) returned 0x0 [0176.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.407] SetErrorMode (uMode=0x0) returned 0x1 [0176.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png", lpFilePart=0x0) returned 0x60 [0176.408] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png")) returned 0 [0176.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", lpFilePart=0x0) returned 0x5e [0176.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", lpFilePart=0x0) returned 0x5e [0176.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", lpFilePart=0x0) returned 0x5e [0176.412] SetErrorMode (uMode=0x1) returned 0x0 [0176.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.413] GetFileType (hFile=0x18c) returned 0x1 [0176.413] SetErrorMode (uMode=0x0) returned 0x1 [0176.414] GetFileType (hFile=0x18c) returned 0x1 [0176.414] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbd2 [0176.414] ReadFile (in: hFile=0x18c, lpBuffer=0x27798c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27798c0*, lpNumberOfBytesRead=0x27e6e8*=0xbd2, lpOverlapped=0x0) returned 1 [0176.415] CloseHandle (hObject=0x18c) returned 1 [0176.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", lpFilePart=0x0) returned 0x5e [0176.416] SetErrorMode (uMode=0x1) returned 0x0 [0176.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0176.417] SetErrorMode (uMode=0x0) returned 0x1 [0176.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", lpFilePart=0x0) returned 0x5e [0176.515] SetErrorMode (uMode=0x1) returned 0x0 [0176.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.521] SetErrorMode (uMode=0x0) returned 0x1 [0176.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png", lpFilePart=0x0) returned 0x5e [0176.522] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png")) returned 0 [0176.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", lpFilePart=0x0) returned 0x59 [0176.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", lpFilePart=0x0) returned 0x59 [0176.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", lpFilePart=0x0) returned 0x59 [0176.527] SetErrorMode (uMode=0x1) returned 0x0 [0176.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.527] GetFileType (hFile=0x18c) returned 0x1 [0176.527] SetErrorMode (uMode=0x0) returned 0x1 [0176.527] GetFileType (hFile=0x18c) returned 0x1 [0176.528] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5dc [0176.528] ReadFile (in: hFile=0x18c, lpBuffer=0x27dccb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27dccb8*, lpNumberOfBytesRead=0x27e6e8*=0x5dc, lpOverlapped=0x0) returned 1 [0176.529] CloseHandle (hObject=0x18c) returned 1 [0176.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", lpFilePart=0x0) returned 0x59 [0176.530] SetErrorMode (uMode=0x1) returned 0x0 [0176.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8014520, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8014520, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5dc)) returned 1 [0176.530] SetErrorMode (uMode=0x0) returned 0x1 [0176.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", lpFilePart=0x0) returned 0x59 [0176.652] SetErrorMode (uMode=0x1) returned 0x0 [0176.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.656] SetErrorMode (uMode=0x0) returned 0x1 [0176.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png", lpFilePart=0x0) returned 0x59 [0176.657] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png")) returned 0 [0176.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", lpFilePart=0x0) returned 0x5d [0176.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", lpFilePart=0x0) returned 0x5d [0176.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", lpFilePart=0x0) returned 0x5d [0176.664] SetErrorMode (uMode=0x1) returned 0x0 [0176.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.665] GetFileType (hFile=0x18c) returned 0x1 [0176.665] SetErrorMode (uMode=0x0) returned 0x1 [0176.665] GetFileType (hFile=0x18c) returned 0x1 [0176.665] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xdd8 [0176.665] ReadFile (in: hFile=0x18c, lpBuffer=0x283e080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283e080*, lpNumberOfBytesRead=0x27e6e8*=0xdd8, lpOverlapped=0x0) returned 1 [0176.667] CloseHandle (hObject=0x18c) returned 1 [0176.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", lpFilePart=0x0) returned 0x5d [0176.668] SetErrorMode (uMode=0x1) returned 0x0 [0176.668] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd8)) returned 1 [0176.668] SetErrorMode (uMode=0x0) returned 0x1 [0176.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", lpFilePart=0x0) returned 0x5d [0176.785] SetErrorMode (uMode=0x1) returned 0x0 [0176.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.788] SetErrorMode (uMode=0x0) returned 0x1 [0176.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png", lpFilePart=0x0) returned 0x5d [0176.789] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png")) returned 0 [0176.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", lpFilePart=0x0) returned 0x64 [0176.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", lpFilePart=0x0) returned 0x64 [0176.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", lpFilePart=0x0) returned 0x64 [0176.795] SetErrorMode (uMode=0x1) returned 0x0 [0176.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.795] GetFileType (hFile=0x18c) returned 0x1 [0176.795] SetErrorMode (uMode=0x0) returned 0x1 [0176.795] GetFileType (hFile=0x18c) returned 0x1 [0176.795] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x12a5 [0176.795] ReadFile (in: hFile=0x18c, lpBuffer=0x28a2508, nNumberOfBytesToRead=0x12a5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a2508*, lpNumberOfBytesRead=0x27e6e8*=0x12a5, lpOverlapped=0x0) returned 1 [0176.797] CloseHandle (hObject=0x18c) returned 1 [0176.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", lpFilePart=0x0) returned 0x64 [0176.798] SetErrorMode (uMode=0x1) returned 0x0 [0176.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x12a5)) returned 1 [0176.798] SetErrorMode (uMode=0x0) returned 0x1 [0176.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", lpFilePart=0x0) returned 0x64 [0176.902] SetErrorMode (uMode=0x1) returned 0x0 [0176.902] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.906] SetErrorMode (uMode=0x0) returned 0x1 [0176.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png", lpFilePart=0x0) returned 0x64 [0176.907] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png")) returned 0 [0176.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", lpFilePart=0x0) returned 0x60 [0176.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", lpFilePart=0x0) returned 0x60 [0176.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", lpFilePart=0x0) returned 0x60 [0176.912] SetErrorMode (uMode=0x1) returned 0x0 [0176.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0176.913] GetFileType (hFile=0x18c) returned 0x1 [0176.914] SetErrorMode (uMode=0x0) returned 0x1 [0176.915] GetFileType (hFile=0x18c) returned 0x1 [0176.915] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xaa6 [0176.915] ReadFile (in: hFile=0x18c, lpBuffer=0x2909190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2909190*, lpNumberOfBytesRead=0x27e6e8*=0xaa6, lpOverlapped=0x0) returned 1 [0176.919] CloseHandle (hObject=0x18c) returned 1 [0176.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", lpFilePart=0x0) returned 0x60 [0176.920] SetErrorMode (uMode=0x1) returned 0x0 [0176.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa6)) returned 1 [0176.920] SetErrorMode (uMode=0x0) returned 0x1 [0177.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", lpFilePart=0x0) returned 0x60 [0177.066] SetErrorMode (uMode=0x1) returned 0x0 [0177.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.071] SetErrorMode (uMode=0x0) returned 0x1 [0177.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png", lpFilePart=0x0) returned 0x60 [0177.073] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png")) returned 0 [0177.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x0) returned 0x50 [0177.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x0) returned 0x50 [0177.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x0) returned 0x50 [0177.079] SetErrorMode (uMode=0x1) returned 0x0 [0177.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.080] GetFileType (hFile=0x18c) returned 0x1 [0177.080] SetErrorMode (uMode=0x0) returned 0x1 [0177.080] GetFileType (hFile=0x18c) returned 0x1 [0177.080] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd6 [0177.080] ReadFile (in: hFile=0x18c, lpBuffer=0x276b378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276b378*, lpNumberOfBytesRead=0x27e6e8*=0xd6, lpOverlapped=0x0) returned 1 [0177.081] CloseHandle (hObject=0x18c) returned 1 [0177.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x0) returned 0x50 [0177.083] SetErrorMode (uMode=0x1) returned 0x0 [0177.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0177.083] SetErrorMode (uMode=0x0) returned 0x1 [0177.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x0) returned 0x50 [0177.201] SetErrorMode (uMode=0x1) returned 0x0 [0177.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.207] SetErrorMode (uMode=0x0) returned 0x1 [0177.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x0) returned 0x50 [0177.208] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png")) returned 0 [0177.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x0) returned 0x52 [0177.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x0) returned 0x52 [0177.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x0) returned 0x52 [0177.216] SetErrorMode (uMode=0x1) returned 0x0 [0177.216] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.217] GetFileType (hFile=0x18c) returned 0x1 [0177.217] SetErrorMode (uMode=0x0) returned 0x1 [0177.217] GetFileType (hFile=0x18c) returned 0x1 [0177.217] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3f8 [0177.217] ReadFile (in: hFile=0x18c, lpBuffer=0x27c9a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c9a30*, lpNumberOfBytesRead=0x27e6e8*=0x3f8, lpOverlapped=0x0) returned 1 [0177.220] CloseHandle (hObject=0x18c) returned 1 [0177.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x0) returned 0x52 [0177.222] SetErrorMode (uMode=0x1) returned 0x0 [0177.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8)) returned 1 [0177.222] SetErrorMode (uMode=0x0) returned 0x1 [0177.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x0) returned 0x52 [0177.332] SetErrorMode (uMode=0x1) returned 0x0 [0177.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.336] SetErrorMode (uMode=0x0) returned 0x1 [0177.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x0) returned 0x52 [0177.337] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png")) returned 0 [0177.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x0) returned 0x4e [0177.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x0) returned 0x4e [0177.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x0) returned 0x4e [0177.341] SetErrorMode (uMode=0x1) returned 0x0 [0177.341] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.341] GetFileType (hFile=0x18c) returned 0x1 [0177.342] SetErrorMode (uMode=0x0) returned 0x1 [0177.342] GetFileType (hFile=0x18c) returned 0x1 [0177.342] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x380 [0177.342] ReadFile (in: hFile=0x18c, lpBuffer=0x2829fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2829fd0*, lpNumberOfBytesRead=0x27e6e8*=0x380, lpOverlapped=0x0) returned 1 [0177.343] CloseHandle (hObject=0x18c) returned 1 [0177.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x0) returned 0x4e [0177.344] SetErrorMode (uMode=0x1) returned 0x0 [0177.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0177.344] SetErrorMode (uMode=0x0) returned 0x1 [0177.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x0) returned 0x4e [0177.436] SetErrorMode (uMode=0x1) returned 0x0 [0177.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.440] SetErrorMode (uMode=0x0) returned 0x1 [0177.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x0) returned 0x4e [0177.442] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png")) returned 0 [0177.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x0) returned 0x4f [0177.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x0) returned 0x4f [0177.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x0) returned 0x4f [0177.449] SetErrorMode (uMode=0x1) returned 0x0 [0177.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.450] GetFileType (hFile=0x18c) returned 0x1 [0177.450] SetErrorMode (uMode=0x0) returned 0x1 [0177.450] GetFileType (hFile=0x18c) returned 0x1 [0177.450] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x96 [0177.451] ReadFile (in: hFile=0x18c, lpBuffer=0x2889c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2889c88*, lpNumberOfBytesRead=0x27e6e8*=0x96, lpOverlapped=0x0) returned 1 [0177.451] CloseHandle (hObject=0x18c) returned 1 [0177.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x0) returned 0x4f [0177.452] SetErrorMode (uMode=0x1) returned 0x0 [0177.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1 [0177.453] SetErrorMode (uMode=0x0) returned 0x1 [0177.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x0) returned 0x4f [0177.551] SetErrorMode (uMode=0x1) returned 0x0 [0177.551] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.555] SetErrorMode (uMode=0x0) returned 0x1 [0177.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x0) returned 0x4f [0177.556] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png")) returned 0 [0177.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", lpFilePart=0x0) returned 0x54 [0177.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", lpFilePart=0x0) returned 0x54 [0177.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", lpFilePart=0x0) returned 0x54 [0177.561] SetErrorMode (uMode=0x1) returned 0x0 [0177.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.561] GetFileType (hFile=0x18c) returned 0x1 [0177.561] SetErrorMode (uMode=0x0) returned 0x1 [0177.561] GetFileType (hFile=0x18c) returned 0x1 [0177.561] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1f6 [0177.561] ReadFile (in: hFile=0x18c, lpBuffer=0x28e8668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e8668*, lpNumberOfBytesRead=0x27e6e8*=0x1f6, lpOverlapped=0x0) returned 1 [0177.563] CloseHandle (hObject=0x18c) returned 1 [0177.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", lpFilePart=0x0) returned 0x54 [0177.564] SetErrorMode (uMode=0x1) returned 0x0 [0177.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0177.564] SetErrorMode (uMode=0x0) returned 0x1 [0177.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", lpFilePart=0x0) returned 0x54 [0177.687] SetErrorMode (uMode=0x1) returned 0x0 [0177.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.691] SetErrorMode (uMode=0x0) returned 0x1 [0177.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png", lpFilePart=0x0) returned 0x54 [0177.692] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png")) returned 0 [0177.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", lpFilePart=0x0) returned 0x54 [0177.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", lpFilePart=0x0) returned 0x54 [0177.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", lpFilePart=0x0) returned 0x54 [0177.697] SetErrorMode (uMode=0x1) returned 0x0 [0177.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.703] GetFileType (hFile=0x18c) returned 0x1 [0177.703] SetErrorMode (uMode=0x0) returned 0x1 [0177.703] GetFileType (hFile=0x18c) returned 0x1 [0177.704] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x14e [0177.704] ReadFile (in: hFile=0x18c, lpBuffer=0x2747d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2747d40*, lpNumberOfBytesRead=0x27e6e8*=0x14e, lpOverlapped=0x0) returned 1 [0177.705] CloseHandle (hObject=0x18c) returned 1 [0177.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", lpFilePart=0x0) returned 0x54 [0177.709] SetErrorMode (uMode=0x1) returned 0x0 [0177.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0177.709] SetErrorMode (uMode=0x0) returned 0x1 [0177.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", lpFilePart=0x0) returned 0x54 [0177.830] SetErrorMode (uMode=0x1) returned 0x0 [0177.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.835] SetErrorMode (uMode=0x0) returned 0x1 [0177.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png", lpFilePart=0x0) returned 0x54 [0177.838] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png")) returned 0 [0177.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0177.848] SetErrorMode (uMode=0x1) returned 0x0 [0177.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0177.850] GetFileType (hFile=0x18c) returned 0x1 [0177.850] SetErrorMode (uMode=0x0) returned 0x1 [0177.850] GetFileType (hFile=0x18c) returned 0x1 [0177.852] WriteFile (in: hFile=0x18c, lpBuffer=0x27b7a90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27b7a90*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0177.853] WriteFile (in: hFile=0x18c, lpBuffer=0x27b7a90*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x27b7a90*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0177.854] CloseHandle (hObject=0x18c) returned 1 [0177.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0177.854] SetErrorMode (uMode=0x1) returned 0x0 [0177.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0177.857] GetFileType (hFile=0x18c) returned 0x1 [0177.857] SetErrorMode (uMode=0x0) returned 0x1 [0177.857] GetFileType (hFile=0x18c) returned 0x1 [0177.859] WriteFile (in: hFile=0x18c, lpBuffer=0x27cdbb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x27cdbb0*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0177.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x3b [0177.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x3b [0177.861] SetErrorMode (uMode=0x1) returned 0x0 [0177.861] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0177.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0177.862] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0177.863] SetErrorMode (uMode=0x0) returned 0x1 [0177.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x3b [0177.863] SetErrorMode (uMode=0x1) returned 0x0 [0177.863] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0177.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0177.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0177.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0177.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0177.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0177.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0177.864] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0177.864] SetErrorMode (uMode=0x0) returned 0x1 [0177.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0177.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0177.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0177.865] SetErrorMode (uMode=0x1) returned 0x0 [0177.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0177.865] GetFileType (hFile=0x18c) returned 0x1 [0177.865] SetErrorMode (uMode=0x0) returned 0x1 [0177.865] GetFileType (hFile=0x18c) returned 0x1 [0177.865] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x5b85 [0177.865] ReadFile (in: hFile=0x18c, lpBuffer=0x27d5f00, nNumberOfBytesToRead=0x5b85, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27d5f00*, lpNumberOfBytesRead=0x27e788*=0x5b85, lpOverlapped=0x0) returned 1 [0177.867] CloseHandle (hObject=0x18c) returned 1 [0177.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0177.868] SetErrorMode (uMode=0x1) returned 0x0 [0177.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85)) returned 1 [0177.868] SetErrorMode (uMode=0x0) returned 0x1 [0177.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0177.979] SetErrorMode (uMode=0x1) returned 0x0 [0177.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.988] SetErrorMode (uMode=0x0) returned 0x1 [0177.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0177.990] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png")) returned 0 [0177.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x0) returned 0x44 [0177.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x0) returned 0x44 [0177.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x0) returned 0x44 [0178.000] SetErrorMode (uMode=0x1) returned 0x0 [0178.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.000] GetFileType (hFile=0x18c) returned 0x1 [0178.000] SetErrorMode (uMode=0x0) returned 0x1 [0178.001] GetFileType (hFile=0x18c) returned 0x1 [0178.001] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x2e0c [0178.001] ReadFile (in: hFile=0x18c, lpBuffer=0x285ed28, nNumberOfBytesToRead=0x2e0c, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x285ed28*, lpNumberOfBytesRead=0x27e788*=0x2e0c, lpOverlapped=0x0) returned 1 [0178.002] CloseHandle (hObject=0x18c) returned 1 [0178.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x0) returned 0x44 [0178.003] SetErrorMode (uMode=0x1) returned 0x0 [0178.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c)) returned 1 [0178.004] SetErrorMode (uMode=0x0) returned 0x1 [0178.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x0) returned 0x44 [0178.129] SetErrorMode (uMode=0x1) returned 0x0 [0178.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.133] SetErrorMode (uMode=0x0) returned 0x1 [0178.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x0) returned 0x44 [0178.134] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png")) returned 0 [0178.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x0) returned 0x44 [0178.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x0) returned 0x44 [0178.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x0) returned 0x44 [0178.141] SetErrorMode (uMode=0x1) returned 0x0 [0178.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.142] GetFileType (hFile=0x18c) returned 0x1 [0178.142] SetErrorMode (uMode=0x0) returned 0x1 [0178.142] GetFileType (hFile=0x18c) returned 0x1 [0178.142] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1816 [0178.142] ReadFile (in: hFile=0x18c, lpBuffer=0x28cd7f8, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28cd7f8*, lpNumberOfBytesRead=0x27e788*=0x1816, lpOverlapped=0x0) returned 1 [0178.144] CloseHandle (hObject=0x18c) returned 1 [0178.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x0) returned 0x44 [0178.145] SetErrorMode (uMode=0x1) returned 0x0 [0178.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0178.145] SetErrorMode (uMode=0x0) returned 0x1 [0178.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x0) returned 0x44 [0178.243] SetErrorMode (uMode=0x1) returned 0x0 [0178.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.246] SetErrorMode (uMode=0x0) returned 0x1 [0178.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x0) returned 0x44 [0178.247] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png")) returned 0 [0178.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", lpFilePart=0x0) returned 0x41 [0178.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", lpFilePart=0x0) returned 0x41 [0178.254] SetErrorMode (uMode=0x1) returned 0x0 [0178.254] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0178.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0178.257] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0178.257] SetErrorMode (uMode=0x0) returned 0x1 [0178.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", lpFilePart=0x0) returned 0x41 [0178.257] SetErrorMode (uMode=0x1) returned 0x0 [0178.257] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0178.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0178.258] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0178.258] SetErrorMode (uMode=0x0) returned 0x1 [0178.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", lpFilePart=0x0) returned 0x4c [0178.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", lpFilePart=0x0) returned 0x4c [0178.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", lpFilePart=0x0) returned 0x4c [0178.259] SetErrorMode (uMode=0x1) returned 0x0 [0178.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.259] GetFileType (hFile=0x18c) returned 0x1 [0178.259] SetErrorMode (uMode=0x0) returned 0x1 [0178.259] GetFileType (hFile=0x18c) returned 0x1 [0178.259] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x104c [0178.260] ReadFile (in: hFile=0x18c, lpBuffer=0x2737298, nNumberOfBytesToRead=0x104c, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2737298*, lpNumberOfBytesRead=0x27e6e8*=0x104c, lpOverlapped=0x0) returned 1 [0178.261] CloseHandle (hObject=0x18c) returned 1 [0178.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", lpFilePart=0x0) returned 0x4c [0178.262] SetErrorMode (uMode=0x1) returned 0x0 [0178.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c)) returned 1 [0178.262] SetErrorMode (uMode=0x0) returned 0x1 [0178.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", lpFilePart=0x0) returned 0x4c [0178.386] SetErrorMode (uMode=0x1) returned 0x0 [0178.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.390] SetErrorMode (uMode=0x0) returned 0x1 [0178.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html", lpFilePart=0x0) returned 0x4c [0178.391] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html")) returned 0 [0178.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4c [0178.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4c [0178.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4c [0178.398] SetErrorMode (uMode=0x1) returned 0x0 [0178.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.399] GetFileType (hFile=0x18c) returned 0x1 [0178.399] SetErrorMode (uMode=0x0) returned 0x1 [0178.399] GetFileType (hFile=0x18c) returned 0x1 [0178.399] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3eb [0178.399] ReadFile (in: hFile=0x18c, lpBuffer=0x279c9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x279c9e8*, lpNumberOfBytesRead=0x27e6e8*=0x3eb, lpOverlapped=0x0) returned 1 [0178.401] CloseHandle (hObject=0x18c) returned 1 [0178.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4c [0178.401] SetErrorMode (uMode=0x1) returned 0x0 [0178.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb)) returned 1 [0178.402] SetErrorMode (uMode=0x0) returned 0x1 [0178.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4c [0178.496] SetErrorMode (uMode=0x1) returned 0x0 [0178.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.500] SetErrorMode (uMode=0x0) returned 0x1 [0178.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4c [0178.503] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml")) returned 0 [0178.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x4f [0178.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x4f [0178.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x4f [0178.512] SetErrorMode (uMode=0x1) returned 0x0 [0178.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.512] GetFileType (hFile=0x18c) returned 0x1 [0178.512] SetErrorMode (uMode=0x0) returned 0x1 [0178.512] GetFileType (hFile=0x18c) returned 0x1 [0178.512] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2814 [0178.512] ReadFile (in: hFile=0x18c, lpBuffer=0x27fbc98, nNumberOfBytesToRead=0x2814, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27fbc98*, lpNumberOfBytesRead=0x27e6e8*=0x2814, lpOverlapped=0x0) returned 1 [0178.514] CloseHandle (hObject=0x18c) returned 1 [0178.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x4f [0178.515] SetErrorMode (uMode=0x1) returned 0x0 [0178.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814)) returned 1 [0178.516] SetErrorMode (uMode=0x0) returned 0x1 [0178.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x4f [0178.626] SetErrorMode (uMode=0x1) returned 0x0 [0178.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.630] SetErrorMode (uMode=0x0) returned 0x1 [0178.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x4f [0178.631] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html")) returned 0 [0178.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x45 [0178.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x45 [0178.635] SetErrorMode (uMode=0x1) returned 0x0 [0178.635] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0178.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1 [0178.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0178.635] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0178.635] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0178.636] SetErrorMode (uMode=0x0) returned 0x1 [0178.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x45 [0178.636] SetErrorMode (uMode=0x1) returned 0x0 [0178.636] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0178.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1 [0178.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0178.636] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0178.637] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0178.637] SetErrorMode (uMode=0x0) returned 0x1 [0178.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x0) returned 0x4f [0178.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x0) returned 0x4f [0178.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x0) returned 0x4f [0178.637] SetErrorMode (uMode=0x1) returned 0x0 [0178.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.638] GetFileType (hFile=0x18c) returned 0x1 [0178.638] SetErrorMode (uMode=0x0) returned 0x1 [0178.638] GetFileType (hFile=0x18c) returned 0x1 [0178.638] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2a2 [0178.638] ReadFile (in: hFile=0x18c, lpBuffer=0x286fe90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x286fe90*, lpNumberOfBytesRead=0x27e648*=0x2a2, lpOverlapped=0x0) returned 1 [0178.640] CloseHandle (hObject=0x18c) returned 1 [0178.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x0) returned 0x4f [0178.641] SetErrorMode (uMode=0x1) returned 0x0 [0178.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2)) returned 1 [0178.641] SetErrorMode (uMode=0x0) returned 0x1 [0178.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x0) returned 0x4f [0178.765] SetErrorMode (uMode=0x1) returned 0x0 [0178.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.769] SetErrorMode (uMode=0x0) returned 0x1 [0178.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x0) returned 0x4f [0178.770] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css")) returned 0 [0178.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x52 [0178.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x52 [0178.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x52 [0178.776] SetErrorMode (uMode=0x1) returned 0x0 [0178.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.777] GetFileType (hFile=0x18c) returned 0x1 [0178.777] SetErrorMode (uMode=0x0) returned 0x1 [0178.777] GetFileType (hFile=0x18c) returned 0x1 [0178.777] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x55e [0178.777] ReadFile (in: hFile=0x18c, lpBuffer=0x28ce5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28ce5a0*, lpNumberOfBytesRead=0x27e648*=0x55e, lpOverlapped=0x0) returned 1 [0178.779] CloseHandle (hObject=0x18c) returned 1 [0178.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x52 [0178.780] SetErrorMode (uMode=0x1) returned 0x0 [0178.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e)) returned 1 [0178.780] SetErrorMode (uMode=0x0) returned 0x1 [0178.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x52 [0178.882] SetErrorMode (uMode=0x1) returned 0x0 [0178.882] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.886] SetErrorMode (uMode=0x0) returned 0x1 [0178.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x52 [0178.887] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css")) returned 0 [0178.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0178.891] SetErrorMode (uMode=0x1) returned 0x0 [0178.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0178.892] GetFileType (hFile=0x18c) returned 0x1 [0178.892] SetErrorMode (uMode=0x0) returned 0x1 [0178.892] GetFileType (hFile=0x18c) returned 0x1 [0178.894] WriteFile (in: hFile=0x18c, lpBuffer=0x273fe68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x273fe68*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0178.896] WriteFile (in: hFile=0x18c, lpBuffer=0x273fe68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x273fe68*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0178.896] CloseHandle (hObject=0x18c) returned 1 [0178.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x44 [0178.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x44 [0178.897] SetErrorMode (uMode=0x1) returned 0x0 [0178.897] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0178.897] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.897] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1 [0178.897] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0178.897] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1 [0178.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0 [0178.898] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0178.898] SetErrorMode (uMode=0x0) returned 0x1 [0178.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x44 [0178.898] SetErrorMode (uMode=0x1) returned 0x0 [0178.899] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0178.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1 [0178.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0178.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1 [0178.899] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0 [0178.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0178.900] SetErrorMode (uMode=0x0) returned 0x1 [0178.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", lpFilePart=0x0) returned 0x4d [0178.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", lpFilePart=0x0) returned 0x4d [0178.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", lpFilePart=0x0) returned 0x4d [0178.901] SetErrorMode (uMode=0x1) returned 0x0 [0178.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0178.902] GetFileType (hFile=0x18c) returned 0x1 [0178.902] SetErrorMode (uMode=0x0) returned 0x1 [0178.902] GetFileType (hFile=0x18c) returned 0x1 [0178.902] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x467a [0178.903] ReadFile (in: hFile=0x18c, lpBuffer=0x2747d80, nNumberOfBytesToRead=0x467a, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2747d80*, lpNumberOfBytesRead=0x27e648*=0x467a, lpOverlapped=0x0) returned 1 [0178.904] CloseHandle (hObject=0x18c) returned 1 [0178.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", lpFilePart=0x0) returned 0x4d [0178.905] SetErrorMode (uMode=0x1) returned 0x0 [0178.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a)) returned 1 [0178.906] SetErrorMode (uMode=0x0) returned 0x1 [0178.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", lpFilePart=0x0) returned 0x4d [0178.996] SetErrorMode (uMode=0x1) returned 0x0 [0178.996] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.999] SetErrorMode (uMode=0x0) returned 0x1 [0179.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js", lpFilePart=0x0) returned 0x4d [0179.000] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js")) returned 0 [0179.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x50 [0179.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x50 [0179.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x50 [0179.009] SetErrorMode (uMode=0x1) returned 0x0 [0179.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.009] GetFileType (hFile=0x18c) returned 0x1 [0179.009] SetErrorMode (uMode=0x0) returned 0x1 [0179.009] GetFileType (hFile=0x18c) returned 0x1 [0179.009] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x5c4e [0179.009] ReadFile (in: hFile=0x18c, lpBuffer=0x27c83a8, nNumberOfBytesToRead=0x5c4e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27c83a8*, lpNumberOfBytesRead=0x27e648*=0x5c4e, lpOverlapped=0x0) returned 1 [0179.035] CloseHandle (hObject=0x18c) returned 1 [0179.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x50 [0179.036] SetErrorMode (uMode=0x1) returned 0x0 [0179.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e)) returned 1 [0179.037] SetErrorMode (uMode=0x0) returned 0x1 [0179.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x50 [0179.173] SetErrorMode (uMode=0x1) returned 0x0 [0179.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.178] SetErrorMode (uMode=0x0) returned 0x1 [0179.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x50 [0179.179] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js")) returned 0 [0179.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", lpFilePart=0x0) returned 0x51 [0179.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", lpFilePart=0x0) returned 0x51 [0179.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", lpFilePart=0x0) returned 0x51 [0179.185] SetErrorMode (uMode=0x1) returned 0x0 [0179.185] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.231] GetFileType (hFile=0x18c) returned 0x1 [0179.231] SetErrorMode (uMode=0x0) returned 0x1 [0179.231] GetFileType (hFile=0x18c) returned 0x1 [0179.231] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x258c [0179.231] ReadFile (in: hFile=0x18c, lpBuffer=0x284f700, nNumberOfBytesToRead=0x258c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x284f700*, lpNumberOfBytesRead=0x27e648*=0x258c, lpOverlapped=0x0) returned 1 [0179.233] CloseHandle (hObject=0x18c) returned 1 [0179.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", lpFilePart=0x0) returned 0x51 [0179.234] SetErrorMode (uMode=0x1) returned 0x0 [0179.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1 [0179.234] SetErrorMode (uMode=0x0) returned 0x1 [0179.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", lpFilePart=0x0) returned 0x51 [0179.335] SetErrorMode (uMode=0x1) returned 0x0 [0179.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.345] SetErrorMode (uMode=0x0) returned 0x1 [0179.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js", lpFilePart=0x0) returned 0x51 [0179.348] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js")) returned 0 [0179.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0179.357] SetErrorMode (uMode=0x1) returned 0x0 [0179.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0179.358] GetFileType (hFile=0x18c) returned 0x1 [0179.358] SetErrorMode (uMode=0x0) returned 0x1 [0179.358] GetFileType (hFile=0x18c) returned 0x1 [0179.360] WriteFile (in: hFile=0x18c, lpBuffer=0x28cac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28cac98*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0179.361] WriteFile (in: hFile=0x18c, lpBuffer=0x28cac98*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28cac98*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0179.362] CloseHandle (hObject=0x18c) returned 1 [0179.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5b [0179.363] SetErrorMode (uMode=0x1) returned 0x0 [0179.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0179.365] GetFileType (hFile=0x18c) returned 0x1 [0179.365] SetErrorMode (uMode=0x0) returned 0x1 [0179.365] GetFileType (hFile=0x18c) returned 0x1 [0179.367] WriteFile (in: hFile=0x18c, lpBuffer=0x28e0db8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28e0db8*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0179.369] CloseHandle (hObject=0x18c) returned 1 [0179.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", lpFilePart=0x0) returned 0x42 [0179.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", lpFilePart=0x0) returned 0x42 [0179.370] SetErrorMode (uMode=0x1) returned 0x0 [0179.370] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0179.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1 [0179.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1 [0179.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c2142f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c2142f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1 [0179.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c4758e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c4758e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4bf19dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1 [0179.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e2ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c9384c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c9384c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1 [0179.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dc4344, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dc4344, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dea4a3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dea4a3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1 [0179.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1 [0179.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1 [0179.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1 [0179.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1 [0179.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0179.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0179.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0179.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0179.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0179.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0179.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0179.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90e400f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90e400f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50b45dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb910a16e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb910a16e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0179.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb917c58b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb917c58b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb51269fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1 [0179.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1 [0179.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1 [0179.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1 [0179.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1 [0179.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1 [0179.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0 [0179.380] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0179.381] SetErrorMode (uMode=0x0) returned 0x1 [0179.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", lpFilePart=0x0) returned 0x42 [0179.381] SetErrorMode (uMode=0x1) returned 0x0 [0179.382] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0179.382] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1 [0179.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1 [0179.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c2142f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c2142f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1 [0179.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c4758e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c4758e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4bf19dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1 [0179.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e2ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1 [0179.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c9384c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c9384c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1 [0179.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1 [0179.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1 [0179.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1 [0179.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1 [0179.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1 [0179.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1 [0179.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0179.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1 [0179.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1 [0179.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1 [0179.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1 [0179.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1 [0179.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1 [0179.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dc4344, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dc4344, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1 [0179.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1 [0179.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1 [0179.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1 [0179.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dea4a3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dea4a3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1 [0179.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1 [0179.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1 [0179.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1 [0179.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1 [0179.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1 [0179.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1 [0179.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0179.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0179.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0179.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0179.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0179.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0179.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0179.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0179.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0179.389] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0179.390] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0179.390] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0179.390] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0179.390] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90e400f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90e400f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50b45dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0179.390] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb910a16e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb910a16e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0179.391] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0179.391] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0179.391] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0179.391] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0179.391] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0179.391] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb917c58b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb917c58b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb51269fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0179.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1 [0179.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1 [0179.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1 [0179.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1 [0179.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1 [0179.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1 [0179.393] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1 [0179.393] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1 [0179.393] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1 [0179.393] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1 [0179.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1 [0179.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1 [0179.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1 [0179.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1 [0179.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1 [0179.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1 [0179.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1 [0179.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1 [0179.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1 [0179.395] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0 [0179.395] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0179.396] SetErrorMode (uMode=0x0) returned 0x1 [0179.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", lpFilePart=0x0) returned 0x51 [0179.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", lpFilePart=0x0) returned 0x51 [0179.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", lpFilePart=0x0) returned 0x51 [0179.397] SetErrorMode (uMode=0x1) returned 0x0 [0179.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.398] GetFileType (hFile=0x18c) returned 0x1 [0179.398] SetErrorMode (uMode=0x0) returned 0x1 [0179.398] GetFileType (hFile=0x18c) returned 0x1 [0179.398] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6530 [0179.398] ReadFile (in: hFile=0x18c, lpBuffer=0x28ef7b0, nNumberOfBytesToRead=0x6530, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ef7b0*, lpNumberOfBytesRead=0x27e6e8*=0x6530, lpOverlapped=0x0) returned 1 [0179.401] CloseHandle (hObject=0x18c) returned 1 [0179.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", lpFilePart=0x0) returned 0x51 [0179.402] SetErrorMode (uMode=0x1) returned 0x0 [0179.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530)) returned 1 [0179.402] SetErrorMode (uMode=0x0) returned 0x1 [0179.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", lpFilePart=0x0) returned 0x51 [0179.527] SetErrorMode (uMode=0x1) returned 0x0 [0179.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.536] SetErrorMode (uMode=0x0) returned 0x1 [0179.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png", lpFilePart=0x0) returned 0x51 [0179.537] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png")) returned 0 [0179.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", lpFilePart=0x0) returned 0x55 [0179.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", lpFilePart=0x0) returned 0x55 [0179.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", lpFilePart=0x0) returned 0x55 [0179.541] SetErrorMode (uMode=0x1) returned 0x0 [0179.541] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.541] GetFileType (hFile=0x18c) returned 0x1 [0179.542] SetErrorMode (uMode=0x0) returned 0x1 [0179.542] GetFileType (hFile=0x18c) returned 0x1 [0179.542] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x132 [0179.542] ReadFile (in: hFile=0x18c, lpBuffer=0x275f0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275f0a8*, lpNumberOfBytesRead=0x27e6e8*=0x132, lpOverlapped=0x0) returned 1 [0179.543] CloseHandle (hObject=0x18c) returned 1 [0179.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", lpFilePart=0x0) returned 0x55 [0179.543] SetErrorMode (uMode=0x1) returned 0x0 [0179.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x132)) returned 1 [0179.543] SetErrorMode (uMode=0x0) returned 0x1 [0179.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", lpFilePart=0x0) returned 0x55 [0179.636] SetErrorMode (uMode=0x1) returned 0x0 [0179.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.640] SetErrorMode (uMode=0x0) returned 0x1 [0179.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png", lpFilePart=0x0) returned 0x55 [0179.641] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png")) returned 0 [0179.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", lpFilePart=0x0) returned 0x53 [0179.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", lpFilePart=0x0) returned 0x53 [0179.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", lpFilePart=0x0) returned 0x53 [0179.648] SetErrorMode (uMode=0x1) returned 0x0 [0179.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.649] GetFileType (hFile=0x18c) returned 0x1 [0179.649] SetErrorMode (uMode=0x0) returned 0x1 [0179.649] GetFileType (hFile=0x18c) returned 0x1 [0179.649] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x17d [0179.649] ReadFile (in: hFile=0x18c, lpBuffer=0x27cbcd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cbcd8*, lpNumberOfBytesRead=0x27e6e8*=0x17d, lpOverlapped=0x0) returned 1 [0179.650] CloseHandle (hObject=0x18c) returned 1 [0179.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", lpFilePart=0x0) returned 0x53 [0179.651] SetErrorMode (uMode=0x1) returned 0x0 [0179.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c2142f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c2142f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0179.651] SetErrorMode (uMode=0x0) returned 0x1 [0179.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", lpFilePart=0x0) returned 0x53 [0179.805] SetErrorMode (uMode=0x1) returned 0x0 [0179.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.809] SetErrorMode (uMode=0x0) returned 0x1 [0179.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png", lpFilePart=0x0) returned 0x53 [0179.810] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png")) returned 0 [0179.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", lpFilePart=0x0) returned 0x53 [0179.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", lpFilePart=0x0) returned 0x53 [0179.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", lpFilePart=0x0) returned 0x53 [0179.818] SetErrorMode (uMode=0x1) returned 0x0 [0179.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.827] GetFileType (hFile=0x18c) returned 0x1 [0179.827] SetErrorMode (uMode=0x0) returned 0x1 [0179.827] GetFileType (hFile=0x18c) returned 0x1 [0179.827] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1b2 [0179.827] ReadFile (in: hFile=0x18c, lpBuffer=0x282c288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x282c288*, lpNumberOfBytesRead=0x27e6e8*=0x1b2, lpOverlapped=0x0) returned 1 [0179.828] CloseHandle (hObject=0x18c) returned 1 [0179.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", lpFilePart=0x0) returned 0x53 [0179.829] SetErrorMode (uMode=0x1) returned 0x0 [0179.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c4758e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c4758e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4bf19dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0179.829] SetErrorMode (uMode=0x0) returned 0x1 [0179.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", lpFilePart=0x0) returned 0x53 [0179.930] SetErrorMode (uMode=0x1) returned 0x0 [0179.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.934] SetErrorMode (uMode=0x0) returned 0x1 [0179.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png", lpFilePart=0x0) returned 0x53 [0179.935] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png")) returned 0 [0179.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", lpFilePart=0x0) returned 0x53 [0179.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", lpFilePart=0x0) returned 0x53 [0179.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", lpFilePart=0x0) returned 0x53 [0179.942] SetErrorMode (uMode=0x1) returned 0x0 [0179.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0179.942] GetFileType (hFile=0x18c) returned 0x1 [0179.942] SetErrorMode (uMode=0x0) returned 0x1 [0179.942] GetFileType (hFile=0x18c) returned 0x1 [0179.942] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc63 [0179.942] ReadFile (in: hFile=0x18c, lpBuffer=0x288d4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x288d4d8*, lpNumberOfBytesRead=0x27e6e8*=0xc63, lpOverlapped=0x0) returned 1 [0179.944] CloseHandle (hObject=0x18c) returned 1 [0179.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", lpFilePart=0x0) returned 0x53 [0179.945] SetErrorMode (uMode=0x1) returned 0x0 [0179.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e2ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc63)) returned 1 [0179.945] SetErrorMode (uMode=0x0) returned 0x1 [0180.039] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", lpFilePart=0x0) returned 0x53 [0180.040] SetErrorMode (uMode=0x1) returned 0x0 [0180.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.045] SetErrorMode (uMode=0x0) returned 0x1 [0180.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png", lpFilePart=0x0) returned 0x53 [0180.047] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png")) returned 0 [0180.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", lpFilePart=0x0) returned 0x5a [0180.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", lpFilePart=0x0) returned 0x5a [0180.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", lpFilePart=0x0) returned 0x5a [0180.057] SetErrorMode (uMode=0x1) returned 0x0 [0180.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.058] GetFileType (hFile=0x18c) returned 0x1 [0180.058] SetErrorMode (uMode=0x0) returned 0x1 [0180.058] GetFileType (hFile=0x18c) returned 0x1 [0180.058] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7454 [0180.058] ReadFile (in: hFile=0x18c, lpBuffer=0x28f22f0, nNumberOfBytesToRead=0x7454, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f22f0*, lpNumberOfBytesRead=0x27e6e8*=0x7454, lpOverlapped=0x0) returned 1 [0180.060] CloseHandle (hObject=0x18c) returned 1 [0180.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", lpFilePart=0x0) returned 0x5a [0180.061] SetErrorMode (uMode=0x1) returned 0x0 [0180.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c9384c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c9384c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7454)) returned 1 [0180.061] SetErrorMode (uMode=0x0) returned 0x1 [0180.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", lpFilePart=0x0) returned 0x5a [0180.160] SetErrorMode (uMode=0x1) returned 0x0 [0180.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.164] SetErrorMode (uMode=0x0) returned 0x1 [0180.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png", lpFilePart=0x0) returned 0x5a [0180.165] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png")) returned 0 [0180.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x0) returned 0x4c [0180.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x0) returned 0x4c [0180.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x0) returned 0x4c [0180.172] SetErrorMode (uMode=0x1) returned 0x0 [0180.172] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.172] GetFileType (hFile=0x18c) returned 0x1 [0180.172] SetErrorMode (uMode=0x0) returned 0x1 [0180.172] GetFileType (hFile=0x18c) returned 0x1 [0180.172] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x77b1 [0180.172] ReadFile (in: hFile=0x18c, lpBuffer=0x2789210, nNumberOfBytesToRead=0x77b1, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2789210*, lpNumberOfBytesRead=0x27e6e8*=0x77b1, lpOverlapped=0x0) returned 1 [0180.176] CloseHandle (hObject=0x18c) returned 1 [0180.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x0) returned 0x4c [0180.177] SetErrorMode (uMode=0x1) returned 0x0 [0180.177] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1)) returned 1 [0180.177] SetErrorMode (uMode=0x0) returned 0x1 [0180.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x0) returned 0x4c [0180.270] SetErrorMode (uMode=0x1) returned 0x0 [0180.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.273] SetErrorMode (uMode=0x0) returned 0x1 [0180.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x0) returned 0x4c [0180.275] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png")) returned 0 [0180.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", lpFilePart=0x0) returned 0x50 [0180.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", lpFilePart=0x0) returned 0x50 [0180.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", lpFilePart=0x0) returned 0x50 [0180.279] SetErrorMode (uMode=0x1) returned 0x0 [0180.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.280] GetFileType (hFile=0x18c) returned 0x1 [0180.280] SetErrorMode (uMode=0x0) returned 0x1 [0180.280] GetFileType (hFile=0x18c) returned 0x1 [0180.280] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb80 [0180.280] ReadFile (in: hFile=0x18c, lpBuffer=0x281be50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x281be50*, lpNumberOfBytesRead=0x27e6e8*=0xb80, lpOverlapped=0x0) returned 1 [0180.282] CloseHandle (hObject=0x18c) returned 1 [0180.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", lpFilePart=0x0) returned 0x50 [0180.283] SetErrorMode (uMode=0x1) returned 0x0 [0180.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0180.283] SetErrorMode (uMode=0x0) returned 0x1 [0180.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", lpFilePart=0x0) returned 0x50 [0180.397] SetErrorMode (uMode=0x1) returned 0x0 [0180.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.400] SetErrorMode (uMode=0x0) returned 0x1 [0180.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png", lpFilePart=0x0) returned 0x50 [0180.401] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png")) returned 0 [0180.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x0) returned 0x4e [0180.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x0) returned 0x4e [0180.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x0) returned 0x4e [0180.405] SetErrorMode (uMode=0x1) returned 0x0 [0180.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.405] GetFileType (hFile=0x18c) returned 0x1 [0180.405] SetErrorMode (uMode=0x0) returned 0x1 [0180.406] GetFileType (hFile=0x18c) returned 0x1 [0180.406] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x170 [0180.406] ReadFile (in: hFile=0x18c, lpBuffer=0x2878038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2878038*, lpNumberOfBytesRead=0x27e6e8*=0x170, lpOverlapped=0x0) returned 1 [0180.406] CloseHandle (hObject=0x18c) returned 1 [0180.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x0) returned 0x4e [0180.407] SetErrorMode (uMode=0x1) returned 0x0 [0180.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0180.407] SetErrorMode (uMode=0x0) returned 0x1 [0180.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x0) returned 0x4e [0180.509] SetErrorMode (uMode=0x1) returned 0x0 [0180.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.516] SetErrorMode (uMode=0x0) returned 0x1 [0180.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x0) returned 0x4e [0180.518] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png")) returned 0 [0180.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x0) returned 0x4e [0180.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x0) returned 0x4e [0180.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x0) returned 0x4e [0180.527] SetErrorMode (uMode=0x1) returned 0x0 [0180.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.541] GetFileType (hFile=0x18c) returned 0x1 [0180.541] SetErrorMode (uMode=0x0) returned 0x1 [0180.541] GetFileType (hFile=0x18c) returned 0x1 [0180.541] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x192 [0180.541] ReadFile (in: hFile=0x18c, lpBuffer=0x28d6798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d6798*, lpNumberOfBytesRead=0x27e6e8*=0x192, lpOverlapped=0x0) returned 1 [0180.543] CloseHandle (hObject=0x18c) returned 1 [0180.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x0) returned 0x4e [0180.545] SetErrorMode (uMode=0x1) returned 0x0 [0180.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0180.545] SetErrorMode (uMode=0x0) returned 0x1 [0180.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x0) returned 0x4e [0180.659] SetErrorMode (uMode=0x1) returned 0x0 [0180.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.664] SetErrorMode (uMode=0x0) returned 0x1 [0180.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x0) returned 0x4e [0180.665] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png")) returned 0 [0180.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x0) returned 0x4e [0180.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x0) returned 0x4e [0180.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x0) returned 0x4e [0180.669] SetErrorMode (uMode=0x1) returned 0x0 [0180.669] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.669] GetFileType (hFile=0x18c) returned 0x1 [0180.669] SetErrorMode (uMode=0x0) returned 0x1 [0180.669] GetFileType (hFile=0x18c) returned 0x1 [0180.669] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb8c [0180.669] ReadFile (in: hFile=0x18c, lpBuffer=0x2736420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2736420*, lpNumberOfBytesRead=0x27e6e8*=0xb8c, lpOverlapped=0x0) returned 1 [0180.675] CloseHandle (hObject=0x18c) returned 1 [0180.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x0) returned 0x4e [0180.676] SetErrorMode (uMode=0x1) returned 0x0 [0180.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c)) returned 1 [0180.676] SetErrorMode (uMode=0x0) returned 0x1 [0180.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x0) returned 0x4e [0180.819] SetErrorMode (uMode=0x1) returned 0x0 [0180.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.823] SetErrorMode (uMode=0x0) returned 0x1 [0180.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x0) returned 0x4e [0180.824] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png")) returned 0 [0180.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", lpFilePart=0x0) returned 0x55 [0180.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", lpFilePart=0x0) returned 0x55 [0180.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", lpFilePart=0x0) returned 0x55 [0180.833] SetErrorMode (uMode=0x1) returned 0x0 [0180.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.848] GetFileType (hFile=0x18c) returned 0x1 [0180.848] SetErrorMode (uMode=0x0) returned 0x1 [0180.848] GetFileType (hFile=0x18c) returned 0x1 [0180.848] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7fb7 [0180.849] ReadFile (in: hFile=0x18c, lpBuffer=0x2799b08, nNumberOfBytesToRead=0x7fb7, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2799b08*, lpNumberOfBytesRead=0x27e6e8*=0x7fb7, lpOverlapped=0x0) returned 1 [0180.850] CloseHandle (hObject=0x18c) returned 1 [0180.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", lpFilePart=0x0) returned 0x55 [0180.851] SetErrorMode (uMode=0x1) returned 0x0 [0180.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7)) returned 1 [0180.852] SetErrorMode (uMode=0x0) returned 0x1 [0180.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", lpFilePart=0x0) returned 0x55 [0180.954] SetErrorMode (uMode=0x1) returned 0x0 [0180.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.958] SetErrorMode (uMode=0x0) returned 0x1 [0180.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png", lpFilePart=0x0) returned 0x55 [0180.959] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png")) returned 0 [0180.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x0) returned 0x4d [0180.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x0) returned 0x4d [0180.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x0) returned 0x4d [0180.967] SetErrorMode (uMode=0x1) returned 0x0 [0180.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0180.968] GetFileType (hFile=0x18c) returned 0x1 [0180.968] SetErrorMode (uMode=0x0) returned 0x1 [0180.968] GetFileType (hFile=0x18c) returned 0x1 [0180.968] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x876e [0180.968] ReadFile (in: hFile=0x18c, lpBuffer=0x28364f8, nNumberOfBytesToRead=0x876e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28364f8*, lpNumberOfBytesRead=0x27e6e8*=0x876e, lpOverlapped=0x0) returned 1 [0180.970] CloseHandle (hObject=0x18c) returned 1 [0180.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x0) returned 0x4d [0180.971] SetErrorMode (uMode=0x1) returned 0x0 [0180.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e)) returned 1 [0180.971] SetErrorMode (uMode=0x0) returned 0x1 [0181.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x0) returned 0x4d [0181.067] SetErrorMode (uMode=0x1) returned 0x0 [0181.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.071] SetErrorMode (uMode=0x0) returned 0x1 [0181.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x0) returned 0x4d [0181.072] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png")) returned 0 [0181.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", lpFilePart=0x0) returned 0x51 [0181.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", lpFilePart=0x0) returned 0x51 [0181.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", lpFilePart=0x0) returned 0x51 [0181.078] SetErrorMode (uMode=0x1) returned 0x0 [0181.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.085] GetFileType (hFile=0x18c) returned 0x1 [0181.085] SetErrorMode (uMode=0x0) returned 0x1 [0181.086] GetFileType (hFile=0x18c) returned 0x1 [0181.086] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x141 [0181.086] ReadFile (in: hFile=0x18c, lpBuffer=0x28cf920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28cf920*, lpNumberOfBytesRead=0x27e6e8*=0x141, lpOverlapped=0x0) returned 1 [0181.087] CloseHandle (hObject=0x18c) returned 1 [0181.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", lpFilePart=0x0) returned 0x51 [0181.087] SetErrorMode (uMode=0x1) returned 0x0 [0181.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x141)) returned 1 [0181.088] SetErrorMode (uMode=0x0) returned 0x1 [0181.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", lpFilePart=0x0) returned 0x51 [0181.239] SetErrorMode (uMode=0x1) returned 0x0 [0181.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.249] SetErrorMode (uMode=0x0) returned 0x1 [0181.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png", lpFilePart=0x0) returned 0x51 [0181.251] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png")) returned 0 [0181.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x0) returned 0x4f [0181.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x0) returned 0x4f [0181.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x0) returned 0x4f [0181.259] SetErrorMode (uMode=0x1) returned 0x0 [0181.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.259] GetFileType (hFile=0x18c) returned 0x1 [0181.260] SetErrorMode (uMode=0x0) returned 0x1 [0181.260] GetFileType (hFile=0x18c) returned 0x1 [0181.260] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x184 [0181.260] ReadFile (in: hFile=0x18c, lpBuffer=0x27263f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27263f0*, lpNumberOfBytesRead=0x27e6e8*=0x184, lpOverlapped=0x0) returned 1 [0181.261] CloseHandle (hObject=0x18c) returned 1 [0181.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x0) returned 0x4f [0181.262] SetErrorMode (uMode=0x1) returned 0x0 [0181.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0181.262] SetErrorMode (uMode=0x0) returned 0x1 [0181.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x0) returned 0x4f [0181.359] SetErrorMode (uMode=0x1) returned 0x0 [0181.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.364] SetErrorMode (uMode=0x0) returned 0x1 [0181.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x0) returned 0x4f [0181.365] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png")) returned 0 [0181.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x0) returned 0x4f [0181.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x0) returned 0x4f [0181.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x0) returned 0x4f [0181.372] SetErrorMode (uMode=0x1) returned 0x0 [0181.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.373] GetFileType (hFile=0x18c) returned 0x1 [0181.373] SetErrorMode (uMode=0x0) returned 0x1 [0181.373] GetFileType (hFile=0x18c) returned 0x1 [0181.373] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1b7 [0181.373] ReadFile (in: hFile=0x18c, lpBuffer=0x2785648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2785648*, lpNumberOfBytesRead=0x27e6e8*=0x1b7, lpOverlapped=0x0) returned 1 [0181.374] CloseHandle (hObject=0x18c) returned 1 [0181.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x0) returned 0x4f [0181.375] SetErrorMode (uMode=0x1) returned 0x0 [0181.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7)) returned 1 [0181.375] SetErrorMode (uMode=0x0) returned 0x1 [0181.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x0) returned 0x4f [0181.478] SetErrorMode (uMode=0x1) returned 0x0 [0181.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.485] SetErrorMode (uMode=0x0) returned 0x1 [0181.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x0) returned 0x4f [0181.487] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png")) returned 0 [0181.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x0) returned 0x4f [0181.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x0) returned 0x4f [0181.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x0) returned 0x4f [0181.497] SetErrorMode (uMode=0x1) returned 0x0 [0181.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.497] GetFileType (hFile=0x18c) returned 0x1 [0181.497] SetErrorMode (uMode=0x0) returned 0x1 [0181.497] GetFileType (hFile=0x18c) returned 0x1 [0181.498] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc14 [0181.498] ReadFile (in: hFile=0x18c, lpBuffer=0x27e5420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e5420*, lpNumberOfBytesRead=0x27e6e8*=0xc14, lpOverlapped=0x0) returned 1 [0181.499] CloseHandle (hObject=0x18c) returned 1 [0181.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x0) returned 0x4f [0181.500] SetErrorMode (uMode=0x1) returned 0x0 [0181.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14)) returned 1 [0181.500] SetErrorMode (uMode=0x0) returned 0x1 [0181.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x0) returned 0x4f [0181.629] SetErrorMode (uMode=0x1) returned 0x0 [0181.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.633] SetErrorMode (uMode=0x0) returned 0x1 [0181.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x0) returned 0x4f [0181.634] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png")) returned 0 [0181.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", lpFilePart=0x0) returned 0x56 [0181.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", lpFilePart=0x0) returned 0x56 [0181.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", lpFilePart=0x0) returned 0x56 [0181.641] SetErrorMode (uMode=0x1) returned 0x0 [0181.641] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.644] GetFileType (hFile=0x18c) returned 0x1 [0181.644] SetErrorMode (uMode=0x0) returned 0x1 [0181.644] GetFileType (hFile=0x18c) returned 0x1 [0181.644] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x827b [0181.644] ReadFile (in: hFile=0x18c, lpBuffer=0x2848e98, nNumberOfBytesToRead=0x827b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2848e98*, lpNumberOfBytesRead=0x27e6e8*=0x827b, lpOverlapped=0x0) returned 1 [0181.646] CloseHandle (hObject=0x18c) returned 1 [0181.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", lpFilePart=0x0) returned 0x56 [0181.647] SetErrorMode (uMode=0x1) returned 0x0 [0181.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x827b)) returned 1 [0181.647] SetErrorMode (uMode=0x0) returned 0x1 [0181.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", lpFilePart=0x0) returned 0x56 [0181.778] SetErrorMode (uMode=0x1) returned 0x0 [0181.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.782] SetErrorMode (uMode=0x0) returned 0x1 [0181.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png", lpFilePart=0x0) returned 0x56 [0181.783] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png")) returned 0 [0181.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x0) returned 0x4d [0181.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x0) returned 0x4d [0181.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x0) returned 0x4d [0181.789] SetErrorMode (uMode=0x1) returned 0x0 [0181.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.789] GetFileType (hFile=0x18c) returned 0x1 [0181.789] SetErrorMode (uMode=0x0) returned 0x1 [0181.789] GetFileType (hFile=0x18c) returned 0x1 [0181.789] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3cfe [0181.789] ReadFile (in: hFile=0x18c, lpBuffer=0x28e6e58, nNumberOfBytesToRead=0x3cfe, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e6e58*, lpNumberOfBytesRead=0x27e6e8*=0x3cfe, lpOverlapped=0x0) returned 1 [0181.797] CloseHandle (hObject=0x18c) returned 1 [0181.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x0) returned 0x4d [0181.798] SetErrorMode (uMode=0x1) returned 0x0 [0181.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe)) returned 1 [0181.799] SetErrorMode (uMode=0x0) returned 0x1 [0181.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x0) returned 0x4d [0181.903] SetErrorMode (uMode=0x1) returned 0x0 [0181.903] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.910] SetErrorMode (uMode=0x0) returned 0x1 [0181.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x0) returned 0x4d [0181.912] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png")) returned 0 [0181.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", lpFilePart=0x0) returned 0x51 [0181.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", lpFilePart=0x0) returned 0x51 [0181.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", lpFilePart=0x0) returned 0x51 [0181.937] SetErrorMode (uMode=0x1) returned 0x0 [0181.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0181.941] GetFileType (hFile=0x18c) returned 0x1 [0181.941] SetErrorMode (uMode=0x0) returned 0x1 [0181.941] GetFileType (hFile=0x18c) returned 0x1 [0181.941] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb96 [0181.941] ReadFile (in: hFile=0x18c, lpBuffer=0x275b6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275b6f8*, lpNumberOfBytesRead=0x27e6e8*=0xb96, lpOverlapped=0x0) returned 1 [0181.942] CloseHandle (hObject=0x18c) returned 1 [0181.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", lpFilePart=0x0) returned 0x51 [0181.943] SetErrorMode (uMode=0x1) returned 0x0 [0181.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dc4344, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dc4344, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0181.943] SetErrorMode (uMode=0x0) returned 0x1 [0182.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", lpFilePart=0x0) returned 0x51 [0182.074] SetErrorMode (uMode=0x1) returned 0x0 [0182.075] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.078] SetErrorMode (uMode=0x0) returned 0x1 [0182.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png", lpFilePart=0x0) returned 0x51 [0182.080] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png")) returned 0 [0182.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x0) returned 0x4f [0182.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x0) returned 0x4f [0182.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x0) returned 0x4f [0182.086] SetErrorMode (uMode=0x1) returned 0x0 [0182.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.086] GetFileType (hFile=0x18c) returned 0x1 [0182.087] SetErrorMode (uMode=0x0) returned 0x1 [0182.087] GetFileType (hFile=0x18c) returned 0x1 [0182.087] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb6a [0182.087] ReadFile (in: hFile=0x18c, lpBuffer=0x27bbe18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27bbe18*, lpNumberOfBytesRead=0x27e6e8*=0xb6a, lpOverlapped=0x0) returned 1 [0182.088] CloseHandle (hObject=0x18c) returned 1 [0182.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x0) returned 0x4f [0182.089] SetErrorMode (uMode=0x1) returned 0x0 [0182.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a)) returned 1 [0182.089] SetErrorMode (uMode=0x0) returned 0x1 [0182.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x0) returned 0x4f [0182.203] SetErrorMode (uMode=0x1) returned 0x0 [0182.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.206] SetErrorMode (uMode=0x0) returned 0x1 [0182.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x0) returned 0x4f [0182.207] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png")) returned 0 [0182.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x0) returned 0x4f [0182.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x0) returned 0x4f [0182.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x0) returned 0x4f [0182.212] SetErrorMode (uMode=0x1) returned 0x0 [0182.212] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.213] GetFileType (hFile=0x18c) returned 0x1 [0182.213] SetErrorMode (uMode=0x0) returned 0x1 [0182.213] GetFileType (hFile=0x18c) returned 0x1 [0182.213] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb7c [0182.213] ReadFile (in: hFile=0x18c, lpBuffer=0x281f5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x281f5b0*, lpNumberOfBytesRead=0x27e6e8*=0xb7c, lpOverlapped=0x0) returned 1 [0182.214] CloseHandle (hObject=0x18c) returned 1 [0182.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x0) returned 0x4f [0182.215] SetErrorMode (uMode=0x1) returned 0x0 [0182.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c)) returned 1 [0182.215] SetErrorMode (uMode=0x0) returned 0x1 [0182.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x0) returned 0x4f [0182.333] SetErrorMode (uMode=0x1) returned 0x0 [0182.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.337] SetErrorMode (uMode=0x0) returned 0x1 [0182.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x0) returned 0x4f [0182.338] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png")) returned 0 [0182.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x0) returned 0x4f [0182.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x0) returned 0x4f [0182.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x0) returned 0x4f [0182.345] SetErrorMode (uMode=0x1) returned 0x0 [0182.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.345] GetFileType (hFile=0x18c) returned 0x1 [0182.345] SetErrorMode (uMode=0x0) returned 0x1 [0182.345] GetFileType (hFile=0x18c) returned 0x1 [0182.345] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbde [0182.345] ReadFile (in: hFile=0x18c, lpBuffer=0x2882da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2882da8*, lpNumberOfBytesRead=0x27e6e8*=0xbde, lpOverlapped=0x0) returned 1 [0182.347] CloseHandle (hObject=0x18c) returned 1 [0182.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x0) returned 0x4f [0182.348] SetErrorMode (uMode=0x1) returned 0x0 [0182.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde)) returned 1 [0182.348] SetErrorMode (uMode=0x0) returned 0x1 [0182.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x0) returned 0x4f [0182.450] SetErrorMode (uMode=0x1) returned 0x0 [0182.450] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.454] SetErrorMode (uMode=0x0) returned 0x1 [0182.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x0) returned 0x4f [0182.455] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png")) returned 0 [0182.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", lpFilePart=0x0) returned 0x56 [0182.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", lpFilePart=0x0) returned 0x56 [0182.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", lpFilePart=0x0) returned 0x56 [0182.463] SetErrorMode (uMode=0x1) returned 0x0 [0182.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.464] GetFileType (hFile=0x18c) returned 0x1 [0182.464] SetErrorMode (uMode=0x0) returned 0x1 [0182.464] GetFileType (hFile=0x18c) returned 0x1 [0182.464] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x51d1 [0182.464] ReadFile (in: hFile=0x18c, lpBuffer=0x28e5ca8, nNumberOfBytesToRead=0x51d1, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e5ca8*, lpNumberOfBytesRead=0x27e6e8*=0x51d1, lpOverlapped=0x0) returned 1 [0182.466] CloseHandle (hObject=0x18c) returned 1 [0182.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", lpFilePart=0x0) returned 0x56 [0182.467] SetErrorMode (uMode=0x1) returned 0x0 [0182.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dea4a3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dea4a3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x51d1)) returned 1 [0182.467] SetErrorMode (uMode=0x0) returned 0x1 [0182.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", lpFilePart=0x0) returned 0x56 [0182.578] SetErrorMode (uMode=0x1) returned 0x0 [0182.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.582] SetErrorMode (uMode=0x0) returned 0x1 [0182.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png", lpFilePart=0x0) returned 0x56 [0182.583] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png")) returned 0 [0182.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x0) returned 0x4e [0182.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x0) returned 0x4e [0182.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x0) returned 0x4e [0182.588] SetErrorMode (uMode=0x1) returned 0x0 [0182.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.589] GetFileType (hFile=0x18c) returned 0x1 [0182.589] SetErrorMode (uMode=0x0) returned 0x1 [0182.590] GetFileType (hFile=0x18c) returned 0x1 [0182.590] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6408 [0182.591] ReadFile (in: hFile=0x18c, lpBuffer=0x276b778, nNumberOfBytesToRead=0x6408, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276b778*, lpNumberOfBytesRead=0x27e6e8*=0x6408, lpOverlapped=0x0) returned 1 [0182.593] CloseHandle (hObject=0x18c) returned 1 [0182.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x0) returned 0x4e [0182.594] SetErrorMode (uMode=0x1) returned 0x0 [0182.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408)) returned 1 [0182.594] SetErrorMode (uMode=0x0) returned 0x1 [0182.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x0) returned 0x4e [0182.714] SetErrorMode (uMode=0x1) returned 0x0 [0182.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.718] SetErrorMode (uMode=0x0) returned 0x1 [0182.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x0) returned 0x4e [0182.720] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png")) returned 0 [0182.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", lpFilePart=0x0) returned 0x52 [0182.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", lpFilePart=0x0) returned 0x52 [0182.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", lpFilePart=0x0) returned 0x52 [0182.724] SetErrorMode (uMode=0x1) returned 0x0 [0182.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.725] GetFileType (hFile=0x18c) returned 0x1 [0182.725] SetErrorMode (uMode=0x0) returned 0x1 [0182.725] GetFileType (hFile=0x18c) returned 0x1 [0182.725] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb57 [0182.725] ReadFile (in: hFile=0x18c, lpBuffer=0x27f68b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27f68b0*, lpNumberOfBytesRead=0x27e6e8*=0xb57, lpOverlapped=0x0) returned 1 [0182.727] CloseHandle (hObject=0x18c) returned 1 [0182.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", lpFilePart=0x0) returned 0x52 [0182.728] SetErrorMode (uMode=0x1) returned 0x0 [0182.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57)) returned 1 [0182.728] SetErrorMode (uMode=0x0) returned 0x1 [0182.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", lpFilePart=0x0) returned 0x52 [0182.856] SetErrorMode (uMode=0x1) returned 0x0 [0182.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.864] SetErrorMode (uMode=0x0) returned 0x1 [0182.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png", lpFilePart=0x0) returned 0x52 [0182.865] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png")) returned 0 [0182.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", lpFilePart=0x0) returned 0x50 [0182.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", lpFilePart=0x0) returned 0x50 [0182.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", lpFilePart=0x0) returned 0x50 [0182.874] SetErrorMode (uMode=0x1) returned 0x0 [0182.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0182.874] GetFileType (hFile=0x18c) returned 0x1 [0182.874] SetErrorMode (uMode=0x0) returned 0x1 [0182.874] GetFileType (hFile=0x18c) returned 0x1 [0182.874] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb8f [0182.874] ReadFile (in: hFile=0x18c, lpBuffer=0x2854798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2854798*, lpNumberOfBytesRead=0x27e6e8*=0xb8f, lpOverlapped=0x0) returned 1 [0182.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", lpFilePart=0x0) returned 0x50 [0182.877] SetErrorMode (uMode=0x1) returned 0x0 [0182.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8f)) returned 1 [0182.877] SetErrorMode (uMode=0x0) returned 0x1 [0183.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", lpFilePart=0x0) returned 0x50 [0183.007] SetErrorMode (uMode=0x1) returned 0x0 [0183.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.013] SetErrorMode (uMode=0x0) returned 0x1 [0183.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png", lpFilePart=0x0) returned 0x50 [0183.014] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png")) returned 0 [0183.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", lpFilePart=0x0) returned 0x50 [0183.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", lpFilePart=0x0) returned 0x50 [0183.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", lpFilePart=0x0) returned 0x50 [0183.017] SetErrorMode (uMode=0x1) returned 0x0 [0183.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.018] GetFileType (hFile=0x18c) returned 0x1 [0183.019] SetErrorMode (uMode=0x0) returned 0x1 [0183.019] GetFileType (hFile=0x18c) returned 0x1 [0183.019] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xba3 [0183.019] ReadFile (in: hFile=0x18c, lpBuffer=0x28b8070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b8070*, lpNumberOfBytesRead=0x27e6e8*=0xba3, lpOverlapped=0x0) returned 1 [0183.020] CloseHandle (hObject=0x18c) returned 1 [0183.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", lpFilePart=0x0) returned 0x50 [0183.021] SetErrorMode (uMode=0x1) returned 0x0 [0183.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3)) returned 1 [0183.021] SetErrorMode (uMode=0x0) returned 0x1 [0183.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", lpFilePart=0x0) returned 0x50 [0183.220] SetErrorMode (uMode=0x1) returned 0x0 [0183.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.224] SetErrorMode (uMode=0x0) returned 0x1 [0183.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png", lpFilePart=0x0) returned 0x50 [0183.225] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png")) returned 0 [0183.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", lpFilePart=0x0) returned 0x50 [0183.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", lpFilePart=0x0) returned 0x50 [0183.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", lpFilePart=0x0) returned 0x50 [0183.233] SetErrorMode (uMode=0x1) returned 0x0 [0183.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.233] GetFileType (hFile=0x18c) returned 0x1 [0183.233] SetErrorMode (uMode=0x0) returned 0x1 [0183.234] GetFileType (hFile=0x18c) returned 0x1 [0183.234] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb67 [0183.234] ReadFile (in: hFile=0x18c, lpBuffer=0x271b998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x271b998*, lpNumberOfBytesRead=0x27e6e8*=0xb67, lpOverlapped=0x0) returned 1 [0183.235] CloseHandle (hObject=0x18c) returned 1 [0183.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", lpFilePart=0x0) returned 0x50 [0183.236] SetErrorMode (uMode=0x1) returned 0x0 [0183.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb67)) returned 1 [0183.236] SetErrorMode (uMode=0x0) returned 0x1 [0183.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", lpFilePart=0x0) returned 0x50 [0183.332] SetErrorMode (uMode=0x1) returned 0x0 [0183.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.336] SetErrorMode (uMode=0x0) returned 0x1 [0183.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png", lpFilePart=0x0) returned 0x50 [0183.337] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png")) returned 0 [0183.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", lpFilePart=0x0) returned 0x57 [0183.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", lpFilePart=0x0) returned 0x57 [0183.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", lpFilePart=0x0) returned 0x57 [0183.344] SetErrorMode (uMode=0x1) returned 0x0 [0183.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.345] GetFileType (hFile=0x18c) returned 0x1 [0183.345] SetErrorMode (uMode=0x0) returned 0x1 [0183.345] GetFileType (hFile=0x18c) returned 0x1 [0183.346] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x702e [0183.346] ReadFile (in: hFile=0x18c, lpBuffer=0x277e5b0, nNumberOfBytesToRead=0x702e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x277e5b0*, lpNumberOfBytesRead=0x27e6e8*=0x702e, lpOverlapped=0x0) returned 1 [0183.347] CloseHandle (hObject=0x18c) returned 1 [0183.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", lpFilePart=0x0) returned 0x57 [0183.348] SetErrorMode (uMode=0x1) returned 0x0 [0183.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x702e)) returned 1 [0183.349] SetErrorMode (uMode=0x0) returned 0x1 [0183.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", lpFilePart=0x0) returned 0x57 [0183.464] SetErrorMode (uMode=0x1) returned 0x0 [0183.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.468] SetErrorMode (uMode=0x0) returned 0x1 [0183.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png", lpFilePart=0x0) returned 0x57 [0183.469] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png")) returned 0 [0183.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x5a [0183.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x5a [0183.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x5a [0183.476] SetErrorMode (uMode=0x1) returned 0x0 [0183.476] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.476] GetFileType (hFile=0x18c) returned 0x1 [0183.476] SetErrorMode (uMode=0x0) returned 0x1 [0183.476] GetFileType (hFile=0x18c) returned 0x1 [0183.476] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8c [0183.477] ReadFile (in: hFile=0x18c, lpBuffer=0x28134b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28134b8*, lpNumberOfBytesRead=0x27e6e8*=0x8c, lpOverlapped=0x0) returned 1 [0183.477] CloseHandle (hObject=0x18c) returned 1 [0183.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x5a [0183.478] SetErrorMode (uMode=0x1) returned 0x0 [0183.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1 [0183.478] SetErrorMode (uMode=0x0) returned 0x1 [0183.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x5a [0183.580] SetErrorMode (uMode=0x1) returned 0x0 [0183.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.586] SetErrorMode (uMode=0x0) returned 0x1 [0183.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x5a [0183.588] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png")) returned 0 [0183.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x60 [0183.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x60 [0183.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x60 [0183.598] SetErrorMode (uMode=0x1) returned 0x0 [0183.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.599] GetFileType (hFile=0x18c) returned 0x1 [0183.600] SetErrorMode (uMode=0x0) returned 0x1 [0183.600] GetFileType (hFile=0x18c) returned 0x1 [0183.600] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x87 [0183.600] ReadFile (in: hFile=0x18c, lpBuffer=0x286b240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x286b240*, lpNumberOfBytesRead=0x27e6e8*=0x87, lpOverlapped=0x0) returned 1 [0183.601] CloseHandle (hObject=0x18c) returned 1 [0183.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x60 [0183.601] SetErrorMode (uMode=0x1) returned 0x0 [0183.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87)) returned 1 [0183.602] SetErrorMode (uMode=0x0) returned 0x1 [0183.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x60 [0183.727] SetErrorMode (uMode=0x1) returned 0x0 [0183.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.733] SetErrorMode (uMode=0x0) returned 0x1 [0183.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x60 [0183.735] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png")) returned 0 [0183.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x61 [0183.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x61 [0183.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x61 [0183.745] SetErrorMode (uMode=0x1) returned 0x0 [0183.745] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.767] GetFileType (hFile=0x18c) returned 0x1 [0183.767] SetErrorMode (uMode=0x0) returned 0x1 [0183.805] GetFileType (hFile=0x18c) returned 0x1 [0183.805] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x87 [0183.805] ReadFile (in: hFile=0x18c, lpBuffer=0x28c9fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c9fc0*, lpNumberOfBytesRead=0x27e6e8*=0x87, lpOverlapped=0x0) returned 1 [0183.806] CloseHandle (hObject=0x18c) returned 1 [0183.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x61 [0183.808] SetErrorMode (uMode=0x1) returned 0x0 [0183.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87)) returned 1 [0183.808] SetErrorMode (uMode=0x0) returned 0x1 [0183.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x61 [0183.915] SetErrorMode (uMode=0x1) returned 0x0 [0183.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.920] SetErrorMode (uMode=0x0) returned 0x1 [0183.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x61 [0183.921] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png")) returned 0 [0183.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", lpFilePart=0x0) returned 0x58 [0183.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", lpFilePart=0x0) returned 0x58 [0183.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", lpFilePart=0x0) returned 0x58 [0183.925] SetErrorMode (uMode=0x1) returned 0x0 [0183.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0183.953] GetFileType (hFile=0x18c) returned 0x1 [0183.953] SetErrorMode (uMode=0x0) returned 0x1 [0183.953] GetFileType (hFile=0x18c) returned 0x1 [0183.953] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x89 [0183.953] ReadFile (in: hFile=0x18c, lpBuffer=0x2728d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2728d60*, lpNumberOfBytesRead=0x27e6e8*=0x89, lpOverlapped=0x0) returned 1 [0183.954] CloseHandle (hObject=0x18c) returned 1 [0183.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", lpFilePart=0x0) returned 0x58 [0183.955] SetErrorMode (uMode=0x1) returned 0x0 [0183.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0183.955] SetErrorMode (uMode=0x0) returned 0x1 [0184.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", lpFilePart=0x0) returned 0x58 [0184.088] SetErrorMode (uMode=0x1) returned 0x0 [0184.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.111] SetErrorMode (uMode=0x0) returned 0x1 [0184.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png", lpFilePart=0x0) returned 0x58 [0184.112] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png")) returned 0 [0184.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", lpFilePart=0x0) returned 0x59 [0184.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", lpFilePart=0x0) returned 0x59 [0184.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", lpFilePart=0x0) returned 0x59 [0184.116] SetErrorMode (uMode=0x1) returned 0x0 [0184.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.125] GetFileType (hFile=0x18c) returned 0x1 [0184.125] SetErrorMode (uMode=0x0) returned 0x1 [0184.125] GetFileType (hFile=0x18c) returned 0x1 [0184.125] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x89 [0184.126] ReadFile (in: hFile=0x18c, lpBuffer=0x27879f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27879f0*, lpNumberOfBytesRead=0x27e6e8*=0x89, lpOverlapped=0x0) returned 1 [0184.126] CloseHandle (hObject=0x18c) returned 1 [0184.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", lpFilePart=0x0) returned 0x59 [0184.127] SetErrorMode (uMode=0x1) returned 0x0 [0184.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0184.128] SetErrorMode (uMode=0x0) returned 0x1 [0184.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", lpFilePart=0x0) returned 0x59 [0184.239] SetErrorMode (uMode=0x1) returned 0x0 [0184.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.243] SetErrorMode (uMode=0x0) returned 0x1 [0184.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png", lpFilePart=0x0) returned 0x59 [0184.244] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png")) returned 0 [0184.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", lpFilePart=0x0) returned 0x57 [0184.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", lpFilePart=0x0) returned 0x57 [0184.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", lpFilePart=0x0) returned 0x57 [0184.264] SetErrorMode (uMode=0x1) returned 0x0 [0184.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.291] GetFileType (hFile=0x18c) returned 0x1 [0184.291] SetErrorMode (uMode=0x0) returned 0x1 [0184.291] GetFileType (hFile=0x18c) returned 0x1 [0184.291] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x89 [0184.291] ReadFile (in: hFile=0x18c, lpBuffer=0x27e6688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e6688*, lpNumberOfBytesRead=0x27e6e8*=0x89, lpOverlapped=0x0) returned 1 [0184.292] CloseHandle (hObject=0x18c) returned 1 [0184.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", lpFilePart=0x0) returned 0x57 [0184.293] SetErrorMode (uMode=0x1) returned 0x0 [0184.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0184.293] SetErrorMode (uMode=0x0) returned 0x1 [0184.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", lpFilePart=0x0) returned 0x57 [0184.411] SetErrorMode (uMode=0x1) returned 0x0 [0184.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.416] SetErrorMode (uMode=0x0) returned 0x1 [0184.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png", lpFilePart=0x0) returned 0x57 [0184.418] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png")) returned 0 [0184.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x62 [0184.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x62 [0184.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x62 [0184.427] SetErrorMode (uMode=0x1) returned 0x0 [0184.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.462] GetFileType (hFile=0x18c) returned 0x1 [0184.472] SetErrorMode (uMode=0x0) returned 0x1 [0184.472] GetFileType (hFile=0x18c) returned 0x1 [0184.472] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa8 [0184.472] ReadFile (in: hFile=0x18c, lpBuffer=0x2845350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2845350*, lpNumberOfBytesRead=0x27e6e8*=0xa8, lpOverlapped=0x0) returned 1 [0184.473] CloseHandle (hObject=0x18c) returned 1 [0184.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x62 [0184.475] SetErrorMode (uMode=0x1) returned 0x0 [0184.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0184.476] SetErrorMode (uMode=0x0) returned 0x1 [0184.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x62 [0184.594] SetErrorMode (uMode=0x1) returned 0x0 [0184.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.597] SetErrorMode (uMode=0x0) returned 0x1 [0184.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x62 [0184.598] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png")) returned 0 [0184.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x63 [0184.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x63 [0184.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x63 [0184.602] SetErrorMode (uMode=0x1) returned 0x0 [0184.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.603] GetFileType (hFile=0x18c) returned 0x1 [0184.603] SetErrorMode (uMode=0x0) returned 0x1 [0184.603] GetFileType (hFile=0x18c) returned 0x1 [0184.603] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa5 [0184.603] ReadFile (in: hFile=0x18c, lpBuffer=0x28a41e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a41e0*, lpNumberOfBytesRead=0x27e6e8*=0xa5, lpOverlapped=0x0) returned 1 [0184.604] CloseHandle (hObject=0x18c) returned 1 [0184.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x63 [0184.604] SetErrorMode (uMode=0x1) returned 0x0 [0184.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0184.605] SetErrorMode (uMode=0x0) returned 0x1 [0184.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x63 [0184.702] SetErrorMode (uMode=0x1) returned 0x0 [0184.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.706] SetErrorMode (uMode=0x0) returned 0x1 [0184.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x63 [0184.707] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png")) returned 0 [0184.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x5f [0184.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x5f [0184.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x5f [0184.714] SetErrorMode (uMode=0x1) returned 0x0 [0184.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.715] GetFileType (hFile=0x18c) returned 0x1 [0184.715] SetErrorMode (uMode=0x0) returned 0x1 [0184.715] GetFileType (hFile=0x18c) returned 0x1 [0184.715] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa6 [0184.715] ReadFile (in: hFile=0x18c, lpBuffer=0x29030c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x29030c8*, lpNumberOfBytesRead=0x27e6e8*=0xa6, lpOverlapped=0x0) returned 1 [0184.716] CloseHandle (hObject=0x18c) returned 1 [0184.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x5f [0184.717] SetErrorMode (uMode=0x1) returned 0x0 [0184.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1 [0184.717] SetErrorMode (uMode=0x0) returned 0x1 [0184.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x5f [0184.829] SetErrorMode (uMode=0x1) returned 0x0 [0184.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.832] SetErrorMode (uMode=0x0) returned 0x1 [0184.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x5f [0184.834] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png")) returned 0 [0184.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x60 [0184.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x60 [0184.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x60 [0184.842] SetErrorMode (uMode=0x1) returned 0x0 [0184.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.842] GetFileType (hFile=0x18c) returned 0x1 [0184.843] SetErrorMode (uMode=0x0) returned 0x1 [0184.843] GetFileType (hFile=0x18c) returned 0x1 [0184.843] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa8 [0184.843] ReadFile (in: hFile=0x18c, lpBuffer=0x2761f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2761f18*, lpNumberOfBytesRead=0x27e6e8*=0xa8, lpOverlapped=0x0) returned 1 [0184.844] CloseHandle (hObject=0x18c) returned 1 [0184.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x60 [0184.844] SetErrorMode (uMode=0x1) returned 0x0 [0184.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0184.844] SetErrorMode (uMode=0x0) returned 0x1 [0184.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x60 [0184.936] SetErrorMode (uMode=0x1) returned 0x0 [0184.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.941] SetErrorMode (uMode=0x0) returned 0x1 [0184.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x60 [0184.942] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png")) returned 0 [0184.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", lpFilePart=0x0) returned 0x57 [0184.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", lpFilePart=0x0) returned 0x57 [0184.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", lpFilePart=0x0) returned 0x57 [0184.949] SetErrorMode (uMode=0x1) returned 0x0 [0184.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0184.950] GetFileType (hFile=0x18c) returned 0x1 [0184.950] SetErrorMode (uMode=0x0) returned 0x1 [0184.950] GetFileType (hFile=0x18c) returned 0x1 [0184.950] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x83 [0184.950] ReadFile (in: hFile=0x18c, lpBuffer=0x27c0cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c0cc0*, lpNumberOfBytesRead=0x27e6e8*=0x83, lpOverlapped=0x0) returned 1 [0184.951] CloseHandle (hObject=0x18c) returned 1 [0184.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", lpFilePart=0x0) returned 0x57 [0184.952] SetErrorMode (uMode=0x1) returned 0x0 [0184.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83)) returned 1 [0184.953] SetErrorMode (uMode=0x0) returned 0x1 [0185.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", lpFilePart=0x0) returned 0x57 [0185.048] SetErrorMode (uMode=0x1) returned 0x0 [0185.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.052] SetErrorMode (uMode=0x0) returned 0x1 [0185.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png", lpFilePart=0x0) returned 0x57 [0185.053] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png")) returned 0 [0185.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", lpFilePart=0x0) returned 0x5c [0185.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", lpFilePart=0x0) returned 0x5c [0185.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", lpFilePart=0x0) returned 0x5c [0185.057] SetErrorMode (uMode=0x1) returned 0x0 [0185.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.058] GetFileType (hFile=0x18c) returned 0x1 [0185.058] SetErrorMode (uMode=0x0) returned 0x1 [0185.059] GetFileType (hFile=0x18c) returned 0x1 [0185.059] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x91 [0185.059] ReadFile (in: hFile=0x18c, lpBuffer=0x281f920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x281f920*, lpNumberOfBytesRead=0x27e6e8*=0x91, lpOverlapped=0x0) returned 1 [0185.060] CloseHandle (hObject=0x18c) returned 1 [0185.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", lpFilePart=0x0) returned 0x5c [0185.061] SetErrorMode (uMode=0x1) returned 0x0 [0185.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1 [0185.061] SetErrorMode (uMode=0x0) returned 0x1 [0185.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", lpFilePart=0x0) returned 0x5c [0185.199] SetErrorMode (uMode=0x1) returned 0x0 [0185.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.203] SetErrorMode (uMode=0x0) returned 0x1 [0185.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png", lpFilePart=0x0) returned 0x5c [0185.204] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png")) returned 0 [0185.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", lpFilePart=0x0) returned 0x5d [0185.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", lpFilePart=0x0) returned 0x5d [0185.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", lpFilePart=0x0) returned 0x5d [0185.211] SetErrorMode (uMode=0x1) returned 0x0 [0185.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.245] GetFileType (hFile=0x18c) returned 0x1 [0185.245] SetErrorMode (uMode=0x0) returned 0x1 [0185.245] GetFileType (hFile=0x18c) returned 0x1 [0185.245] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8b [0185.245] ReadFile (in: hFile=0x18c, lpBuffer=0x287e6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x287e6b0*, lpNumberOfBytesRead=0x27e6e8*=0x8b, lpOverlapped=0x0) returned 1 [0185.246] CloseHandle (hObject=0x18c) returned 1 [0185.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", lpFilePart=0x0) returned 0x5d [0185.247] SetErrorMode (uMode=0x1) returned 0x0 [0185.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b)) returned 1 [0185.247] SetErrorMode (uMode=0x0) returned 0x1 [0185.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", lpFilePart=0x0) returned 0x5d [0185.355] SetErrorMode (uMode=0x1) returned 0x0 [0185.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.359] SetErrorMode (uMode=0x0) returned 0x1 [0185.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png", lpFilePart=0x0) returned 0x5d [0185.360] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png")) returned 0 [0185.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x5d [0185.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x5d [0185.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x5d [0185.367] SetErrorMode (uMode=0x1) returned 0x0 [0185.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.369] GetFileType (hFile=0x18c) returned 0x1 [0185.369] SetErrorMode (uMode=0x0) returned 0x1 [0185.369] GetFileType (hFile=0x18c) returned 0x1 [0185.369] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b9 [0185.369] ReadFile (in: hFile=0x18c, lpBuffer=0x28dd5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28dd5c8*, lpNumberOfBytesRead=0x27e6e8*=0x2b9, lpOverlapped=0x0) returned 1 [0185.371] CloseHandle (hObject=0x18c) returned 1 [0185.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x5d [0185.372] SetErrorMode (uMode=0x1) returned 0x0 [0185.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90e400f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90e400f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50b45dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9)) returned 1 [0185.372] SetErrorMode (uMode=0x0) returned 0x1 [0185.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x5d [0185.468] SetErrorMode (uMode=0x1) returned 0x0 [0185.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.472] SetErrorMode (uMode=0x0) returned 0x1 [0185.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x5d [0185.473] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png")) returned 0 [0185.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", lpFilePart=0x0) returned 0x5a [0185.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", lpFilePart=0x0) returned 0x5a [0185.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", lpFilePart=0x0) returned 0x5a [0185.478] SetErrorMode (uMode=0x1) returned 0x0 [0185.478] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.479] GetFileType (hFile=0x18c) returned 0x1 [0185.479] SetErrorMode (uMode=0x0) returned 0x1 [0185.479] GetFileType (hFile=0x18c) returned 0x1 [0185.479] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x41a [0185.479] ReadFile (in: hFile=0x18c, lpBuffer=0x273d5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x273d5f8*, lpNumberOfBytesRead=0x27e6e8*=0x41a, lpOverlapped=0x0) returned 1 [0185.481] CloseHandle (hObject=0x18c) returned 1 [0185.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", lpFilePart=0x0) returned 0x5a [0185.482] SetErrorMode (uMode=0x1) returned 0x0 [0185.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb910a16e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb910a16e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a)) returned 1 [0185.482] SetErrorMode (uMode=0x0) returned 0x1 [0185.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", lpFilePart=0x0) returned 0x5a [0185.602] SetErrorMode (uMode=0x1) returned 0x0 [0185.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.606] SetErrorMode (uMode=0x0) returned 0x1 [0185.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png", lpFilePart=0x0) returned 0x5a [0185.608] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png")) returned 0 [0185.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x5c [0185.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x5c [0185.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x5c [0185.614] SetErrorMode (uMode=0x1) returned 0x0 [0185.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.615] GetFileType (hFile=0x18c) returned 0x1 [0185.615] SetErrorMode (uMode=0x0) returned 0x1 [0185.615] GetFileType (hFile=0x18c) returned 0x1 [0185.615] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x464 [0185.615] ReadFile (in: hFile=0x18c, lpBuffer=0x279dd78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x279dd78*, lpNumberOfBytesRead=0x27e6e8*=0x464, lpOverlapped=0x0) returned 1 [0185.617] CloseHandle (hObject=0x18c) returned 1 [0185.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x5c [0185.618] SetErrorMode (uMode=0x1) returned 0x0 [0185.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1 [0185.618] SetErrorMode (uMode=0x0) returned 0x1 [0185.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x5c [0185.732] SetErrorMode (uMode=0x1) returned 0x0 [0185.732] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.735] SetErrorMode (uMode=0x0) returned 0x1 [0185.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x5c [0185.736] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png")) returned 0 [0185.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", lpFilePart=0x0) returned 0x59 [0185.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", lpFilePart=0x0) returned 0x59 [0185.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", lpFilePart=0x0) returned 0x59 [0185.740] SetErrorMode (uMode=0x1) returned 0x0 [0185.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.741] GetFileType (hFile=0x18c) returned 0x1 [0185.741] SetErrorMode (uMode=0x0) returned 0x1 [0185.741] GetFileType (hFile=0x18c) returned 0x1 [0185.741] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x357 [0185.741] ReadFile (in: hFile=0x18c, lpBuffer=0x27fe4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27fe4e8*, lpNumberOfBytesRead=0x27e6e8*=0x357, lpOverlapped=0x0) returned 1 [0185.764] CloseHandle (hObject=0x18c) returned 1 [0185.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", lpFilePart=0x0) returned 0x59 [0185.765] SetErrorMode (uMode=0x1) returned 0x0 [0185.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357)) returned 1 [0185.765] SetErrorMode (uMode=0x0) returned 0x1 [0185.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", lpFilePart=0x0) returned 0x59 [0185.873] SetErrorMode (uMode=0x1) returned 0x0 [0185.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.878] SetErrorMode (uMode=0x0) returned 0x1 [0185.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png", lpFilePart=0x0) returned 0x59 [0185.879] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png")) returned 0 [0185.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x5e [0185.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x5e [0185.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x5e [0185.884] SetErrorMode (uMode=0x1) returned 0x0 [0185.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0185.886] GetFileType (hFile=0x18c) returned 0x1 [0185.886] SetErrorMode (uMode=0x0) returned 0x1 [0185.886] GetFileType (hFile=0x18c) returned 0x1 [0185.886] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b9 [0185.886] ReadFile (in: hFile=0x18c, lpBuffer=0x285e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x285e3f0*, lpNumberOfBytesRead=0x27e6e8*=0x2b9, lpOverlapped=0x0) returned 1 [0185.888] CloseHandle (hObject=0x18c) returned 1 [0185.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x5e [0185.889] SetErrorMode (uMode=0x1) returned 0x0 [0185.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9)) returned 1 [0185.889] SetErrorMode (uMode=0x0) returned 0x1 [0186.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x5e [0186.010] SetErrorMode (uMode=0x1) returned 0x0 [0186.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.014] SetErrorMode (uMode=0x0) returned 0x1 [0186.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x5e [0186.015] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png")) returned 0 [0186.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", lpFilePart=0x0) returned 0x5b [0186.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", lpFilePart=0x0) returned 0x5b [0186.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", lpFilePart=0x0) returned 0x5b [0186.020] SetErrorMode (uMode=0x1) returned 0x0 [0186.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.021] GetFileType (hFile=0x18c) returned 0x1 [0186.021] SetErrorMode (uMode=0x0) returned 0x1 [0186.021] GetFileType (hFile=0x18c) returned 0x1 [0186.021] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x417 [0186.021] ReadFile (in: hFile=0x18c, lpBuffer=0x28be0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28be0c8*, lpNumberOfBytesRead=0x27e6e8*=0x417, lpOverlapped=0x0) returned 1 [0186.023] CloseHandle (hObject=0x18c) returned 1 [0186.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", lpFilePart=0x0) returned 0x5b [0186.024] SetErrorMode (uMode=0x1) returned 0x0 [0186.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417)) returned 1 [0186.024] SetErrorMode (uMode=0x0) returned 0x1 [0186.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", lpFilePart=0x0) returned 0x5b [0186.121] SetErrorMode (uMode=0x1) returned 0x0 [0186.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.125] SetErrorMode (uMode=0x0) returned 0x1 [0186.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png", lpFilePart=0x0) returned 0x5b [0186.126] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png")) returned 0 [0186.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x5d [0186.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x5d [0186.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x5d [0186.135] SetErrorMode (uMode=0x1) returned 0x0 [0186.135] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.136] GetFileType (hFile=0x18c) returned 0x1 [0186.136] SetErrorMode (uMode=0x0) returned 0x1 [0186.137] GetFileType (hFile=0x18c) returned 0x1 [0186.137] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x45f [0186.137] ReadFile (in: hFile=0x18c, lpBuffer=0x271e888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x271e888*, lpNumberOfBytesRead=0x27e6e8*=0x45f, lpOverlapped=0x0) returned 1 [0186.138] CloseHandle (hObject=0x18c) returned 1 [0186.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x5d [0186.139] SetErrorMode (uMode=0x1) returned 0x0 [0186.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f)) returned 1 [0186.139] SetErrorMode (uMode=0x0) returned 0x1 [0186.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x5d [0186.252] SetErrorMode (uMode=0x1) returned 0x0 [0186.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.256] SetErrorMode (uMode=0x0) returned 0x1 [0186.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x5d [0186.260] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png")) returned 0 [0186.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", lpFilePart=0x0) returned 0x5a [0186.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", lpFilePart=0x0) returned 0x5a [0186.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", lpFilePart=0x0) returned 0x5a [0186.267] SetErrorMode (uMode=0x1) returned 0x0 [0186.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.268] GetFileType (hFile=0x18c) returned 0x1 [0186.268] SetErrorMode (uMode=0x0) returned 0x1 [0186.268] GetFileType (hFile=0x18c) returned 0x1 [0186.268] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x358 [0186.268] ReadFile (in: hFile=0x18c, lpBuffer=0x277ef28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x277ef28*, lpNumberOfBytesRead=0x27e6e8*=0x358, lpOverlapped=0x0) returned 1 [0186.270] CloseHandle (hObject=0x18c) returned 1 [0186.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", lpFilePart=0x0) returned 0x5a [0186.271] SetErrorMode (uMode=0x1) returned 0x0 [0186.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb917c58b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb917c58b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb51269fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358)) returned 1 [0186.271] SetErrorMode (uMode=0x0) returned 0x1 [0186.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", lpFilePart=0x0) returned 0x5a [0186.366] SetErrorMode (uMode=0x1) returned 0x0 [0186.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.374] SetErrorMode (uMode=0x0) returned 0x1 [0186.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png", lpFilePart=0x0) returned 0x5a [0186.376] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png")) returned 0 [0186.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", lpFilePart=0x0) returned 0x58 [0186.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", lpFilePart=0x0) returned 0x58 [0186.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", lpFilePart=0x0) returned 0x58 [0186.386] SetErrorMode (uMode=0x1) returned 0x0 [0186.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.387] GetFileType (hFile=0x18c) returned 0x1 [0186.387] SetErrorMode (uMode=0x0) returned 0x1 [0186.387] GetFileType (hFile=0x18c) returned 0x1 [0186.387] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x120 [0186.387] ReadFile (in: hFile=0x18c, lpBuffer=0x27dec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27dec08*, lpNumberOfBytesRead=0x27e6e8*=0x120, lpOverlapped=0x0) returned 1 [0186.388] CloseHandle (hObject=0x18c) returned 1 [0186.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", lpFilePart=0x0) returned 0x58 [0186.389] SetErrorMode (uMode=0x1) returned 0x0 [0186.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0186.389] SetErrorMode (uMode=0x0) returned 0x1 [0186.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", lpFilePart=0x0) returned 0x58 [0186.503] SetErrorMode (uMode=0x1) returned 0x0 [0186.504] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.507] SetErrorMode (uMode=0x0) returned 0x1 [0186.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png", lpFilePart=0x0) returned 0x58 [0186.509] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png")) returned 0 [0186.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x0) returned 0x4d [0186.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x0) returned 0x4d [0186.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x0) returned 0x4d [0186.515] SetErrorMode (uMode=0x1) returned 0x0 [0186.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.516] GetFileType (hFile=0x18c) returned 0x1 [0186.516] SetErrorMode (uMode=0x0) returned 0x1 [0186.516] GetFileType (hFile=0x18c) returned 0x1 [0186.516] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4eac [0186.516] ReadFile (in: hFile=0x18c, lpBuffer=0x283d8e8, nNumberOfBytesToRead=0x4eac, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283d8e8*, lpNumberOfBytesRead=0x27e6e8*=0x4eac, lpOverlapped=0x0) returned 1 [0186.518] CloseHandle (hObject=0x18c) returned 1 [0186.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x0) returned 0x4d [0186.519] SetErrorMode (uMode=0x1) returned 0x0 [0186.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac)) returned 1 [0186.519] SetErrorMode (uMode=0x0) returned 0x1 [0186.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x0) returned 0x4d [0186.613] SetErrorMode (uMode=0x1) returned 0x0 [0186.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.617] SetErrorMode (uMode=0x0) returned 0x1 [0186.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x0) returned 0x4d [0186.619] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png")) returned 0 [0186.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", lpFilePart=0x0) returned 0x51 [0186.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", lpFilePart=0x0) returned 0x51 [0186.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", lpFilePart=0x0) returned 0x51 [0186.623] SetErrorMode (uMode=0x1) returned 0x0 [0186.623] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.623] GetFileType (hFile=0x18c) returned 0x1 [0186.623] SetErrorMode (uMode=0x0) returned 0x1 [0186.623] GetFileType (hFile=0x18c) returned 0x1 [0186.623] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xf0 [0186.623] ReadFile (in: hFile=0x18c, lpBuffer=0x28c24f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c24f8*, lpNumberOfBytesRead=0x27e6e8*=0xf0, lpOverlapped=0x0) returned 1 [0186.624] CloseHandle (hObject=0x18c) returned 1 [0186.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", lpFilePart=0x0) returned 0x51 [0186.625] SetErrorMode (uMode=0x1) returned 0x0 [0186.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0186.625] SetErrorMode (uMode=0x0) returned 0x1 [0186.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", lpFilePart=0x0) returned 0x51 [0186.723] SetErrorMode (uMode=0x1) returned 0x0 [0186.723] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.733] SetErrorMode (uMode=0x0) returned 0x1 [0186.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png", lpFilePart=0x0) returned 0x51 [0186.735] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png")) returned 0 [0186.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x0) returned 0x4f [0186.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x0) returned 0x4f [0186.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x0) returned 0x4f [0186.768] SetErrorMode (uMode=0x1) returned 0x0 [0186.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.769] GetFileType (hFile=0x18c) returned 0x1 [0186.769] SetErrorMode (uMode=0x0) returned 0x1 [0186.769] GetFileType (hFile=0x18c) returned 0x1 [0186.769] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1db [0186.769] ReadFile (in: hFile=0x18c, lpBuffer=0x271c670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x271c670*, lpNumberOfBytesRead=0x27e6e8*=0x1db, lpOverlapped=0x0) returned 1 [0186.770] CloseHandle (hObject=0x18c) returned 1 [0186.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x0) returned 0x4f [0186.771] SetErrorMode (uMode=0x1) returned 0x0 [0186.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db)) returned 1 [0186.771] SetErrorMode (uMode=0x0) returned 0x1 [0186.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x0) returned 0x4f [0186.891] SetErrorMode (uMode=0x1) returned 0x0 [0186.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.895] SetErrorMode (uMode=0x0) returned 0x1 [0186.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x0) returned 0x4f [0186.896] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png")) returned 0 [0186.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x0) returned 0x4f [0186.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x0) returned 0x4f [0186.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x0) returned 0x4f [0186.902] SetErrorMode (uMode=0x1) returned 0x0 [0186.902] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0186.903] GetFileType (hFile=0x18c) returned 0x1 [0186.903] SetErrorMode (uMode=0x0) returned 0x1 [0186.903] GetFileType (hFile=0x18c) returned 0x1 [0186.903] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1ca [0186.903] ReadFile (in: hFile=0x18c, lpBuffer=0x277bbe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x277bbe0*, lpNumberOfBytesRead=0x27e6e8*=0x1ca, lpOverlapped=0x0) returned 1 [0186.904] CloseHandle (hObject=0x18c) returned 1 [0186.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x0) returned 0x4f [0186.905] SetErrorMode (uMode=0x1) returned 0x0 [0186.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca)) returned 1 [0186.905] SetErrorMode (uMode=0x0) returned 0x1 [0187.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x0) returned 0x4f [0187.007] SetErrorMode (uMode=0x1) returned 0x0 [0187.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.011] SetErrorMode (uMode=0x0) returned 0x1 [0187.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x0) returned 0x4f [0187.012] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png")) returned 0 [0187.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x0) returned 0x4f [0187.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x0) returned 0x4f [0187.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x0) returned 0x4f [0187.019] SetErrorMode (uMode=0x1) returned 0x0 [0187.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.020] GetFileType (hFile=0x18c) returned 0x1 [0187.020] SetErrorMode (uMode=0x0) returned 0x1 [0187.020] GetFileType (hFile=0x18c) returned 0x1 [0187.020] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc2f [0187.020] ReadFile (in: hFile=0x18c, lpBuffer=0x27dba38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27dba38*, lpNumberOfBytesRead=0x27e6e8*=0xc2f, lpOverlapped=0x0) returned 1 [0187.022] CloseHandle (hObject=0x18c) returned 1 [0187.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x0) returned 0x4f [0187.023] SetErrorMode (uMode=0x1) returned 0x0 [0187.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f)) returned 1 [0187.023] SetErrorMode (uMode=0x0) returned 0x1 [0187.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x0) returned 0x4f [0187.141] SetErrorMode (uMode=0x1) returned 0x0 [0187.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.145] SetErrorMode (uMode=0x0) returned 0x1 [0187.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x0) returned 0x4f [0187.146] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png")) returned 0 [0187.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", lpFilePart=0x0) returned 0x56 [0187.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", lpFilePart=0x0) returned 0x56 [0187.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", lpFilePart=0x0) returned 0x56 [0187.153] SetErrorMode (uMode=0x1) returned 0x0 [0187.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.153] GetFileType (hFile=0x18c) returned 0x1 [0187.153] SetErrorMode (uMode=0x0) returned 0x1 [0187.153] GetFileType (hFile=0x18c) returned 0x1 [0187.153] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4d87 [0187.154] ReadFile (in: hFile=0x18c, lpBuffer=0x283f508, nNumberOfBytesToRead=0x4d87, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283f508*, lpNumberOfBytesRead=0x27e6e8*=0x4d87, lpOverlapped=0x0) returned 1 [0187.155] CloseHandle (hObject=0x18c) returned 1 [0187.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", lpFilePart=0x0) returned 0x56 [0187.156] SetErrorMode (uMode=0x1) returned 0x0 [0187.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d87)) returned 1 [0187.156] SetErrorMode (uMode=0x0) returned 0x1 [0187.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", lpFilePart=0x0) returned 0x56 [0187.313] SetErrorMode (uMode=0x1) returned 0x0 [0187.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.317] SetErrorMode (uMode=0x0) returned 0x1 [0187.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png", lpFilePart=0x0) returned 0x56 [0187.318] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png")) returned 0 [0187.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x0) returned 0x4d [0187.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x0) returned 0x4d [0187.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x0) returned 0x4d [0187.326] SetErrorMode (uMode=0x1) returned 0x0 [0187.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.327] GetFileType (hFile=0x18c) returned 0x1 [0187.327] SetErrorMode (uMode=0x0) returned 0x1 [0187.327] GetFileType (hFile=0x18c) returned 0x1 [0187.327] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x519b [0187.327] ReadFile (in: hFile=0x18c, lpBuffer=0x28c2d08, nNumberOfBytesToRead=0x519b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c2d08*, lpNumberOfBytesRead=0x27e6e8*=0x519b, lpOverlapped=0x0) returned 1 [0187.329] CloseHandle (hObject=0x18c) returned 1 [0187.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x0) returned 0x4d [0187.330] SetErrorMode (uMode=0x1) returned 0x0 [0187.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b)) returned 1 [0187.330] SetErrorMode (uMode=0x0) returned 0x1 [0187.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x0) returned 0x4d [0187.428] SetErrorMode (uMode=0x1) returned 0x0 [0187.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.431] SetErrorMode (uMode=0x0) returned 0x1 [0187.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x0) returned 0x4d [0187.432] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png")) returned 0 [0187.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", lpFilePart=0x0) returned 0x51 [0187.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", lpFilePart=0x0) returned 0x51 [0187.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", lpFilePart=0x0) returned 0x51 [0187.436] SetErrorMode (uMode=0x1) returned 0x0 [0187.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.436] GetFileType (hFile=0x18c) returned 0x1 [0187.436] SetErrorMode (uMode=0x0) returned 0x1 [0187.436] GetFileType (hFile=0x18c) returned 0x1 [0187.436] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xf3 [0187.436] ReadFile (in: hFile=0x18c, lpBuffer=0x27444c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27444c8*, lpNumberOfBytesRead=0x27e6e8*=0xf3, lpOverlapped=0x0) returned 1 [0187.437] CloseHandle (hObject=0x18c) returned 1 [0187.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", lpFilePart=0x0) returned 0x51 [0187.438] SetErrorMode (uMode=0x1) returned 0x0 [0187.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0187.438] SetErrorMode (uMode=0x0) returned 0x1 [0187.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", lpFilePart=0x0) returned 0x51 [0187.554] SetErrorMode (uMode=0x1) returned 0x0 [0187.554] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.558] SetErrorMode (uMode=0x0) returned 0x1 [0187.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png", lpFilePart=0x0) returned 0x51 [0187.559] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png")) returned 0 [0187.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x0) returned 0x4f [0187.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x0) returned 0x4f [0187.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x0) returned 0x4f [0187.566] SetErrorMode (uMode=0x1) returned 0x0 [0187.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.568] GetFileType (hFile=0x18c) returned 0x1 [0187.568] SetErrorMode (uMode=0x0) returned 0x1 [0187.568] GetFileType (hFile=0x18c) returned 0x1 [0187.568] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xce [0187.568] ReadFile (in: hFile=0x18c, lpBuffer=0x279e258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x279e258*, lpNumberOfBytesRead=0x27e6e8*=0xce, lpOverlapped=0x0) returned 1 [0187.569] CloseHandle (hObject=0x18c) returned 1 [0187.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x0) returned 0x4f [0187.570] SetErrorMode (uMode=0x1) returned 0x0 [0187.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0187.570] SetErrorMode (uMode=0x0) returned 0x1 [0187.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x0) returned 0x4f [0187.671] SetErrorMode (uMode=0x1) returned 0x0 [0187.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.675] SetErrorMode (uMode=0x0) returned 0x1 [0187.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x0) returned 0x4f [0187.676] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png")) returned 0 [0187.682] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x0) returned 0x4f [0187.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x0) returned 0x4f [0187.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x0) returned 0x4f [0187.683] SetErrorMode (uMode=0x1) returned 0x0 [0187.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.683] GetFileType (hFile=0x18c) returned 0x1 [0187.683] SetErrorMode (uMode=0x0) returned 0x1 [0187.683] GetFileType (hFile=0x18c) returned 0x1 [0187.683] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xce [0187.683] ReadFile (in: hFile=0x18c, lpBuffer=0x27fcf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27fcf10*, lpNumberOfBytesRead=0x27e6e8*=0xce, lpOverlapped=0x0) returned 1 [0187.684] CloseHandle (hObject=0x18c) returned 1 [0187.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x0) returned 0x4f [0187.685] SetErrorMode (uMode=0x1) returned 0x0 [0187.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0187.686] SetErrorMode (uMode=0x0) returned 0x1 [0187.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x0) returned 0x4f [0187.823] SetErrorMode (uMode=0x1) returned 0x0 [0187.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.827] SetErrorMode (uMode=0x0) returned 0x1 [0187.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x0) returned 0x4f [0187.829] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png")) returned 0 [0187.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x0) returned 0x4f [0187.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x0) returned 0x4f [0187.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x0) returned 0x4f [0187.835] SetErrorMode (uMode=0x1) returned 0x0 [0187.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.837] GetFileType (hFile=0x18c) returned 0x1 [0187.837] SetErrorMode (uMode=0x0) returned 0x1 [0187.837] GetFileType (hFile=0x18c) returned 0x1 [0187.837] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbbb [0187.837] ReadFile (in: hFile=0x18c, lpBuffer=0x285c6d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x285c6d8*, lpNumberOfBytesRead=0x27e6e8*=0xbbb, lpOverlapped=0x0) returned 1 [0187.840] CloseHandle (hObject=0x18c) returned 1 [0187.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x0) returned 0x4f [0187.841] SetErrorMode (uMode=0x1) returned 0x0 [0187.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb)) returned 1 [0187.841] SetErrorMode (uMode=0x0) returned 0x1 [0187.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x0) returned 0x4f [0187.940] SetErrorMode (uMode=0x1) returned 0x0 [0187.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.944] SetErrorMode (uMode=0x0) returned 0x1 [0187.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x0) returned 0x4f [0187.945] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png")) returned 0 [0187.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", lpFilePart=0x0) returned 0x56 [0187.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", lpFilePart=0x0) returned 0x56 [0187.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", lpFilePart=0x0) returned 0x56 [0187.950] SetErrorMode (uMode=0x1) returned 0x0 [0187.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0187.951] GetFileType (hFile=0x18c) returned 0x1 [0187.951] SetErrorMode (uMode=0x0) returned 0x1 [0187.951] GetFileType (hFile=0x18c) returned 0x1 [0187.951] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5a3d [0187.951] ReadFile (in: hFile=0x18c, lpBuffer=0x28bff78, nNumberOfBytesToRead=0x5a3d, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28bff78*, lpNumberOfBytesRead=0x27e6e8*=0x5a3d, lpOverlapped=0x0) returned 1 [0187.953] CloseHandle (hObject=0x18c) returned 1 [0187.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", lpFilePart=0x0) returned 0x56 [0187.954] SetErrorMode (uMode=0x1) returned 0x0 [0187.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d)) returned 1 [0187.954] SetErrorMode (uMode=0x0) returned 0x1 [0188.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", lpFilePart=0x0) returned 0x56 [0188.050] SetErrorMode (uMode=0x1) returned 0x0 [0188.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.054] SetErrorMode (uMode=0x0) returned 0x1 [0188.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png", lpFilePart=0x0) returned 0x56 [0188.055] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png")) returned 0 [0188.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x0) returned 0x4b [0188.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x0) returned 0x4b [0188.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x0) returned 0x4b [0188.063] SetErrorMode (uMode=0x1) returned 0x0 [0188.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.064] GetFileType (hFile=0x18c) returned 0x1 [0188.064] SetErrorMode (uMode=0x0) returned 0x1 [0188.064] GetFileType (hFile=0x18c) returned 0x1 [0188.064] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4c3b [0188.065] ReadFile (in: hFile=0x18c, lpBuffer=0x2749dd0, nNumberOfBytesToRead=0x4c3b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2749dd0*, lpNumberOfBytesRead=0x27e6e8*=0x4c3b, lpOverlapped=0x0) returned 1 [0188.066] CloseHandle (hObject=0x18c) returned 1 [0188.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x0) returned 0x4b [0188.067] SetErrorMode (uMode=0x1) returned 0x0 [0188.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b)) returned 1 [0188.068] SetErrorMode (uMode=0x0) returned 0x1 [0188.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x0) returned 0x4b [0188.184] SetErrorMode (uMode=0x1) returned 0x0 [0188.185] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.188] SetErrorMode (uMode=0x0) returned 0x1 [0188.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x0) returned 0x4b [0188.189] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png")) returned 0 [0188.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x0) returned 0x4f [0188.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x0) returned 0x4f [0188.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x0) returned 0x4f [0188.196] SetErrorMode (uMode=0x1) returned 0x0 [0188.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.196] GetFileType (hFile=0x18c) returned 0x1 [0188.196] SetErrorMode (uMode=0x0) returned 0x1 [0188.196] GetFileType (hFile=0x18c) returned 0x1 [0188.196] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbcb [0188.196] ReadFile (in: hFile=0x18c, lpBuffer=0x27c8830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c8830*, lpNumberOfBytesRead=0x27e6e8*=0xbcb, lpOverlapped=0x0) returned 1 [0188.197] CloseHandle (hObject=0x18c) returned 1 [0188.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x0) returned 0x4f [0188.198] SetErrorMode (uMode=0x1) returned 0x0 [0188.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb)) returned 1 [0188.199] SetErrorMode (uMode=0x0) returned 0x1 [0188.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x0) returned 0x4f [0188.316] SetErrorMode (uMode=0x1) returned 0x0 [0188.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.324] SetErrorMode (uMode=0x0) returned 0x1 [0188.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x0) returned 0x4f [0188.325] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png")) returned 0 [0188.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x0) returned 0x4d [0188.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x0) returned 0x4d [0188.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x0) returned 0x4d [0188.335] SetErrorMode (uMode=0x1) returned 0x0 [0188.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.338] GetFileType (hFile=0x18c) returned 0x1 [0188.338] SetErrorMode (uMode=0x0) returned 0x1 [0188.338] GetFileType (hFile=0x18c) returned 0x1 [0188.338] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x15f [0188.338] ReadFile (in: hFile=0x18c, lpBuffer=0x2827760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2827760*, lpNumberOfBytesRead=0x27e6e8*=0x15f, lpOverlapped=0x0) returned 1 [0188.339] CloseHandle (hObject=0x18c) returned 1 [0188.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x0) returned 0x4d [0188.340] SetErrorMode (uMode=0x1) returned 0x0 [0188.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f)) returned 1 [0188.341] SetErrorMode (uMode=0x0) returned 0x1 [0188.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x0) returned 0x4d [0188.458] SetErrorMode (uMode=0x1) returned 0x0 [0188.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.461] SetErrorMode (uMode=0x0) returned 0x1 [0188.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x0) returned 0x4d [0188.462] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png")) returned 0 [0188.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x0) returned 0x4d [0188.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x0) returned 0x4d [0188.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x0) returned 0x4d [0188.466] SetErrorMode (uMode=0x1) returned 0x0 [0188.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.467] GetFileType (hFile=0x18c) returned 0x1 [0188.467] SetErrorMode (uMode=0x0) returned 0x1 [0188.467] GetFileType (hFile=0x18c) returned 0x1 [0188.467] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x169 [0188.467] ReadFile (in: hFile=0x18c, lpBuffer=0x2885dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2885dd0*, lpNumberOfBytesRead=0x27e6e8*=0x169, lpOverlapped=0x0) returned 1 [0188.468] CloseHandle (hObject=0x18c) returned 1 [0188.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x0) returned 0x4d [0188.469] SetErrorMode (uMode=0x1) returned 0x0 [0188.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169)) returned 1 [0188.469] SetErrorMode (uMode=0x0) returned 0x1 [0188.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x0) returned 0x4d [0188.566] SetErrorMode (uMode=0x1) returned 0x0 [0188.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.570] SetErrorMode (uMode=0x0) returned 0x1 [0188.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x0) returned 0x4d [0188.571] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png")) returned 0 [0188.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x0) returned 0x4d [0188.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x0) returned 0x4d [0188.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x0) returned 0x4d [0188.578] SetErrorMode (uMode=0x1) returned 0x0 [0188.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.579] GetFileType (hFile=0x18c) returned 0x1 [0188.579] SetErrorMode (uMode=0x0) returned 0x1 [0188.579] GetFileType (hFile=0x18c) returned 0x1 [0188.579] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbb8 [0188.579] ReadFile (in: hFile=0x18c, lpBuffer=0x28e5930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e5930*, lpNumberOfBytesRead=0x27e6e8*=0xbb8, lpOverlapped=0x0) returned 1 [0188.582] CloseHandle (hObject=0x18c) returned 1 [0188.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x0) returned 0x4d [0188.583] SetErrorMode (uMode=0x1) returned 0x0 [0188.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8)) returned 1 [0188.583] SetErrorMode (uMode=0x0) returned 0x1 [0188.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x0) returned 0x4d [0188.685] SetErrorMode (uMode=0x1) returned 0x0 [0188.685] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.689] SetErrorMode (uMode=0x0) returned 0x1 [0188.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x0) returned 0x4d [0188.691] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png")) returned 0 [0188.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", lpFilePart=0x0) returned 0x54 [0188.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", lpFilePart=0x0) returned 0x54 [0188.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", lpFilePart=0x0) returned 0x54 [0188.699] SetErrorMode (uMode=0x1) returned 0x0 [0188.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.700] GetFileType (hFile=0x18c) returned 0x1 [0188.700] SetErrorMode (uMode=0x0) returned 0x1 [0188.700] GetFileType (hFile=0x18c) returned 0x1 [0188.700] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5385 [0188.700] ReadFile (in: hFile=0x18c, lpBuffer=0x2749138, nNumberOfBytesToRead=0x5385, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2749138*, lpNumberOfBytesRead=0x27e6e8*=0x5385, lpOverlapped=0x0) returned 1 [0188.701] CloseHandle (hObject=0x18c) returned 1 [0188.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", lpFilePart=0x0) returned 0x54 [0188.702] SetErrorMode (uMode=0x1) returned 0x0 [0188.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385)) returned 1 [0188.703] SetErrorMode (uMode=0x0) returned 0x1 [0188.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", lpFilePart=0x0) returned 0x54 [0188.851] SetErrorMode (uMode=0x1) returned 0x0 [0188.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.854] SetErrorMode (uMode=0x0) returned 0x1 [0188.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png", lpFilePart=0x0) returned 0x54 [0188.856] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png")) returned 0 [0188.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5c [0188.864] SetErrorMode (uMode=0x1) returned 0x0 [0188.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0188.866] GetFileType (hFile=0x18c) returned 0x1 [0188.866] SetErrorMode (uMode=0x0) returned 0x1 [0188.866] GetFileType (hFile=0x18c) returned 0x1 [0188.868] WriteFile (in: hFile=0x18c, lpBuffer=0x27e0838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27e0838*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0188.869] WriteFile (in: hFile=0x18c, lpBuffer=0x27e0838*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x27e0838*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0188.870] CloseHandle (hObject=0x18c) returned 1 [0188.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x55 [0188.871] SetErrorMode (uMode=0x1) returned 0x0 [0188.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0188.875] GetFileType (hFile=0x18c) returned 0x1 [0188.875] SetErrorMode (uMode=0x0) returned 0x1 [0188.875] GetFileType (hFile=0x18c) returned 0x1 [0188.877] WriteFile (in: hFile=0x18c, lpBuffer=0x27f6948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x27f6948*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0188.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x39 [0188.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x39 [0188.880] SetErrorMode (uMode=0x1) returned 0x0 [0188.880] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0188.881] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.882] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0188.882] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0188.882] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0188.882] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0188.882] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0188.882] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0188.882] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0188.882] SetErrorMode (uMode=0x0) returned 0x1 [0188.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x39 [0188.883] SetErrorMode (uMode=0x1) returned 0x0 [0188.883] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0188.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0188.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0188.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0188.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0188.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0188.884] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0188.884] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0188.884] SetErrorMode (uMode=0x0) returned 0x1 [0188.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0188.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0188.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0188.884] SetErrorMode (uMode=0x1) returned 0x0 [0188.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.885] GetFileType (hFile=0x18c) returned 0x1 [0188.885] SetErrorMode (uMode=0x0) returned 0x1 [0188.885] GetFileType (hFile=0x18c) returned 0x1 [0188.885] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x4f1c [0188.885] ReadFile (in: hFile=0x18c, lpBuffer=0x27febe8, nNumberOfBytesToRead=0x4f1c, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27febe8*, lpNumberOfBytesRead=0x27e788*=0x4f1c, lpOverlapped=0x0) returned 1 [0188.887] CloseHandle (hObject=0x18c) returned 1 [0188.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0188.888] SetErrorMode (uMode=0x1) returned 0x0 [0188.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c)) returned 1 [0188.888] SetErrorMode (uMode=0x0) returned 0x1 [0188.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0188.985] SetErrorMode (uMode=0x1) returned 0x0 [0188.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.989] SetErrorMode (uMode=0x0) returned 0x1 [0188.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0188.990] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png")) returned 0 [0188.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x0) returned 0x42 [0188.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x0) returned 0x42 [0188.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x0) returned 0x42 [0188.999] SetErrorMode (uMode=0x1) returned 0x0 [0188.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0188.999] GetFileType (hFile=0x18c) returned 0x1 [0188.999] SetErrorMode (uMode=0x0) returned 0x1 [0188.999] GetFileType (hFile=0x18c) returned 0x1 [0188.999] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x23e2 [0188.999] ReadFile (in: hFile=0x18c, lpBuffer=0x287f930, nNumberOfBytesToRead=0x23e2, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x287f930*, lpNumberOfBytesRead=0x27e788*=0x23e2, lpOverlapped=0x0) returned 1 [0189.003] CloseHandle (hObject=0x18c) returned 1 [0189.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x0) returned 0x42 [0189.004] SetErrorMode (uMode=0x1) returned 0x0 [0189.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2)) returned 1 [0189.004] SetErrorMode (uMode=0x0) returned 0x1 [0189.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x0) returned 0x42 [0189.122] SetErrorMode (uMode=0x1) returned 0x0 [0189.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.127] SetErrorMode (uMode=0x0) returned 0x1 [0189.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x0) returned 0x42 [0189.128] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png")) returned 0 [0189.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x0) returned 0x42 [0189.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x0) returned 0x42 [0189.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x0) returned 0x42 [0189.134] SetErrorMode (uMode=0x1) returned 0x0 [0189.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0189.135] GetFileType (hFile=0x18c) returned 0x1 [0189.135] SetErrorMode (uMode=0x0) returned 0x1 [0189.135] GetFileType (hFile=0x18c) returned 0x1 [0189.135] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1816 [0189.135] ReadFile (in: hFile=0x18c, lpBuffer=0x28e9f18, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28e9f18*, lpNumberOfBytesRead=0x27e788*=0x1816, lpOverlapped=0x0) returned 1 [0189.137] CloseHandle (hObject=0x18c) returned 1 [0189.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x0) returned 0x42 [0189.138] SetErrorMode (uMode=0x1) returned 0x0 [0189.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0189.138] SetErrorMode (uMode=0x0) returned 0x1 [0189.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x0) returned 0x42 [0189.279] SetErrorMode (uMode=0x1) returned 0x0 [0189.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.283] SetErrorMode (uMode=0x0) returned 0x1 [0189.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x0) returned 0x42 [0189.286] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png")) returned 0 [0189.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", lpFilePart=0x0) returned 0x3f [0189.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", lpFilePart=0x0) returned 0x3f [0189.292] SetErrorMode (uMode=0x1) returned 0x0 [0189.293] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1 [0189.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0189.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0189.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0189.293] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0189.294] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.294] SetErrorMode (uMode=0x0) returned 0x1 [0189.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", lpFilePart=0x0) returned 0x3f [0189.294] SetErrorMode (uMode=0x1) returned 0x0 [0189.294] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.294] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1 [0189.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0189.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0189.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0189.295] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0189.295] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.295] SetErrorMode (uMode=0x0) returned 0x1 [0189.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", lpFilePart=0x0) returned 0x48 [0189.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", lpFilePart=0x0) returned 0x48 [0189.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", lpFilePart=0x0) returned 0x48 [0189.296] SetErrorMode (uMode=0x1) returned 0x0 [0189.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0189.298] GetFileType (hFile=0x18c) returned 0x1 [0189.298] SetErrorMode (uMode=0x0) returned 0x1 [0189.298] GetFileType (hFile=0x18c) returned 0x1 [0189.298] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1216 [0189.298] ReadFile (in: hFile=0x18c, lpBuffer=0x2754188, nNumberOfBytesToRead=0x1216, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2754188*, lpNumberOfBytesRead=0x27e6e8*=0x1216, lpOverlapped=0x0) returned 1 [0189.301] CloseHandle (hObject=0x18c) returned 1 [0189.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", lpFilePart=0x0) returned 0x48 [0189.302] SetErrorMode (uMode=0x1) returned 0x0 [0189.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216)) returned 1 [0189.302] SetErrorMode (uMode=0x0) returned 0x1 [0189.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", lpFilePart=0x0) returned 0x48 [0189.428] SetErrorMode (uMode=0x1) returned 0x0 [0189.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.432] SetErrorMode (uMode=0x0) returned 0x1 [0189.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html", lpFilePart=0x0) returned 0x48 [0189.433] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html")) returned 0 [0189.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4a [0189.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4a [0189.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4a [0189.437] SetErrorMode (uMode=0x1) returned 0x0 [0189.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0189.438] GetFileType (hFile=0x18c) returned 0x1 [0189.438] SetErrorMode (uMode=0x0) returned 0x1 [0189.438] GetFileType (hFile=0x18c) returned 0x1 [0189.438] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3e1 [0189.438] ReadFile (in: hFile=0x18c, lpBuffer=0x27ba620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27ba620*, lpNumberOfBytesRead=0x27e6e8*=0x3e1, lpOverlapped=0x0) returned 1 [0189.442] CloseHandle (hObject=0x18c) returned 1 [0189.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4a [0189.443] SetErrorMode (uMode=0x1) returned 0x0 [0189.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1)) returned 1 [0189.443] SetErrorMode (uMode=0x0) returned 0x1 [0189.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4a [0189.551] SetErrorMode (uMode=0x1) returned 0x0 [0189.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.556] SetErrorMode (uMode=0x0) returned 0x1 [0189.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4a [0189.557] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml")) returned 0 [0189.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x43 [0189.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x43 [0189.565] SetErrorMode (uMode=0x1) returned 0x0 [0189.566] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1 [0189.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0 [0189.566] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.567] SetErrorMode (uMode=0x0) returned 0x1 [0189.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x43 [0189.567] SetErrorMode (uMode=0x1) returned 0x0 [0189.567] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1 [0189.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0 [0189.568] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.568] SetErrorMode (uMode=0x0) returned 0x1 [0189.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x0) returned 0x4b [0189.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x0) returned 0x4b [0189.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x0) returned 0x4b [0189.569] SetErrorMode (uMode=0x1) returned 0x0 [0189.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0189.570] GetFileType (hFile=0x18c) returned 0x1 [0189.570] SetErrorMode (uMode=0x0) returned 0x1 [0189.570] GetFileType (hFile=0x18c) returned 0x1 [0189.570] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x55c [0189.570] ReadFile (in: hFile=0x18c, lpBuffer=0x27ff560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27ff560*, lpNumberOfBytesRead=0x27e648*=0x55c, lpOverlapped=0x0) returned 1 [0189.572] CloseHandle (hObject=0x18c) returned 1 [0189.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x0) returned 0x4b [0189.573] SetErrorMode (uMode=0x1) returned 0x0 [0189.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1 [0189.573] SetErrorMode (uMode=0x0) returned 0x1 [0189.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x0) returned 0x4b [0189.678] SetErrorMode (uMode=0x1) returned 0x0 [0189.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.682] SetErrorMode (uMode=0x0) returned 0x1 [0189.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x0) returned 0x4b [0189.683] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css")) returned 0 [0189.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0189.691] SetErrorMode (uMode=0x1) returned 0x0 [0189.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0189.692] GetFileType (hFile=0x18c) returned 0x1 [0189.692] SetErrorMode (uMode=0x0) returned 0x1 [0189.692] GetFileType (hFile=0x18c) returned 0x1 [0189.694] WriteFile (in: hFile=0x18c, lpBuffer=0x2873580*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2873580*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0189.695] WriteFile (in: hFile=0x18c, lpBuffer=0x2873580*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2873580*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0189.696] CloseHandle (hObject=0x18c) returned 1 [0189.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x42 [0189.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x42 [0189.696] SetErrorMode (uMode=0x1) returned 0x0 [0189.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0 [0189.697] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.697] SetErrorMode (uMode=0x0) returned 0x1 [0189.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x42 [0189.697] SetErrorMode (uMode=0x1) returned 0x0 [0189.698] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0 [0189.698] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.698] SetErrorMode (uMode=0x0) returned 0x1 [0189.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", lpFilePart=0x0) returned 0x49 [0189.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", lpFilePart=0x0) returned 0x49 [0189.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", lpFilePart=0x0) returned 0x49 [0189.699] SetErrorMode (uMode=0x1) returned 0x0 [0189.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0189.699] GetFileType (hFile=0x18c) returned 0x1 [0189.699] SetErrorMode (uMode=0x0) returned 0x1 [0189.699] GetFileType (hFile=0x18c) returned 0x1 [0189.699] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x47ac [0189.699] ReadFile (in: hFile=0x18c, lpBuffer=0x287b138, nNumberOfBytesToRead=0x47ac, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x287b138*, lpNumberOfBytesRead=0x27e648*=0x47ac, lpOverlapped=0x0) returned 1 [0189.701] CloseHandle (hObject=0x18c) returned 1 [0189.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", lpFilePart=0x0) returned 0x49 [0189.702] SetErrorMode (uMode=0x1) returned 0x0 [0189.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac)) returned 1 [0189.702] SetErrorMode (uMode=0x0) returned 0x1 [0189.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", lpFilePart=0x0) returned 0x49 [0189.886] SetErrorMode (uMode=0x1) returned 0x0 [0189.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.890] SetErrorMode (uMode=0x0) returned 0x1 [0189.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js", lpFilePart=0x0) returned 0x49 [0189.892] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js")) returned 0 [0189.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5c [0189.899] SetErrorMode (uMode=0x1) returned 0x0 [0189.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0189.900] GetFileType (hFile=0x18c) returned 0x1 [0189.900] SetErrorMode (uMode=0x0) returned 0x1 [0189.900] GetFileType (hFile=0x18c) returned 0x1 [0189.902] WriteFile (in: hFile=0x18c, lpBuffer=0x2719d60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2719d60*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0189.903] WriteFile (in: hFile=0x18c, lpBuffer=0x2719d60*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2719d60*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0189.904] CloseHandle (hObject=0x18c) returned 1 [0189.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0189.904] SetErrorMode (uMode=0x1) returned 0x0 [0189.904] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0189.905] GetFileType (hFile=0x18c) returned 0x1 [0189.905] SetErrorMode (uMode=0x0) returned 0x1 [0189.905] GetFileType (hFile=0x18c) returned 0x1 [0189.907] WriteFile (in: hFile=0x18c, lpBuffer=0x272fe80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x272fe80*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0189.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", lpFilePart=0x0) returned 0x40 [0189.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", lpFilePart=0x0) returned 0x40 [0189.908] SetErrorMode (uMode=0x1) returned 0x0 [0189.909] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1 [0189.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1 [0189.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1 [0189.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1 [0189.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1 [0189.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1 [0189.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1 [0189.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1 [0189.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1 [0189.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1 [0189.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0 [0189.912] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.913] SetErrorMode (uMode=0x0) returned 0x1 [0189.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", lpFilePart=0x0) returned 0x40 [0189.913] SetErrorMode (uMode=0x1) returned 0x0 [0189.913] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0189.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1 [0189.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1 [0189.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1 [0189.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0 [0189.915] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0189.916] SetErrorMode (uMode=0x0) returned 0x1 [0189.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x0) returned 0x49 [0189.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x0) returned 0x49 [0189.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x0) returned 0x49 [0189.917] SetErrorMode (uMode=0x1) returned 0x0 [0189.917] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0189.918] GetFileType (hFile=0x18c) returned 0x1 [0189.918] SetErrorMode (uMode=0x0) returned 0x1 [0189.918] GetFileType (hFile=0x18c) returned 0x1 [0189.918] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x42e6 [0189.918] ReadFile (in: hFile=0x18c, lpBuffer=0x2738678, nNumberOfBytesToRead=0x42e6, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2738678*, lpNumberOfBytesRead=0x27e6e8*=0x42e6, lpOverlapped=0x0) returned 1 [0189.920] CloseHandle (hObject=0x18c) returned 1 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x0) returned 0x49 [0189.921] SetErrorMode (uMode=0x1) returned 0x0 [0189.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6)) returned 1 [0189.921] SetErrorMode (uMode=0x0) returned 0x1 [0190.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x0) returned 0x49 [0190.049] SetErrorMode (uMode=0x1) returned 0x0 [0190.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.053] SetErrorMode (uMode=0x0) returned 0x1 [0190.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x0) returned 0x49 [0190.055] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png")) returned 0 [0190.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x0) returned 0x4d [0190.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x0) returned 0x4d [0190.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x0) returned 0x4d [0190.060] SetErrorMode (uMode=0x1) returned 0x0 [0190.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.060] GetFileType (hFile=0x18c) returned 0x1 [0190.060] SetErrorMode (uMode=0x0) returned 0x1 [0190.060] GetFileType (hFile=0x18c) returned 0x1 [0190.060] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6651 [0190.060] ReadFile (in: hFile=0x18c, lpBuffer=0x27b92e0, nNumberOfBytesToRead=0x6651, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27b92e0*, lpNumberOfBytesRead=0x27e6e8*=0x6651, lpOverlapped=0x0) returned 1 [0190.062] CloseHandle (hObject=0x18c) returned 1 [0190.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x0) returned 0x4d [0190.063] SetErrorMode (uMode=0x1) returned 0x0 [0190.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651)) returned 1 [0190.063] SetErrorMode (uMode=0x0) returned 0x1 [0190.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x0) returned 0x4d [0190.163] SetErrorMode (uMode=0x1) returned 0x0 [0190.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.167] SetErrorMode (uMode=0x0) returned 0x1 [0190.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x0) returned 0x4d [0190.168] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png")) returned 0 [0190.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x0) returned 0x49 [0190.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x0) returned 0x49 [0190.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x0) returned 0x49 [0190.175] SetErrorMode (uMode=0x1) returned 0x0 [0190.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.176] GetFileType (hFile=0x18c) returned 0x1 [0190.176] SetErrorMode (uMode=0x0) returned 0x1 [0190.177] GetFileType (hFile=0x18c) returned 0x1 [0190.177] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x15a [0190.177] ReadFile (in: hFile=0x18c, lpBuffer=0x2852ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2852ef0*, lpNumberOfBytesRead=0x27e6e8*=0x15a, lpOverlapped=0x0) returned 1 [0190.178] CloseHandle (hObject=0x18c) returned 1 [0190.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x0) returned 0x49 [0190.178] SetErrorMode (uMode=0x1) returned 0x0 [0190.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a)) returned 1 [0190.179] SetErrorMode (uMode=0x0) returned 0x1 [0190.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x0) returned 0x49 [0190.312] SetErrorMode (uMode=0x1) returned 0x0 [0190.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.316] SetErrorMode (uMode=0x0) returned 0x1 [0190.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x0) returned 0x49 [0190.317] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png")) returned 0 [0190.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x0) returned 0x4c [0190.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x0) returned 0x4c [0190.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x0) returned 0x4c [0190.324] SetErrorMode (uMode=0x1) returned 0x0 [0190.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.324] GetFileType (hFile=0x18c) returned 0x1 [0190.324] SetErrorMode (uMode=0x0) returned 0x1 [0190.324] GetFileType (hFile=0x18c) returned 0x1 [0190.324] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc91 [0190.324] ReadFile (in: hFile=0x18c, lpBuffer=0x28ac568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ac568*, lpNumberOfBytesRead=0x27e6e8*=0xc91, lpOverlapped=0x0) returned 1 [0190.326] CloseHandle (hObject=0x18c) returned 1 [0190.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x0) returned 0x4c [0190.327] SetErrorMode (uMode=0x1) returned 0x0 [0190.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91)) returned 1 [0190.327] SetErrorMode (uMode=0x0) returned 0x1 [0190.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x0) returned 0x4c [0190.424] SetErrorMode (uMode=0x1) returned 0x0 [0190.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.429] SetErrorMode (uMode=0x0) returned 0x1 [0190.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x0) returned 0x4c [0190.430] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png")) returned 0 [0190.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", lpFilePart=0x0) returned 0x50 [0190.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", lpFilePart=0x0) returned 0x50 [0190.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", lpFilePart=0x0) returned 0x50 [0190.436] SetErrorMode (uMode=0x1) returned 0x0 [0190.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.438] GetFileType (hFile=0x18c) returned 0x1 [0190.438] SetErrorMode (uMode=0x0) returned 0x1 [0190.438] GetFileType (hFile=0x18c) returned 0x1 [0190.438] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfca [0190.438] ReadFile (in: hFile=0x18c, lpBuffer=0x2911388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2911388*, lpNumberOfBytesRead=0x27e6e8*=0xfca, lpOverlapped=0x0) returned 1 [0190.440] CloseHandle (hObject=0x18c) returned 1 [0190.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", lpFilePart=0x0) returned 0x50 [0190.441] SetErrorMode (uMode=0x1) returned 0x0 [0190.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfca)) returned 1 [0190.441] SetErrorMode (uMode=0x0) returned 0x1 [0190.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", lpFilePart=0x0) returned 0x50 [0190.542] SetErrorMode (uMode=0x1) returned 0x0 [0190.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.545] SetErrorMode (uMode=0x0) returned 0x1 [0190.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png", lpFilePart=0x0) returned 0x50 [0190.546] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png")) returned 0 [0190.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x0) returned 0x4d [0190.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x0) returned 0x4d [0190.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x0) returned 0x4d [0190.550] SetErrorMode (uMode=0x1) returned 0x0 [0190.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.551] GetFileType (hFile=0x18c) returned 0x1 [0190.551] SetErrorMode (uMode=0x0) returned 0x1 [0190.551] GetFileType (hFile=0x18c) returned 0x1 [0190.551] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc09 [0190.551] ReadFile (in: hFile=0x18c, lpBuffer=0x2776958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2776958*, lpNumberOfBytesRead=0x27e6e8*=0xc09, lpOverlapped=0x0) returned 1 [0190.553] CloseHandle (hObject=0x18c) returned 1 [0190.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x0) returned 0x4d [0190.554] SetErrorMode (uMode=0x1) returned 0x0 [0190.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0190.554] SetErrorMode (uMode=0x0) returned 0x1 [0190.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x0) returned 0x4d [0190.660] SetErrorMode (uMode=0x1) returned 0x0 [0190.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.665] SetErrorMode (uMode=0x0) returned 0x1 [0190.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x0) returned 0x4d [0190.666] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png")) returned 0 [0190.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", lpFilePart=0x0) returned 0x51 [0190.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", lpFilePart=0x0) returned 0x51 [0190.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", lpFilePart=0x0) returned 0x51 [0190.675] SetErrorMode (uMode=0x1) returned 0x0 [0190.675] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.676] GetFileType (hFile=0x18c) returned 0x1 [0190.676] SetErrorMode (uMode=0x0) returned 0x1 [0190.676] GetFileType (hFile=0x18c) returned 0x1 [0190.676] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc03 [0190.676] ReadFile (in: hFile=0x18c, lpBuffer=0x27da168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27da168*, lpNumberOfBytesRead=0x27e6e8*=0xc03, lpOverlapped=0x0) returned 1 [0190.678] CloseHandle (hObject=0x18c) returned 1 [0190.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", lpFilePart=0x0) returned 0x51 [0190.680] SetErrorMode (uMode=0x1) returned 0x0 [0190.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc03)) returned 1 [0190.680] SetErrorMode (uMode=0x0) returned 0x1 [0190.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", lpFilePart=0x0) returned 0x51 [0190.807] SetErrorMode (uMode=0x1) returned 0x0 [0190.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.811] SetErrorMode (uMode=0x0) returned 0x1 [0190.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png", lpFilePart=0x0) returned 0x51 [0190.812] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png")) returned 0 [0190.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x0) returned 0x4d [0190.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x0) returned 0x4d [0190.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x0) returned 0x4d [0190.820] SetErrorMode (uMode=0x1) returned 0x0 [0190.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.821] GetFileType (hFile=0x18c) returned 0x1 [0190.821] SetErrorMode (uMode=0x0) returned 0x1 [0190.821] GetFileType (hFile=0x18c) returned 0x1 [0190.821] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbd2 [0190.821] ReadFile (in: hFile=0x18c, lpBuffer=0x283dd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283dd50*, lpNumberOfBytesRead=0x27e6e8*=0xbd2, lpOverlapped=0x0) returned 1 [0190.823] CloseHandle (hObject=0x18c) returned 1 [0190.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x0) returned 0x4d [0190.824] SetErrorMode (uMode=0x1) returned 0x0 [0190.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0190.824] SetErrorMode (uMode=0x0) returned 0x1 [0190.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x0) returned 0x4d [0190.960] SetErrorMode (uMode=0x1) returned 0x0 [0190.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.963] SetErrorMode (uMode=0x0) returned 0x1 [0190.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x0) returned 0x4d [0190.965] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png")) returned 0 [0190.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x0) returned 0x4a [0190.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x0) returned 0x4a [0190.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x0) returned 0x4a [0190.970] SetErrorMode (uMode=0x1) returned 0x0 [0190.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0190.972] GetFileType (hFile=0x18c) returned 0x1 [0190.972] SetErrorMode (uMode=0x0) returned 0x1 [0190.972] GetFileType (hFile=0x18c) returned 0x1 [0190.972] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x134 [0190.972] ReadFile (in: hFile=0x18c, lpBuffer=0x28a0c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a0c48*, lpNumberOfBytesRead=0x27e6e8*=0x134, lpOverlapped=0x0) returned 1 [0190.973] CloseHandle (hObject=0x18c) returned 1 [0190.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x0) returned 0x4a [0190.974] SetErrorMode (uMode=0x1) returned 0x0 [0190.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134)) returned 1 [0190.974] SetErrorMode (uMode=0x0) returned 0x1 [0191.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x0) returned 0x4a [0191.092] SetErrorMode (uMode=0x1) returned 0x0 [0191.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.097] SetErrorMode (uMode=0x0) returned 0x1 [0191.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x0) returned 0x4a [0191.099] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png")) returned 0 [0191.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", lpFilePart=0x0) returned 0x4e [0191.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", lpFilePart=0x0) returned 0x4e [0191.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", lpFilePart=0x0) returned 0x4e [0191.107] SetErrorMode (uMode=0x1) returned 0x0 [0191.107] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.107] GetFileType (hFile=0x18c) returned 0x1 [0191.107] SetErrorMode (uMode=0x0) returned 0x1 [0191.107] GetFileType (hFile=0x18c) returned 0x1 [0191.107] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1bb [0191.107] ReadFile (in: hFile=0x18c, lpBuffer=0x28ff1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ff1e8*, lpNumberOfBytesRead=0x27e6e8*=0x1bb, lpOverlapped=0x0) returned 1 [0191.108] CloseHandle (hObject=0x18c) returned 1 [0191.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", lpFilePart=0x0) returned 0x4e [0191.109] SetErrorMode (uMode=0x1) returned 0x0 [0191.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb)) returned 1 [0191.109] SetErrorMode (uMode=0x0) returned 0x1 [0191.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", lpFilePart=0x0) returned 0x4e [0191.295] SetErrorMode (uMode=0x1) returned 0x0 [0191.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.299] SetErrorMode (uMode=0x0) returned 0x1 [0191.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png", lpFilePart=0x0) returned 0x4e [0191.301] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png")) returned 0 [0191.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5a [0191.307] SetErrorMode (uMode=0x1) returned 0x0 [0191.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0191.308] GetFileType (hFile=0x18c) returned 0x1 [0191.308] SetErrorMode (uMode=0x0) returned 0x1 [0191.308] GetFileType (hFile=0x18c) returned 0x1 [0191.310] WriteFile (in: hFile=0x18c, lpBuffer=0x276f230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x276f230*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0191.311] WriteFile (in: hFile=0x18c, lpBuffer=0x276f230*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x276f230*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0191.312] CloseHandle (hObject=0x18c) returned 1 [0191.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0191.312] SetErrorMode (uMode=0x1) returned 0x0 [0191.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0191.315] GetFileType (hFile=0x18c) returned 0x1 [0191.315] SetErrorMode (uMode=0x0) returned 0x1 [0191.315] GetFileType (hFile=0x18c) returned 0x1 [0191.316] WriteFile (in: hFile=0x18c, lpBuffer=0x2785330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x2785330*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0191.318] CloseHandle (hObject=0x18c) returned 1 [0191.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x3e [0191.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x3e [0191.319] SetErrorMode (uMode=0x1) returned 0x0 [0191.319] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0191.319] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.319] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0191.319] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0191.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0191.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0191.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0191.320] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0191.320] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0191.320] SetErrorMode (uMode=0x0) returned 0x1 [0191.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x3e [0191.320] SetErrorMode (uMode=0x1) returned 0x0 [0191.320] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0191.321] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0191.321] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0191.321] SetErrorMode (uMode=0x0) returned 0x1 [0191.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0191.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0191.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0191.322] SetErrorMode (uMode=0x1) returned 0x0 [0191.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.323] GetFileType (hFile=0x18c) returned 0x1 [0191.323] SetErrorMode (uMode=0x0) returned 0x1 [0191.323] GetFileType (hFile=0x18c) returned 0x1 [0191.323] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x406b [0191.323] ReadFile (in: hFile=0x18c, lpBuffer=0x278d710, nNumberOfBytesToRead=0x406b, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x278d710*, lpNumberOfBytesRead=0x27e788*=0x406b, lpOverlapped=0x0) returned 1 [0191.325] CloseHandle (hObject=0x18c) returned 1 [0191.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0191.326] SetErrorMode (uMode=0x1) returned 0x0 [0191.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b)) returned 1 [0191.326] SetErrorMode (uMode=0x0) returned 0x1 [0191.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0191.426] SetErrorMode (uMode=0x1) returned 0x0 [0191.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.431] SetErrorMode (uMode=0x0) returned 0x1 [0191.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0191.432] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png")) returned 0 [0191.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0191.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0191.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0191.438] SetErrorMode (uMode=0x1) returned 0x0 [0191.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.439] GetFileType (hFile=0x18c) returned 0x1 [0191.439] SetErrorMode (uMode=0x0) returned 0x1 [0191.439] GetFileType (hFile=0x18c) returned 0x1 [0191.439] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1ae9 [0191.439] ReadFile (in: hFile=0x18c, lpBuffer=0x280c148, nNumberOfBytesToRead=0x1ae9, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x280c148*, lpNumberOfBytesRead=0x27e788*=0x1ae9, lpOverlapped=0x0) returned 1 [0191.440] CloseHandle (hObject=0x18c) returned 1 [0191.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0191.441] SetErrorMode (uMode=0x1) returned 0x0 [0191.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9)) returned 1 [0191.441] SetErrorMode (uMode=0x0) returned 0x1 [0191.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0191.538] SetErrorMode (uMode=0x1) returned 0x0 [0191.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.548] SetErrorMode (uMode=0x0) returned 0x1 [0191.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0191.551] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png")) returned 0 [0191.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0191.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0191.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0191.559] SetErrorMode (uMode=0x1) returned 0x0 [0191.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.560] GetFileType (hFile=0x18c) returned 0x1 [0191.560] SetErrorMode (uMode=0x0) returned 0x1 [0191.560] GetFileType (hFile=0x18c) returned 0x1 [0191.560] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x172a [0191.560] ReadFile (in: hFile=0x18c, lpBuffer=0x2872e78, nNumberOfBytesToRead=0x172a, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2872e78*, lpNumberOfBytesRead=0x27e788*=0x172a, lpOverlapped=0x0) returned 1 [0191.562] CloseHandle (hObject=0x18c) returned 1 [0191.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0191.563] SetErrorMode (uMode=0x1) returned 0x0 [0191.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a)) returned 1 [0191.563] SetErrorMode (uMode=0x0) returned 0x1 [0191.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0191.683] SetErrorMode (uMode=0x1) returned 0x0 [0191.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.687] SetErrorMode (uMode=0x0) returned 0x1 [0191.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0191.688] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png")) returned 0 [0191.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0191.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0191.694] SetErrorMode (uMode=0x1) returned 0x0 [0191.694] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0191.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0191.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1 [0191.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0191.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0191.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0191.696] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0191.696] SetErrorMode (uMode=0x0) returned 0x1 [0191.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0191.696] SetErrorMode (uMode=0x1) returned 0x0 [0191.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0191.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0191.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1 [0191.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0191.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0191.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0191.697] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0191.697] SetErrorMode (uMode=0x0) returned 0x1 [0191.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", lpFilePart=0x0) returned 0x52 [0191.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", lpFilePart=0x0) returned 0x52 [0191.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", lpFilePart=0x0) returned 0x52 [0191.698] SetErrorMode (uMode=0x1) returned 0x0 [0191.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.698] GetFileType (hFile=0x18c) returned 0x1 [0191.698] SetErrorMode (uMode=0x0) returned 0x1 [0191.698] GetFileType (hFile=0x18c) returned 0x1 [0191.698] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1792 [0191.698] ReadFile (in: hFile=0x18c, lpBuffer=0x28dd3c0, nNumberOfBytesToRead=0x1792, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28dd3c0*, lpNumberOfBytesRead=0x27e6e8*=0x1792, lpOverlapped=0x0) returned 1 [0191.700] CloseHandle (hObject=0x18c) returned 1 [0191.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", lpFilePart=0x0) returned 0x52 [0191.701] SetErrorMode (uMode=0x1) returned 0x0 [0191.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792)) returned 1 [0191.701] SetErrorMode (uMode=0x0) returned 0x1 [0191.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", lpFilePart=0x0) returned 0x52 [0191.819] SetErrorMode (uMode=0x1) returned 0x0 [0191.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.823] SetErrorMode (uMode=0x0) returned 0x1 [0191.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html", lpFilePart=0x0) returned 0x52 [0191.824] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html")) returned 0 [0191.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0191.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0191.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0191.831] SetErrorMode (uMode=0x1) returned 0x0 [0191.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.832] GetFileType (hFile=0x18c) returned 0x1 [0191.832] SetErrorMode (uMode=0x0) returned 0x1 [0191.832] GetFileType (hFile=0x18c) returned 0x1 [0191.832] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7a6 [0191.832] ReadFile (in: hFile=0x18c, lpBuffer=0x27469f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27469f8*, lpNumberOfBytesRead=0x27e6e8*=0x7a6, lpOverlapped=0x0) returned 1 [0191.833] CloseHandle (hObject=0x18c) returned 1 [0191.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0191.834] SetErrorMode (uMode=0x1) returned 0x0 [0191.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6)) returned 1 [0191.834] SetErrorMode (uMode=0x0) returned 0x1 [0191.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0191.950] SetErrorMode (uMode=0x1) returned 0x0 [0191.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.954] SetErrorMode (uMode=0x0) returned 0x1 [0191.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0191.956] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml")) returned 0 [0191.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0191.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0191.962] SetErrorMode (uMode=0x1) returned 0x0 [0191.962] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0191.962] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.962] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1 [0191.962] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0 [0191.962] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0191.963] SetErrorMode (uMode=0x0) returned 0x1 [0191.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0191.963] SetErrorMode (uMode=0x1) returned 0x0 [0191.963] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0191.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1 [0191.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0 [0191.963] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0191.964] SetErrorMode (uMode=0x0) returned 0x1 [0191.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x0) returned 0x55 [0191.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x0) returned 0x55 [0191.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x0) returned 0x55 [0191.964] SetErrorMode (uMode=0x1) returned 0x0 [0191.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0191.964] GetFileType (hFile=0x18c) returned 0x1 [0191.964] SetErrorMode (uMode=0x0) returned 0x1 [0191.964] GetFileType (hFile=0x18c) returned 0x1 [0191.964] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x4c2e [0191.965] ReadFile (in: hFile=0x18c, lpBuffer=0x27a9990, nNumberOfBytesToRead=0x4c2e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27a9990*, lpNumberOfBytesRead=0x27e648*=0x4c2e, lpOverlapped=0x0) returned 1 [0191.966] CloseHandle (hObject=0x18c) returned 1 [0191.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x0) returned 0x55 [0191.967] SetErrorMode (uMode=0x1) returned 0x0 [0191.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e)) returned 1 [0191.967] SetErrorMode (uMode=0x0) returned 0x1 [0192.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x0) returned 0x55 [0192.074] SetErrorMode (uMode=0x1) returned 0x0 [0192.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.079] SetErrorMode (uMode=0x0) returned 0x1 [0192.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x0) returned 0x55 [0192.080] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css")) returned 0 [0192.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x62 [0192.086] SetErrorMode (uMode=0x1) returned 0x0 [0192.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0192.087] GetFileType (hFile=0x18c) returned 0x1 [0192.087] SetErrorMode (uMode=0x0) returned 0x1 [0192.087] GetFileType (hFile=0x18c) returned 0x1 [0192.089] WriteFile (in: hFile=0x18c, lpBuffer=0x283e8c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x283e8c0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0192.090] WriteFile (in: hFile=0x18c, lpBuffer=0x283e8c0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x283e8c0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0192.090] CloseHandle (hObject=0x18c) returned 1 [0192.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0192.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0192.091] SetErrorMode (uMode=0x1) returned 0x0 [0192.091] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1 [0192.092] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0 [0192.092] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0192.093] SetErrorMode (uMode=0x0) returned 0x1 [0192.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0192.093] SetErrorMode (uMode=0x1) returned 0x0 [0192.093] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0192.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1 [0192.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0192.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0192.093] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0192.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1 [0192.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0 [0192.094] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0192.094] SetErrorMode (uMode=0x0) returned 0x1 [0192.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", lpFilePart=0x0) returned 0x53 [0192.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", lpFilePart=0x0) returned 0x53 [0192.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", lpFilePart=0x0) returned 0x53 [0192.094] SetErrorMode (uMode=0x1) returned 0x0 [0192.095] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.095] GetFileType (hFile=0x18c) returned 0x1 [0192.095] SetErrorMode (uMode=0x0) returned 0x1 [0192.095] GetFileType (hFile=0x18c) returned 0x1 [0192.095] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x104de [0192.096] ReadFile (in: hFile=0x18c, lpBuffer=0x2846b00, nNumberOfBytesToRead=0x104de, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2846b00*, lpNumberOfBytesRead=0x27e648*=0x104de, lpOverlapped=0x0) returned 1 [0192.098] CloseHandle (hObject=0x18c) returned 1 [0192.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", lpFilePart=0x0) returned 0x53 [0192.098] SetErrorMode (uMode=0x1) returned 0x0 [0192.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de)) returned 1 [0192.099] SetErrorMode (uMode=0x0) returned 0x1 [0192.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", lpFilePart=0x0) returned 0x53 [0192.223] SetErrorMode (uMode=0x1) returned 0x0 [0192.223] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.227] SetErrorMode (uMode=0x0) returned 0x1 [0192.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js", lpFilePart=0x0) returned 0x53 [0192.228] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js")) returned 0 [0192.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", lpFilePart=0x0) returned 0x4f [0192.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", lpFilePart=0x0) returned 0x4f [0192.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", lpFilePart=0x0) returned 0x4f [0192.233] SetErrorMode (uMode=0x1) returned 0x0 [0192.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.233] GetFileType (hFile=0x18c) returned 0x1 [0192.233] SetErrorMode (uMode=0x0) returned 0x1 [0192.233] GetFileType (hFile=0x18c) returned 0x1 [0192.233] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2d4 [0192.233] ReadFile (in: hFile=0x18c, lpBuffer=0x2901708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2901708*, lpNumberOfBytesRead=0x27e648*=0x2d4, lpOverlapped=0x0) returned 1 [0192.235] CloseHandle (hObject=0x18c) returned 1 [0192.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", lpFilePart=0x0) returned 0x4f [0192.235] SetErrorMode (uMode=0x1) returned 0x0 [0192.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4)) returned 1 [0192.236] SetErrorMode (uMode=0x0) returned 0x1 [0192.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", lpFilePart=0x0) returned 0x4f [0192.333] SetErrorMode (uMode=0x1) returned 0x0 [0192.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.337] SetErrorMode (uMode=0x0) returned 0x1 [0192.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js", lpFilePart=0x0) returned 0x4f [0192.338] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js")) returned 0 [0192.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x52 [0192.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x52 [0192.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x52 [0192.344] SetErrorMode (uMode=0x1) returned 0x0 [0192.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.345] GetFileType (hFile=0x18c) returned 0x1 [0192.345] SetErrorMode (uMode=0x0) returned 0x1 [0192.346] GetFileType (hFile=0x18c) returned 0x1 [0192.346] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x161e [0192.346] ReadFile (in: hFile=0x18c, lpBuffer=0x2750d50, nNumberOfBytesToRead=0x161e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2750d50*, lpNumberOfBytesRead=0x27e648*=0x161e, lpOverlapped=0x0) returned 1 [0192.347] CloseHandle (hObject=0x18c) returned 1 [0192.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x52 [0192.348] SetErrorMode (uMode=0x1) returned 0x0 [0192.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e)) returned 1 [0192.348] SetErrorMode (uMode=0x0) returned 0x1 [0192.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x52 [0192.464] SetErrorMode (uMode=0x1) returned 0x0 [0192.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.469] SetErrorMode (uMode=0x0) returned 0x1 [0192.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x52 [0192.470] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js")) returned 0 [0192.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5b [0192.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5b [0192.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5b [0192.476] SetErrorMode (uMode=0x1) returned 0x0 [0192.476] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.477] GetFileType (hFile=0x18c) returned 0x1 [0192.477] SetErrorMode (uMode=0x0) returned 0x1 [0192.477] GetFileType (hFile=0x18c) returned 0x1 [0192.477] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2bf4 [0192.477] ReadFile (in: hFile=0x18c, lpBuffer=0x27b9328, nNumberOfBytesToRead=0x2bf4, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b9328*, lpNumberOfBytesRead=0x27e648*=0x2bf4, lpOverlapped=0x0) returned 1 [0192.483] CloseHandle (hObject=0x18c) returned 1 [0192.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5b [0192.484] SetErrorMode (uMode=0x1) returned 0x0 [0192.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4)) returned 1 [0192.484] SetErrorMode (uMode=0x0) returned 0x1 [0192.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5b [0192.627] SetErrorMode (uMode=0x1) returned 0x0 [0192.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.633] SetErrorMode (uMode=0x0) returned 0x1 [0192.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5b [0192.634] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js")) returned 0 [0192.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", lpFilePart=0x0) returned 0x52 [0192.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", lpFilePart=0x0) returned 0x52 [0192.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", lpFilePart=0x0) returned 0x52 [0192.642] SetErrorMode (uMode=0x1) returned 0x0 [0192.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.643] GetFileType (hFile=0x18c) returned 0x1 [0192.643] SetErrorMode (uMode=0x0) returned 0x1 [0192.643] GetFileType (hFile=0x18c) returned 0x1 [0192.643] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1e28 [0192.643] ReadFile (in: hFile=0x18c, lpBuffer=0x282b558, nNumberOfBytesToRead=0x1e28, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x282b558*, lpNumberOfBytesRead=0x27e648*=0x1e28, lpOverlapped=0x0) returned 1 [0192.645] CloseHandle (hObject=0x18c) returned 1 [0192.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", lpFilePart=0x0) returned 0x52 [0192.647] SetErrorMode (uMode=0x1) returned 0x0 [0192.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28)) returned 1 [0192.647] SetErrorMode (uMode=0x0) returned 0x1 [0192.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", lpFilePart=0x0) returned 0x52 [0192.769] SetErrorMode (uMode=0x1) returned 0x0 [0192.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.773] SetErrorMode (uMode=0x0) returned 0x1 [0192.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js", lpFilePart=0x0) returned 0x52 [0192.775] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js")) returned 0 [0192.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0192.781] SetErrorMode (uMode=0x1) returned 0x0 [0192.781] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0192.783] GetFileType (hFile=0x18c) returned 0x1 [0192.783] SetErrorMode (uMode=0x0) returned 0x1 [0192.783] GetFileType (hFile=0x18c) returned 0x1 [0192.785] WriteFile (in: hFile=0x18c, lpBuffer=0x28a6040*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28a6040*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0192.786] WriteFile (in: hFile=0x18c, lpBuffer=0x28a6040*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28a6040*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0192.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0192.787] SetErrorMode (uMode=0x1) returned 0x0 [0192.787] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0192.788] GetFileType (hFile=0x18c) returned 0x1 [0192.788] SetErrorMode (uMode=0x0) returned 0x1 [0192.788] GetFileType (hFile=0x18c) returned 0x1 [0192.789] WriteFile (in: hFile=0x18c, lpBuffer=0x28bc170*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28bc170*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0192.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", lpFilePart=0x0) returned 0x45 [0192.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", lpFilePart=0x0) returned 0x45 [0192.791] SetErrorMode (uMode=0x1) returned 0x0 [0192.792] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6156d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6156d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6c351c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb6c351c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5c9417, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5c9417, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5ef576, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5ef576, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6e967c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1 [0192.794] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb76c32c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb76c32c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb79248b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb79248b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d3db0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6d3db0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7461cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7461cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f9f0f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6f9f0f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1 [0192.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1 [0192.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0192.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1 [0192.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1 [0192.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0 [0192.796] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0192.797] SetErrorMode (uMode=0x0) returned 0x1 [0192.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", lpFilePart=0x0) returned 0x45 [0192.797] SetErrorMode (uMode=0x1) returned 0x0 [0192.797] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0192.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0192.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1 [0192.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1 [0192.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6156d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6156d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6c351c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb6c351c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5c9417, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5c9417, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5ef576, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5ef576, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6e967c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb76c32c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb76c32c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb79248b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb79248b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d3db0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6d3db0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1 [0192.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7461cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7461cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1 [0192.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f9f0f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6f9f0f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1 [0192.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1 [0192.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0192.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1 [0192.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1 [0192.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0 [0192.800] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0192.801] SetErrorMode (uMode=0x0) returned 0x1 [0192.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x55 [0192.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x55 [0192.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x55 [0192.802] SetErrorMode (uMode=0x1) returned 0x0 [0192.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.803] GetFileType (hFile=0x18c) returned 0x1 [0192.803] SetErrorMode (uMode=0x0) returned 0x1 [0192.803] GetFileType (hFile=0x18c) returned 0x1 [0192.803] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3129 [0192.803] ReadFile (in: hFile=0x18c, lpBuffer=0x28c5a98, nNumberOfBytesToRead=0x3129, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c5a98*, lpNumberOfBytesRead=0x27e6e8*=0x3129, lpOverlapped=0x0) returned 1 [0192.805] CloseHandle (hObject=0x18c) returned 1 [0192.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x55 [0192.806] SetErrorMode (uMode=0x1) returned 0x0 [0192.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129)) returned 1 [0192.806] SetErrorMode (uMode=0x0) returned 0x1 [0192.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x55 [0192.929] SetErrorMode (uMode=0x1) returned 0x0 [0192.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.934] SetErrorMode (uMode=0x0) returned 0x1 [0192.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x55 [0192.935] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png")) returned 0 [0192.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x0) returned 0x52 [0192.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x0) returned 0x52 [0192.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x0) returned 0x52 [0192.942] SetErrorMode (uMode=0x1) returned 0x0 [0192.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0192.943] GetFileType (hFile=0x18c) returned 0x1 [0192.943] SetErrorMode (uMode=0x0) returned 0x1 [0192.943] GetFileType (hFile=0x18c) returned 0x1 [0192.943] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x200 [0192.943] ReadFile (in: hFile=0x18c, lpBuffer=0x2739ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2739ab8*, lpNumberOfBytesRead=0x27e6e8*=0x200, lpOverlapped=0x0) returned 1 [0192.944] CloseHandle (hObject=0x18c) returned 1 [0192.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x0) returned 0x52 [0192.945] SetErrorMode (uMode=0x1) returned 0x0 [0192.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0192.945] SetErrorMode (uMode=0x0) returned 0x1 [0193.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x0) returned 0x52 [0193.045] SetErrorMode (uMode=0x1) returned 0x0 [0193.045] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.049] SetErrorMode (uMode=0x0) returned 0x1 [0193.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x0) returned 0x52 [0193.050] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png")) returned 0 [0193.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x0) returned 0x52 [0193.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x0) returned 0x52 [0193.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x0) returned 0x52 [0193.057] SetErrorMode (uMode=0x1) returned 0x0 [0193.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.058] GetFileType (hFile=0x18c) returned 0x1 [0193.058] SetErrorMode (uMode=0x0) returned 0x1 [0193.058] GetFileType (hFile=0x18c) returned 0x1 [0193.058] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1a4 [0193.058] ReadFile (in: hFile=0x18c, lpBuffer=0x2796148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2796148*, lpNumberOfBytesRead=0x27e6e8*=0x1a4, lpOverlapped=0x0) returned 1 [0193.059] CloseHandle (hObject=0x18c) returned 1 [0193.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x0) returned 0x52 [0193.060] SetErrorMode (uMode=0x1) returned 0x0 [0193.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4)) returned 1 [0193.060] SetErrorMode (uMode=0x0) returned 0x1 [0193.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x0) returned 0x52 [0193.199] SetErrorMode (uMode=0x1) returned 0x0 [0193.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.204] SetErrorMode (uMode=0x0) returned 0x1 [0193.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x0) returned 0x52 [0193.205] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png")) returned 0 [0193.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x0) returned 0x50 [0193.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x0) returned 0x50 [0193.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x0) returned 0x50 [0193.211] SetErrorMode (uMode=0x1) returned 0x0 [0193.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.212] GetFileType (hFile=0x18c) returned 0x1 [0193.212] SetErrorMode (uMode=0x0) returned 0x1 [0193.212] GetFileType (hFile=0x18c) returned 0x1 [0193.212] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xe4 [0193.212] ReadFile (in: hFile=0x18c, lpBuffer=0x27f5350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27f5350*, lpNumberOfBytesRead=0x27e6e8*=0xe4, lpOverlapped=0x0) returned 1 [0193.213] CloseHandle (hObject=0x18c) returned 1 [0193.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x0) returned 0x50 [0193.214] SetErrorMode (uMode=0x1) returned 0x0 [0193.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0193.214] SetErrorMode (uMode=0x0) returned 0x1 [0193.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x0) returned 0x50 [0193.327] SetErrorMode (uMode=0x1) returned 0x0 [0193.327] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.334] SetErrorMode (uMode=0x0) returned 0x1 [0193.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x0) returned 0x50 [0193.336] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png")) returned 0 [0193.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", lpFilePart=0x0) returned 0x55 [0193.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", lpFilePart=0x0) returned 0x55 [0193.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", lpFilePart=0x0) returned 0x55 [0193.342] SetErrorMode (uMode=0x1) returned 0x0 [0193.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.342] GetFileType (hFile=0x18c) returned 0x1 [0193.343] SetErrorMode (uMode=0x0) returned 0x1 [0193.343] GetFileType (hFile=0x18c) returned 0x1 [0193.343] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x406b [0193.343] ReadFile (in: hFile=0x18c, lpBuffer=0x2853fc0, nNumberOfBytesToRead=0x406b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2853fc0*, lpNumberOfBytesRead=0x27e6e8*=0x406b, lpOverlapped=0x0) returned 1 [0193.344] CloseHandle (hObject=0x18c) returned 1 [0193.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", lpFilePart=0x0) returned 0x55 [0193.347] SetErrorMode (uMode=0x1) returned 0x0 [0193.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6156d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6156d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b)) returned 1 [0193.347] SetErrorMode (uMode=0x0) returned 0x1 [0193.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", lpFilePart=0x0) returned 0x55 [0193.447] SetErrorMode (uMode=0x1) returned 0x0 [0193.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.451] SetErrorMode (uMode=0x0) returned 0x1 [0193.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png", lpFilePart=0x0) returned 0x55 [0193.452] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png")) returned 0 [0193.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", lpFilePart=0x0) returned 0x59 [0193.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", lpFilePart=0x0) returned 0x59 [0193.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", lpFilePart=0x0) returned 0x59 [0193.460] SetErrorMode (uMode=0x1) returned 0x0 [0193.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.460] GetFileType (hFile=0x18c) returned 0x1 [0193.460] SetErrorMode (uMode=0x0) returned 0x1 [0193.460] GetFileType (hFile=0x18c) returned 0x1 [0193.460] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xaa66 [0193.460] ReadFile (in: hFile=0x18c, lpBuffer=0x28d1a30, nNumberOfBytesToRead=0xaa66, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d1a30*, lpNumberOfBytesRead=0x27e6e8*=0xaa66, lpOverlapped=0x0) returned 1 [0193.464] CloseHandle (hObject=0x18c) returned 1 [0193.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", lpFilePart=0x0) returned 0x59 [0193.465] SetErrorMode (uMode=0x1) returned 0x0 [0193.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6c351c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb6c351c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa66)) returned 1 [0193.465] SetErrorMode (uMode=0x0) returned 0x1 [0193.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", lpFilePart=0x0) returned 0x59 [0193.584] SetErrorMode (uMode=0x1) returned 0x0 [0193.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.588] SetErrorMode (uMode=0x0) returned 0x1 [0193.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png", lpFilePart=0x0) returned 0x59 [0193.589] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png")) returned 0 [0193.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", lpFilePart=0x0) returned 0x59 [0193.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", lpFilePart=0x0) returned 0x59 [0193.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", lpFilePart=0x0) returned 0x59 [0193.597] SetErrorMode (uMode=0x1) returned 0x0 [0193.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.598] GetFileType (hFile=0x18c) returned 0x1 [0193.598] SetErrorMode (uMode=0x0) returned 0x1 [0193.598] GetFileType (hFile=0x18c) returned 0x1 [0193.598] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd31a [0193.599] ReadFile (in: hFile=0x18c, lpBuffer=0x276aee0, nNumberOfBytesToRead=0xd31a, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276aee0*, lpNumberOfBytesRead=0x27e6e8*=0xd31a, lpOverlapped=0x0) returned 1 [0193.600] CloseHandle (hObject=0x18c) returned 1 [0193.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", lpFilePart=0x0) returned 0x59 [0193.601] SetErrorMode (uMode=0x1) returned 0x0 [0193.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5c9417, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5c9417, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd31a)) returned 1 [0193.601] SetErrorMode (uMode=0x0) returned 0x1 [0193.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", lpFilePart=0x0) returned 0x59 [0193.697] SetErrorMode (uMode=0x1) returned 0x0 [0193.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.702] SetErrorMode (uMode=0x0) returned 0x1 [0193.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png", lpFilePart=0x0) returned 0x59 [0193.704] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png")) returned 0 [0193.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", lpFilePart=0x0) returned 0x59 [0193.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", lpFilePart=0x0) returned 0x59 [0193.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", lpFilePart=0x0) returned 0x59 [0193.710] SetErrorMode (uMode=0x1) returned 0x0 [0193.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.710] GetFileType (hFile=0x18c) returned 0x1 [0193.710] SetErrorMode (uMode=0x0) returned 0x1 [0193.710] GetFileType (hFile=0x18c) returned 0x1 [0193.710] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xf240 [0193.710] ReadFile (in: hFile=0x18c, lpBuffer=0x280cdc0, nNumberOfBytesToRead=0xf240, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x280cdc0*, lpNumberOfBytesRead=0x27e6e8*=0xf240, lpOverlapped=0x0) returned 1 [0193.713] CloseHandle (hObject=0x18c) returned 1 [0193.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", lpFilePart=0x0) returned 0x59 [0193.713] SetErrorMode (uMode=0x1) returned 0x0 [0193.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5ef576, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5ef576, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6e967c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf240)) returned 1 [0193.713] SetErrorMode (uMode=0x0) returned 0x1 [0193.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", lpFilePart=0x0) returned 0x59 [0193.831] SetErrorMode (uMode=0x1) returned 0x0 [0193.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.841] SetErrorMode (uMode=0x0) returned 0x1 [0193.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png", lpFilePart=0x0) returned 0x59 [0193.842] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png")) returned 0 [0193.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", lpFilePart=0x0) returned 0x5a [0193.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", lpFilePart=0x0) returned 0x5a [0193.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", lpFilePart=0x0) returned 0x5a [0193.850] SetErrorMode (uMode=0x1) returned 0x0 [0193.850] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.851] GetFileType (hFile=0x18c) returned 0x1 [0193.851] SetErrorMode (uMode=0x0) returned 0x1 [0193.851] GetFileType (hFile=0x18c) returned 0x1 [0193.852] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb93 [0193.852] ReadFile (in: hFile=0x18c, lpBuffer=0x28b8aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b8aa0*, lpNumberOfBytesRead=0x27e6e8*=0xb93, lpOverlapped=0x0) returned 1 [0193.853] CloseHandle (hObject=0x18c) returned 1 [0193.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", lpFilePart=0x0) returned 0x5a [0193.854] SetErrorMode (uMode=0x1) returned 0x0 [0193.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb76c32c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb76c32c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb93)) returned 1 [0193.854] SetErrorMode (uMode=0x0) returned 0x1 [0193.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", lpFilePart=0x0) returned 0x5a [0193.949] SetErrorMode (uMode=0x1) returned 0x0 [0193.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.953] SetErrorMode (uMode=0x0) returned 0x1 [0193.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png", lpFilePart=0x0) returned 0x5a [0193.954] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png")) returned 0 [0193.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", lpFilePart=0x0) returned 0x5c [0193.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", lpFilePart=0x0) returned 0x5c [0193.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", lpFilePart=0x0) returned 0x5c [0193.961] SetErrorMode (uMode=0x1) returned 0x0 [0193.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0193.961] GetFileType (hFile=0x18c) returned 0x1 [0193.961] SetErrorMode (uMode=0x0) returned 0x1 [0193.961] GetFileType (hFile=0x18c) returned 0x1 [0193.961] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb45 [0193.961] ReadFile (in: hFile=0x18c, lpBuffer=0x290ddb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x290ddb8*, lpNumberOfBytesRead=0x27e6e8*=0xb45, lpOverlapped=0x0) returned 1 [0193.973] CloseHandle (hObject=0x18c) returned 1 [0193.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", lpFilePart=0x0) returned 0x5c [0193.973] SetErrorMode (uMode=0x1) returned 0x0 [0193.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb79248b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb79248b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb45)) returned 1 [0193.974] SetErrorMode (uMode=0x0) returned 0x1 [0194.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", lpFilePart=0x0) returned 0x5c [0194.074] SetErrorMode (uMode=0x1) returned 0x0 [0194.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.078] SetErrorMode (uMode=0x0) returned 0x1 [0194.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png", lpFilePart=0x0) returned 0x5c [0194.079] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png")) returned 0 [0194.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", lpFilePart=0x0) returned 0x5b [0194.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", lpFilePart=0x0) returned 0x5b [0194.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", lpFilePart=0x0) returned 0x5b [0194.087] SetErrorMode (uMode=0x1) returned 0x0 [0194.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.089] GetFileType (hFile=0x18c) returned 0x1 [0194.089] SetErrorMode (uMode=0x0) returned 0x1 [0194.089] GetFileType (hFile=0x18c) returned 0x1 [0194.089] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xba3 [0194.089] ReadFile (in: hFile=0x18c, lpBuffer=0x2771640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2771640*, lpNumberOfBytesRead=0x27e6e8*=0xba3, lpOverlapped=0x0) returned 1 [0194.090] CloseHandle (hObject=0x18c) returned 1 [0194.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", lpFilePart=0x0) returned 0x5b [0194.091] SetErrorMode (uMode=0x1) returned 0x0 [0194.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3)) returned 1 [0194.092] SetErrorMode (uMode=0x0) returned 0x1 [0194.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", lpFilePart=0x0) returned 0x5b [0194.230] SetErrorMode (uMode=0x1) returned 0x0 [0194.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.234] SetErrorMode (uMode=0x0) returned 0x1 [0194.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png", lpFilePart=0x0) returned 0x5b [0194.236] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png")) returned 0 [0194.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", lpFilePart=0x0) returned 0x55 [0194.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", lpFilePart=0x0) returned 0x55 [0194.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", lpFilePart=0x0) returned 0x55 [0194.241] SetErrorMode (uMode=0x1) returned 0x0 [0194.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.241] GetFileType (hFile=0x18c) returned 0x1 [0194.241] SetErrorMode (uMode=0x0) returned 0x1 [0194.241] GetFileType (hFile=0x18c) returned 0x1 [0194.241] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x304 [0194.241] ReadFile (in: hFile=0x18c, lpBuffer=0x27d4838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d4838*, lpNumberOfBytesRead=0x27e6e8*=0x304, lpOverlapped=0x0) returned 1 [0194.243] CloseHandle (hObject=0x18c) returned 1 [0194.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", lpFilePart=0x0) returned 0x55 [0194.244] SetErrorMode (uMode=0x1) returned 0x0 [0194.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d3db0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6d3db0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x304)) returned 1 [0194.244] SetErrorMode (uMode=0x0) returned 0x1 [0194.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", lpFilePart=0x0) returned 0x55 [0194.360] SetErrorMode (uMode=0x1) returned 0x0 [0194.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.365] SetErrorMode (uMode=0x0) returned 0x1 [0194.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png", lpFilePart=0x0) returned 0x55 [0194.366] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png")) returned 0 [0194.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", lpFilePart=0x0) returned 0x55 [0194.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", lpFilePart=0x0) returned 0x55 [0194.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", lpFilePart=0x0) returned 0x55 [0194.373] SetErrorMode (uMode=0x1) returned 0x0 [0194.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.375] GetFileType (hFile=0x18c) returned 0x1 [0194.375] SetErrorMode (uMode=0x0) returned 0x1 [0194.375] GetFileType (hFile=0x18c) returned 0x1 [0194.375] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b8 [0194.375] ReadFile (in: hFile=0x18c, lpBuffer=0x2833ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2833ca8*, lpNumberOfBytesRead=0x27e6e8*=0x2b8, lpOverlapped=0x0) returned 1 [0194.377] CloseHandle (hObject=0x18c) returned 1 [0194.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", lpFilePart=0x0) returned 0x55 [0194.378] SetErrorMode (uMode=0x1) returned 0x0 [0194.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0194.378] SetErrorMode (uMode=0x0) returned 0x1 [0194.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", lpFilePart=0x0) returned 0x55 [0194.474] SetErrorMode (uMode=0x1) returned 0x0 [0194.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.478] SetErrorMode (uMode=0x0) returned 0x1 [0194.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png", lpFilePart=0x0) returned 0x55 [0194.479] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png")) returned 0 [0194.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", lpFilePart=0x0) returned 0x53 [0194.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", lpFilePart=0x0) returned 0x53 [0194.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", lpFilePart=0x0) returned 0x53 [0194.486] SetErrorMode (uMode=0x1) returned 0x0 [0194.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.486] GetFileType (hFile=0x18c) returned 0x1 [0194.486] SetErrorMode (uMode=0x0) returned 0x1 [0194.486] GetFileType (hFile=0x18c) returned 0x1 [0194.486] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1dd [0194.486] ReadFile (in: hFile=0x18c, lpBuffer=0x2893668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2893668*, lpNumberOfBytesRead=0x27e6e8*=0x1dd, lpOverlapped=0x0) returned 1 [0194.487] CloseHandle (hObject=0x18c) returned 1 [0194.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", lpFilePart=0x0) returned 0x53 [0194.488] SetErrorMode (uMode=0x1) returned 0x0 [0194.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1dd)) returned 1 [0194.488] SetErrorMode (uMode=0x0) returned 0x1 [0194.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", lpFilePart=0x0) returned 0x53 [0194.607] SetErrorMode (uMode=0x1) returned 0x0 [0194.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.611] SetErrorMode (uMode=0x0) returned 0x1 [0194.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png", lpFilePart=0x0) returned 0x53 [0194.612] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png")) returned 0 [0194.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", lpFilePart=0x0) returned 0x54 [0194.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", lpFilePart=0x0) returned 0x54 [0194.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", lpFilePart=0x0) returned 0x54 [0194.616] SetErrorMode (uMode=0x1) returned 0x0 [0194.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.617] GetFileType (hFile=0x18c) returned 0x1 [0194.617] SetErrorMode (uMode=0x0) returned 0x1 [0194.617] GetFileType (hFile=0x18c) returned 0x1 [0194.617] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcc4 [0194.617] ReadFile (in: hFile=0x18c, lpBuffer=0x28f3508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f3508*, lpNumberOfBytesRead=0x27e6e8*=0xcc4, lpOverlapped=0x0) returned 1 [0194.619] CloseHandle (hObject=0x18c) returned 1 [0194.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", lpFilePart=0x0) returned 0x54 [0194.620] SetErrorMode (uMode=0x1) returned 0x0 [0194.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7461cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7461cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcc4)) returned 1 [0194.620] SetErrorMode (uMode=0x0) returned 0x1 [0194.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", lpFilePart=0x0) returned 0x54 [0194.719] SetErrorMode (uMode=0x1) returned 0x0 [0194.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.723] SetErrorMode (uMode=0x0) returned 0x1 [0194.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png", lpFilePart=0x0) returned 0x54 [0194.724] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png")) returned 0 [0194.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", lpFilePart=0x0) returned 0x54 [0194.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", lpFilePart=0x0) returned 0x54 [0194.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", lpFilePart=0x0) returned 0x54 [0194.734] SetErrorMode (uMode=0x1) returned 0x0 [0194.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.734] GetFileType (hFile=0x18c) returned 0x1 [0194.734] SetErrorMode (uMode=0x0) returned 0x1 [0194.734] GetFileType (hFile=0x18c) returned 0x1 [0194.734] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd64 [0194.734] ReadFile (in: hFile=0x18c, lpBuffer=0x27582a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27582a8*, lpNumberOfBytesRead=0x27e6e8*=0xd64, lpOverlapped=0x0) returned 1 [0194.736] CloseHandle (hObject=0x18c) returned 1 [0194.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", lpFilePart=0x0) returned 0x54 [0194.737] SetErrorMode (uMode=0x1) returned 0x0 [0194.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f9f0f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6f9f0f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd64)) returned 1 [0194.737] SetErrorMode (uMode=0x0) returned 0x1 [0194.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", lpFilePart=0x0) returned 0x54 [0194.874] SetErrorMode (uMode=0x1) returned 0x0 [0194.875] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.878] SetErrorMode (uMode=0x0) returned 0x1 [0194.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png", lpFilePart=0x0) returned 0x54 [0194.880] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png")) returned 0 [0194.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x0) returned 0x52 [0194.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x0) returned 0x52 [0194.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x0) returned 0x52 [0194.886] SetErrorMode (uMode=0x1) returned 0x0 [0194.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0194.887] GetFileType (hFile=0x18c) returned 0x1 [0194.887] SetErrorMode (uMode=0x0) returned 0x1 [0194.887] GetFileType (hFile=0x18c) returned 0x1 [0194.888] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb71 [0194.888] ReadFile (in: hFile=0x18c, lpBuffer=0x27bc788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27bc788*, lpNumberOfBytesRead=0x27e6e8*=0xb71, lpOverlapped=0x0) returned 1 [0194.889] CloseHandle (hObject=0x18c) returned 1 [0194.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x0) returned 0x52 [0194.890] SetErrorMode (uMode=0x1) returned 0x0 [0194.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71)) returned 1 [0194.890] SetErrorMode (uMode=0x0) returned 0x1 [0194.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x0) returned 0x52 [0194.987] SetErrorMode (uMode=0x1) returned 0x0 [0194.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.992] SetErrorMode (uMode=0x0) returned 0x1 [0194.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x0) returned 0x52 [0194.993] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png")) returned 0 [0194.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4e [0195.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4e [0195.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4e [0195.000] SetErrorMode (uMode=0x1) returned 0x0 [0195.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.001] GetFileType (hFile=0x18c) returned 0x1 [0195.001] SetErrorMode (uMode=0x0) returned 0x1 [0195.001] GetFileType (hFile=0x18c) returned 0x1 [0195.001] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2d9 [0195.001] ReadFile (in: hFile=0x18c, lpBuffer=0x281f4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x281f4d8*, lpNumberOfBytesRead=0x27e6e8*=0x2d9, lpOverlapped=0x0) returned 1 [0195.003] CloseHandle (hObject=0x18c) returned 1 [0195.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4e [0195.004] SetErrorMode (uMode=0x1) returned 0x0 [0195.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9)) returned 1 [0195.004] SetErrorMode (uMode=0x0) returned 0x1 [0195.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4e [0195.098] SetErrorMode (uMode=0x1) returned 0x0 [0195.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.104] SetErrorMode (uMode=0x0) returned 0x1 [0195.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4e [0195.107] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png")) returned 0 [0195.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x0) returned 0x52 [0195.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x0) returned 0x52 [0195.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x0) returned 0x52 [0195.116] SetErrorMode (uMode=0x1) returned 0x0 [0195.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.117] GetFileType (hFile=0x18c) returned 0x1 [0195.117] SetErrorMode (uMode=0x0) returned 0x1 [0195.117] GetFileType (hFile=0x18c) returned 0x1 [0195.117] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbda [0195.117] ReadFile (in: hFile=0x18c, lpBuffer=0x287f088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x287f088*, lpNumberOfBytesRead=0x27e6e8*=0xbda, lpOverlapped=0x0) returned 1 [0195.119] CloseHandle (hObject=0x18c) returned 1 [0195.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x0) returned 0x52 [0195.120] SetErrorMode (uMode=0x1) returned 0x0 [0195.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda)) returned 1 [0195.120] SetErrorMode (uMode=0x0) returned 0x1 [0195.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x0) returned 0x52 [0195.252] SetErrorMode (uMode=0x1) returned 0x0 [0195.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.256] SetErrorMode (uMode=0x0) returned 0x1 [0195.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x0) returned 0x52 [0195.258] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png")) returned 0 [0195.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x0) returned 0x52 [0195.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x0) returned 0x52 [0195.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x0) returned 0x52 [0195.266] SetErrorMode (uMode=0x1) returned 0x0 [0195.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.267] GetFileType (hFile=0x18c) returned 0x1 [0195.267] SetErrorMode (uMode=0x0) returned 0x1 [0195.267] GetFileType (hFile=0x18c) returned 0x1 [0195.267] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb0f [0195.267] ReadFile (in: hFile=0x18c, lpBuffer=0x28e3340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e3340*, lpNumberOfBytesRead=0x27e6e8*=0xb0f, lpOverlapped=0x0) returned 1 [0195.269] CloseHandle (hObject=0x18c) returned 1 [0195.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x0) returned 0x52 [0195.270] SetErrorMode (uMode=0x1) returned 0x0 [0195.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f)) returned 1 [0195.270] SetErrorMode (uMode=0x0) returned 0x1 [0195.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x0) returned 0x52 [0195.388] SetErrorMode (uMode=0x1) returned 0x0 [0195.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.392] SetErrorMode (uMode=0x0) returned 0x1 [0195.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x0) returned 0x52 [0195.393] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png")) returned 0 [0195.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0195.398] SetErrorMode (uMode=0x1) returned 0x0 [0195.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0195.399] GetFileType (hFile=0x18c) returned 0x1 [0195.400] SetErrorMode (uMode=0x0) returned 0x1 [0195.400] GetFileType (hFile=0x18c) returned 0x1 [0195.401] WriteFile (in: hFile=0x18c, lpBuffer=0x2756ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2756ae0*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0195.403] WriteFile (in: hFile=0x18c, lpBuffer=0x2756ae0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2756ae0*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0195.403] CloseHandle (hObject=0x18c) returned 1 [0195.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0195.404] SetErrorMode (uMode=0x1) returned 0x0 [0195.404] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0195.406] GetFileType (hFile=0x18c) returned 0x1 [0195.406] SetErrorMode (uMode=0x0) returned 0x1 [0195.406] GetFileType (hFile=0x18c) returned 0x1 [0195.408] WriteFile (in: hFile=0x18c, lpBuffer=0x276cc00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x276cc00*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0195.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x43 [0195.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x43 [0195.410] SetErrorMode (uMode=0x1) returned 0x0 [0195.410] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0195.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0195.411] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0195.412] SetErrorMode (uMode=0x0) returned 0x1 [0195.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x43 [0195.412] SetErrorMode (uMode=0x1) returned 0x0 [0195.412] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0195.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0195.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0195.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0195.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0195.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0195.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0195.413] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0195.413] SetErrorMode (uMode=0x0) returned 0x1 [0195.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0195.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0195.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0195.414] SetErrorMode (uMode=0x1) returned 0x0 [0195.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.414] GetFileType (hFile=0x18c) returned 0x1 [0195.414] SetErrorMode (uMode=0x0) returned 0x1 [0195.414] GetFileType (hFile=0x18c) returned 0x1 [0195.414] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x7a53 [0195.414] ReadFile (in: hFile=0x18c, lpBuffer=0x2775110, nNumberOfBytesToRead=0x7a53, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2775110*, lpNumberOfBytesRead=0x27e788*=0x7a53, lpOverlapped=0x0) returned 1 [0195.416] CloseHandle (hObject=0x18c) returned 1 [0195.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0195.417] SetErrorMode (uMode=0x1) returned 0x0 [0195.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53)) returned 1 [0195.417] SetErrorMode (uMode=0x0) returned 0x1 [0195.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0195.514] SetErrorMode (uMode=0x1) returned 0x0 [0195.514] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.518] SetErrorMode (uMode=0x0) returned 0x1 [0195.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0195.519] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png")) returned 0 [0195.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x0) returned 0x4c [0195.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x0) returned 0x4c [0195.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x0) returned 0x4c [0195.526] SetErrorMode (uMode=0x1) returned 0x0 [0195.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.527] GetFileType (hFile=0x18c) returned 0x1 [0195.527] SetErrorMode (uMode=0x0) returned 0x1 [0195.527] GetFileType (hFile=0x18c) returned 0x1 [0195.527] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x255b [0195.527] ReadFile (in: hFile=0x18c, lpBuffer=0x280d1c8, nNumberOfBytesToRead=0x255b, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x280d1c8*, lpNumberOfBytesRead=0x27e788*=0x255b, lpOverlapped=0x0) returned 1 [0195.529] CloseHandle (hObject=0x18c) returned 1 [0195.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x0) returned 0x4c [0195.530] SetErrorMode (uMode=0x1) returned 0x0 [0195.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b)) returned 1 [0195.530] SetErrorMode (uMode=0x0) returned 0x1 [0195.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x0) returned 0x4c [0195.662] SetErrorMode (uMode=0x1) returned 0x0 [0195.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.666] SetErrorMode (uMode=0x0) returned 0x1 [0195.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x0) returned 0x4c [0195.668] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png")) returned 0 [0195.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x0) returned 0x4c [0195.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x0) returned 0x4c [0195.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x0) returned 0x4c [0195.673] SetErrorMode (uMode=0x1) returned 0x0 [0195.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.673] GetFileType (hFile=0x18c) returned 0x1 [0195.673] SetErrorMode (uMode=0x0) returned 0x1 [0195.673] GetFileType (hFile=0x18c) returned 0x1 [0195.673] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1816 [0195.674] ReadFile (in: hFile=0x18c, lpBuffer=0x2875980, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2875980*, lpNumberOfBytesRead=0x27e788*=0x1816, lpOverlapped=0x0) returned 1 [0195.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x0) returned 0x4c [0195.675] SetErrorMode (uMode=0x1) returned 0x0 [0195.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0195.676] SetErrorMode (uMode=0x0) returned 0x1 [0195.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x0) returned 0x4c [0195.817] SetErrorMode (uMode=0x1) returned 0x0 [0195.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.822] SetErrorMode (uMode=0x0) returned 0x1 [0195.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x0) returned 0x4c [0195.823] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png")) returned 0 [0195.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", lpFilePart=0x0) returned 0x49 [0195.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", lpFilePart=0x0) returned 0x49 [0195.829] SetErrorMode (uMode=0x1) returned 0x0 [0195.829] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0195.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0195.830] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0195.831] SetErrorMode (uMode=0x0) returned 0x1 [0195.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", lpFilePart=0x0) returned 0x49 [0195.831] SetErrorMode (uMode=0x1) returned 0x0 [0195.831] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0195.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0195.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0195.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0195.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1 [0195.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0195.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0195.832] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0195.832] SetErrorMode (uMode=0x0) returned 0x1 [0195.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x54 [0195.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x54 [0195.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x54 [0195.833] SetErrorMode (uMode=0x1) returned 0x0 [0195.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.833] GetFileType (hFile=0x18c) returned 0x1 [0195.833] SetErrorMode (uMode=0x0) returned 0x1 [0195.833] GetFileType (hFile=0x18c) returned 0x1 [0195.833] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3f2 [0195.833] ReadFile (in: hFile=0x18c, lpBuffer=0x28e02c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e02c0*, lpNumberOfBytesRead=0x27e6e8*=0x3f2, lpOverlapped=0x0) returned 1 [0195.837] CloseHandle (hObject=0x18c) returned 1 [0195.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x54 [0195.837] SetErrorMode (uMode=0x1) returned 0x0 [0195.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2)) returned 1 [0195.838] SetErrorMode (uMode=0x0) returned 0x1 [0195.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x54 [0195.939] SetErrorMode (uMode=0x1) returned 0x0 [0195.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.943] SetErrorMode (uMode=0x0) returned 0x1 [0195.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x54 [0195.945] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml")) returned 0 [0195.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", lpFilePart=0x0) returned 0x5c [0195.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", lpFilePart=0x0) returned 0x5c [0195.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", lpFilePart=0x0) returned 0x5c [0195.952] SetErrorMode (uMode=0x1) returned 0x0 [0195.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0195.952] GetFileType (hFile=0x18c) returned 0x1 [0195.952] SetErrorMode (uMode=0x0) returned 0x1 [0195.953] GetFileType (hFile=0x18c) returned 0x1 [0195.953] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd6c [0195.953] ReadFile (in: hFile=0x18c, lpBuffer=0x2740ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2740ed0*, lpNumberOfBytesRead=0x27e6e8*=0xd6c, lpOverlapped=0x0) returned 1 [0195.954] CloseHandle (hObject=0x18c) returned 1 [0195.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", lpFilePart=0x0) returned 0x5c [0195.955] SetErrorMode (uMode=0x1) returned 0x0 [0195.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c)) returned 1 [0195.955] SetErrorMode (uMode=0x0) returned 0x1 [0196.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", lpFilePart=0x0) returned 0x5c [0196.048] SetErrorMode (uMode=0x1) returned 0x0 [0196.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.054] SetErrorMode (uMode=0x0) returned 0x1 [0196.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html", lpFilePart=0x0) returned 0x5c [0196.057] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html")) returned 0 [0196.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x57 [0196.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x57 [0196.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x57 [0196.066] SetErrorMode (uMode=0x1) returned 0x0 [0196.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.067] GetFileType (hFile=0x18c) returned 0x1 [0196.067] SetErrorMode (uMode=0x0) returned 0x1 [0196.067] GetFileType (hFile=0x18c) returned 0x1 [0196.067] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x156a [0196.067] ReadFile (in: hFile=0x18c, lpBuffer=0x27a51a0, nNumberOfBytesToRead=0x156a, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a51a0*, lpNumberOfBytesRead=0x27e6e8*=0x156a, lpOverlapped=0x0) returned 1 [0196.069] CloseHandle (hObject=0x18c) returned 1 [0196.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x57 [0196.070] SetErrorMode (uMode=0x1) returned 0x0 [0196.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a)) returned 1 [0196.070] SetErrorMode (uMode=0x0) returned 0x1 [0196.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x57 [0196.172] SetErrorMode (uMode=0x1) returned 0x0 [0196.172] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.176] SetErrorMode (uMode=0x0) returned 0x1 [0196.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x57 [0196.178] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html")) returned 0 [0196.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x4d [0196.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x4d [0196.206] SetErrorMode (uMode=0x1) returned 0x0 [0196.206] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0196.207] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.207] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1 [0196.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0196.208] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0196.208] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0196.208] SetErrorMode (uMode=0x0) returned 0x1 [0196.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x4d [0196.208] SetErrorMode (uMode=0x1) returned 0x0 [0196.209] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0196.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1 [0196.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0196.209] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0196.209] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0196.209] SetErrorMode (uMode=0x0) returned 0x1 [0196.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", lpFilePart=0x0) returned 0x5f [0196.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", lpFilePart=0x0) returned 0x5f [0196.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", lpFilePart=0x0) returned 0x5f [0196.210] SetErrorMode (uMode=0x1) returned 0x0 [0196.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.212] GetFileType (hFile=0x18c) returned 0x1 [0196.212] SetErrorMode (uMode=0x0) returned 0x1 [0196.212] GetFileType (hFile=0x18c) returned 0x1 [0196.212] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1172 [0196.212] ReadFile (in: hFile=0x18c, lpBuffer=0x280f3e8, nNumberOfBytesToRead=0x1172, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x280f3e8*, lpNumberOfBytesRead=0x27e648*=0x1172, lpOverlapped=0x0) returned 1 [0196.214] CloseHandle (hObject=0x18c) returned 1 [0196.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", lpFilePart=0x0) returned 0x5f [0196.214] SetErrorMode (uMode=0x1) returned 0x0 [0196.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1 [0196.215] SetErrorMode (uMode=0x0) returned 0x1 [0196.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", lpFilePart=0x0) returned 0x5f [0196.348] SetErrorMode (uMode=0x1) returned 0x0 [0196.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.352] SetErrorMode (uMode=0x0) returned 0x1 [0196.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css", lpFilePart=0x0) returned 0x5f [0196.353] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css")) returned 0 [0196.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x5a [0196.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x5a [0196.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x5a [0196.358] SetErrorMode (uMode=0x1) returned 0x0 [0196.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.359] GetFileType (hFile=0x18c) returned 0x1 [0196.359] SetErrorMode (uMode=0x0) returned 0x1 [0196.359] GetFileType (hFile=0x18c) returned 0x1 [0196.359] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1454 [0196.359] ReadFile (in: hFile=0x18c, lpBuffer=0x2875330, nNumberOfBytesToRead=0x1454, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2875330*, lpNumberOfBytesRead=0x27e648*=0x1454, lpOverlapped=0x0) returned 1 [0196.362] CloseHandle (hObject=0x18c) returned 1 [0196.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x5a [0196.363] SetErrorMode (uMode=0x1) returned 0x0 [0196.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454)) returned 1 [0196.363] SetErrorMode (uMode=0x0) returned 0x1 [0196.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x5a [0196.457] SetErrorMode (uMode=0x1) returned 0x0 [0196.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.461] SetErrorMode (uMode=0x0) returned 0x1 [0196.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x5a [0196.462] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css")) returned 0 [0196.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x67 [0196.466] SetErrorMode (uMode=0x1) returned 0x0 [0196.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0196.467] GetFileType (hFile=0x18c) returned 0x1 [0196.467] SetErrorMode (uMode=0x0) returned 0x1 [0196.467] GetFileType (hFile=0x18c) returned 0x1 [0196.469] WriteFile (in: hFile=0x18c, lpBuffer=0x28ecab0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28ecab0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0196.470] WriteFile (in: hFile=0x18c, lpBuffer=0x28ecab0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28ecab0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0196.471] CloseHandle (hObject=0x18c) returned 1 [0196.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x4c [0196.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x4c [0196.471] SetErrorMode (uMode=0x1) returned 0x0 [0196.471] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0196.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1 [0196.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0196.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0196.472] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0196.472] SetErrorMode (uMode=0x0) returned 0x1 [0196.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x4c [0196.472] SetErrorMode (uMode=0x1) returned 0x0 [0196.472] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0196.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1 [0196.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0196.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0196.473] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0196.473] SetErrorMode (uMode=0x0) returned 0x1 [0196.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", lpFilePart=0x0) returned 0x5d [0196.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", lpFilePart=0x0) returned 0x5d [0196.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", lpFilePart=0x0) returned 0x5d [0196.474] SetErrorMode (uMode=0x1) returned 0x0 [0196.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.490] GetFileType (hFile=0x18c) returned 0x1 [0196.490] SetErrorMode (uMode=0x0) returned 0x1 [0196.490] GetFileType (hFile=0x18c) returned 0x1 [0196.490] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xbaa2 [0196.490] ReadFile (in: hFile=0x18c, lpBuffer=0x28f4a18, nNumberOfBytesToRead=0xbaa2, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28f4a18*, lpNumberOfBytesRead=0x27e648*=0xbaa2, lpOverlapped=0x0) returned 1 [0196.493] CloseHandle (hObject=0x18c) returned 1 [0196.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", lpFilePart=0x0) returned 0x5d [0196.493] SetErrorMode (uMode=0x1) returned 0x0 [0196.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2)) returned 1 [0196.494] SetErrorMode (uMode=0x0) returned 0x1 [0196.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", lpFilePart=0x0) returned 0x5d [0196.591] SetErrorMode (uMode=0x1) returned 0x0 [0196.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.596] SetErrorMode (uMode=0x0) returned 0x1 [0196.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js", lpFilePart=0x0) returned 0x5d [0196.597] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js")) returned 0 [0196.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x58 [0196.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x58 [0196.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x58 [0196.605] SetErrorMode (uMode=0x1) returned 0x0 [0196.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.606] GetFileType (hFile=0x18c) returned 0x1 [0196.606] SetErrorMode (uMode=0x0) returned 0x1 [0196.606] GetFileType (hFile=0x18c) returned 0x1 [0196.606] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x267e [0196.606] ReadFile (in: hFile=0x18c, lpBuffer=0x2796c80, nNumberOfBytesToRead=0x267e, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2796c80*, lpNumberOfBytesRead=0x27e648*=0x267e, lpOverlapped=0x0) returned 1 [0196.608] CloseHandle (hObject=0x18c) returned 1 [0196.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x58 [0196.608] SetErrorMode (uMode=0x1) returned 0x0 [0196.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e)) returned 1 [0196.609] SetErrorMode (uMode=0x0) returned 0x1 [0196.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x58 [0196.778] SetErrorMode (uMode=0x1) returned 0x0 [0196.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.782] SetErrorMode (uMode=0x0) returned 0x1 [0196.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x58 [0196.783] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js")) returned 0 [0196.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x66 [0196.789] SetErrorMode (uMode=0x1) returned 0x0 [0196.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0196.790] GetFileType (hFile=0x18c) returned 0x1 [0196.790] SetErrorMode (uMode=0x0) returned 0x1 [0196.790] GetFileType (hFile=0x18c) returned 0x1 [0196.791] WriteFile (in: hFile=0x18c, lpBuffer=0x280cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x280cbc8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0196.793] WriteFile (in: hFile=0x18c, lpBuffer=0x280cbc8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x280cbc8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0196.793] CloseHandle (hObject=0x18c) returned 1 [0196.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x63 [0196.794] SetErrorMode (uMode=0x1) returned 0x0 [0196.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0196.798] GetFileType (hFile=0x18c) returned 0x1 [0196.798] SetErrorMode (uMode=0x0) returned 0x1 [0196.798] GetFileType (hFile=0x18c) returned 0x1 [0196.800] WriteFile (in: hFile=0x18c, lpBuffer=0x2822d08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2822d08*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0196.802] CloseHandle (hObject=0x18c) returned 1 [0196.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", lpFilePart=0x0) returned 0x4a [0196.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", lpFilePart=0x0) returned 0x4a [0196.803] SetErrorMode (uMode=0x1) returned 0x0 [0196.803] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0196.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1 [0196.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0196.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0196.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0196.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b3afe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1b3afe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0196.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba24c07a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba24c07a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3308b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3308b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0196.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3eef8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3eef8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a1371c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0196.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba43b24d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba43b24d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0aabc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4613ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4613ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba298338, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba298338, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0bdc79c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1 [0196.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1 [0196.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1 [0196.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0 [0196.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0196.811] SetErrorMode (uMode=0x0) returned 0x1 [0196.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", lpFilePart=0x0) returned 0x4a [0196.811] SetErrorMode (uMode=0x1) returned 0x0 [0196.811] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0196.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b3afe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1b3afe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba24c07a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba24c07a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1 [0196.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1 [0196.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0196.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0196.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0196.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0196.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0196.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0196.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3308b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3308b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0196.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0196.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0196.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0196.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0196.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0196.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0196.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0196.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0196.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3eef8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3eef8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a1371c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0196.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0196.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0196.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba43b24d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba43b24d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0aabc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0196.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4613ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4613ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0196.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0196.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1 [0196.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1 [0196.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba298338, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba298338, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1 [0196.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1 [0196.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1 [0196.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1 [0196.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0bdc79c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1 [0196.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1 [0196.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1 [0196.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1 [0196.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0 [0196.821] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0196.821] SetErrorMode (uMode=0x0) returned 0x1 [0196.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x0) returned 0x50 [0196.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x0) returned 0x50 [0196.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x0) returned 0x50 [0196.822] SetErrorMode (uMode=0x1) returned 0x0 [0196.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.823] GetFileType (hFile=0x18c) returned 0x1 [0196.823] SetErrorMode (uMode=0x0) returned 0x1 [0196.823] GetFileType (hFile=0x18c) returned 0x1 [0196.823] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb22 [0196.823] ReadFile (in: hFile=0x18c, lpBuffer=0x28305c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28305c0*, lpNumberOfBytesRead=0x27e6e8*=0xb22, lpOverlapped=0x0) returned 1 [0196.825] CloseHandle (hObject=0x18c) returned 1 [0196.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x0) returned 0x50 [0196.826] SetErrorMode (uMode=0x1) returned 0x0 [0196.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22)) returned 1 [0196.826] SetErrorMode (uMode=0x0) returned 0x1 [0196.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x0) returned 0x50 [0196.928] SetErrorMode (uMode=0x1) returned 0x0 [0196.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.935] SetErrorMode (uMode=0x0) returned 0x1 [0196.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x0) returned 0x50 [0196.937] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png")) returned 0 [0196.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x0) returned 0x50 [0196.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x0) returned 0x50 [0196.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x0) returned 0x50 [0196.941] SetErrorMode (uMode=0x1) returned 0x0 [0196.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0196.942] GetFileType (hFile=0x18c) returned 0x1 [0196.942] SetErrorMode (uMode=0x0) returned 0x1 [0196.942] GetFileType (hFile=0x18c) returned 0x1 [0196.942] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5323 [0196.942] ReadFile (in: hFile=0x18c, lpBuffer=0x2892ad8, nNumberOfBytesToRead=0x5323, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2892ad8*, lpNumberOfBytesRead=0x27e6e8*=0x5323, lpOverlapped=0x0) returned 1 [0196.944] CloseHandle (hObject=0x18c) returned 1 [0196.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x0) returned 0x50 [0196.945] SetErrorMode (uMode=0x1) returned 0x0 [0196.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323)) returned 1 [0196.945] SetErrorMode (uMode=0x0) returned 0x1 [0197.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x0) returned 0x50 [0197.080] SetErrorMode (uMode=0x1) returned 0x0 [0197.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.084] SetErrorMode (uMode=0x0) returned 0x1 [0197.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x0) returned 0x50 [0197.085] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png")) returned 0 [0197.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x0) returned 0x51 [0197.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x0) returned 0x51 [0197.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x0) returned 0x51 [0197.092] SetErrorMode (uMode=0x1) returned 0x0 [0197.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.100] GetFileType (hFile=0x18c) returned 0x1 [0197.100] SetErrorMode (uMode=0x0) returned 0x1 [0197.100] GetFileType (hFile=0x18c) returned 0x1 [0197.100] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5e40 [0197.100] ReadFile (in: hFile=0x18c, lpBuffer=0x2918fe8, nNumberOfBytesToRead=0x5e40, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2918fe8*, lpNumberOfBytesRead=0x27e6e8*=0x5e40, lpOverlapped=0x0) returned 1 [0197.102] CloseHandle (hObject=0x18c) returned 1 [0197.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x0) returned 0x51 [0197.103] SetErrorMode (uMode=0x1) returned 0x0 [0197.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1 [0197.103] SetErrorMode (uMode=0x0) returned 0x1 [0197.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x0) returned 0x51 [0197.224] SetErrorMode (uMode=0x1) returned 0x0 [0197.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.229] SetErrorMode (uMode=0x0) returned 0x1 [0197.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x0) returned 0x51 [0197.230] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png")) returned 0 [0197.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x0) returned 0x51 [0197.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x0) returned 0x51 [0197.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x0) returned 0x51 [0197.237] SetErrorMode (uMode=0x1) returned 0x0 [0197.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.238] GetFileType (hFile=0x18c) returned 0x1 [0197.238] SetErrorMode (uMode=0x0) returned 0x1 [0197.238] GetFileType (hFile=0x18c) returned 0x1 [0197.238] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6936 [0197.238] ReadFile (in: hFile=0x18c, lpBuffer=0x27a0340, nNumberOfBytesToRead=0x6936, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a0340*, lpNumberOfBytesRead=0x27e6e8*=0x6936, lpOverlapped=0x0) returned 1 [0197.240] CloseHandle (hObject=0x18c) returned 1 [0197.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x0) returned 0x51 [0197.241] SetErrorMode (uMode=0x1) returned 0x0 [0197.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936)) returned 1 [0197.241] SetErrorMode (uMode=0x0) returned 0x1 [0197.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x0) returned 0x51 [0197.351] SetErrorMode (uMode=0x1) returned 0x0 [0197.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.355] SetErrorMode (uMode=0x0) returned 0x1 [0197.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x0) returned 0x51 [0197.357] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png")) returned 0 [0197.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x0) returned 0x50 [0197.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x0) returned 0x50 [0197.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x0) returned 0x50 [0197.363] SetErrorMode (uMode=0x1) returned 0x0 [0197.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.364] GetFileType (hFile=0x18c) returned 0x1 [0197.364] SetErrorMode (uMode=0x0) returned 0x1 [0197.364] GetFileType (hFile=0x18c) returned 0x1 [0197.364] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7210 [0197.365] ReadFile (in: hFile=0x18c, lpBuffer=0x282c5f8, nNumberOfBytesToRead=0x7210, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x282c5f8*, lpNumberOfBytesRead=0x27e6e8*=0x7210, lpOverlapped=0x0) returned 1 [0197.366] CloseHandle (hObject=0x18c) returned 1 [0197.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x0) returned 0x50 [0197.367] SetErrorMode (uMode=0x1) returned 0x0 [0197.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210)) returned 1 [0197.368] SetErrorMode (uMode=0x0) returned 0x1 [0197.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x0) returned 0x50 [0197.498] SetErrorMode (uMode=0x1) returned 0x0 [0197.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.502] SetErrorMode (uMode=0x0) returned 0x1 [0197.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x0) returned 0x50 [0197.504] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png")) returned 0 [0197.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x0) returned 0x50 [0197.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x0) returned 0x50 [0197.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x0) returned 0x50 [0197.508] SetErrorMode (uMode=0x1) returned 0x0 [0197.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.509] GetFileType (hFile=0x18c) returned 0x1 [0197.509] SetErrorMode (uMode=0x0) returned 0x1 [0197.509] GetFileType (hFile=0x18c) returned 0x1 [0197.509] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x5f4d [0197.509] ReadFile (in: hFile=0x18c, lpBuffer=0x28bc4b0, nNumberOfBytesToRead=0x5f4d, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28bc4b0*, lpNumberOfBytesRead=0x27e6e8*=0x5f4d, lpOverlapped=0x0) returned 1 [0197.511] CloseHandle (hObject=0x18c) returned 1 [0197.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x0) returned 0x50 [0197.511] SetErrorMode (uMode=0x1) returned 0x0 [0197.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d)) returned 1 [0197.512] SetErrorMode (uMode=0x0) returned 0x1 [0197.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x0) returned 0x50 [0197.621] SetErrorMode (uMode=0x1) returned 0x0 [0197.621] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.629] SetErrorMode (uMode=0x0) returned 0x1 [0197.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x0) returned 0x50 [0197.631] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png")) returned 0 [0197.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x0) returned 0x50 [0197.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x0) returned 0x50 [0197.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x0) returned 0x50 [0197.639] SetErrorMode (uMode=0x1) returned 0x0 [0197.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.640] GetFileType (hFile=0x18c) returned 0x1 [0197.640] SetErrorMode (uMode=0x0) returned 0x1 [0197.640] GetFileType (hFile=0x18c) returned 0x1 [0197.640] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3dec [0197.640] ReadFile (in: hFile=0x18c, lpBuffer=0x2746db0, nNumberOfBytesToRead=0x3dec, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2746db0*, lpNumberOfBytesRead=0x27e6e8*=0x3dec, lpOverlapped=0x0) returned 1 [0197.642] CloseHandle (hObject=0x18c) returned 1 [0197.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x0) returned 0x50 [0197.643] SetErrorMode (uMode=0x1) returned 0x0 [0197.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1 [0197.643] SetErrorMode (uMode=0x0) returned 0x1 [0197.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x0) returned 0x50 [0197.808] SetErrorMode (uMode=0x1) returned 0x0 [0197.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.812] SetErrorMode (uMode=0x0) returned 0x1 [0197.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x0) returned 0x50 [0197.814] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png")) returned 0 [0197.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x0) returned 0x50 [0197.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x0) returned 0x50 [0197.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x0) returned 0x50 [0197.822] SetErrorMode (uMode=0x1) returned 0x0 [0197.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.822] GetFileType (hFile=0x18c) returned 0x1 [0197.822] SetErrorMode (uMode=0x0) returned 0x1 [0197.823] GetFileType (hFile=0x18c) returned 0x1 [0197.823] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x61bd [0197.823] ReadFile (in: hFile=0x18c, lpBuffer=0x27b7318, nNumberOfBytesToRead=0x61bd, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27b7318*, lpNumberOfBytesRead=0x27e6e8*=0x61bd, lpOverlapped=0x0) returned 1 [0197.824] CloseHandle (hObject=0x18c) returned 1 [0197.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x0) returned 0x50 [0197.825] SetErrorMode (uMode=0x1) returned 0x0 [0197.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd)) returned 1 [0197.825] SetErrorMode (uMode=0x0) returned 0x1 [0197.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x0) returned 0x50 [0197.928] SetErrorMode (uMode=0x1) returned 0x0 [0197.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.935] SetErrorMode (uMode=0x0) returned 0x1 [0197.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x0) returned 0x50 [0197.938] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png")) returned 0 [0197.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x0) returned 0x50 [0197.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x0) returned 0x50 [0197.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x0) returned 0x50 [0197.948] SetErrorMode (uMode=0x1) returned 0x0 [0197.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0197.949] GetFileType (hFile=0x18c) returned 0x1 [0197.949] SetErrorMode (uMode=0x0) returned 0x1 [0197.949] GetFileType (hFile=0x18c) returned 0x1 [0197.949] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6f20 [0197.949] ReadFile (in: hFile=0x18c, lpBuffer=0x2841a68, nNumberOfBytesToRead=0x6f20, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2841a68*, lpNumberOfBytesRead=0x27e6e8*=0x6f20, lpOverlapped=0x0) returned 1 [0197.951] CloseHandle (hObject=0x18c) returned 1 [0197.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x0) returned 0x50 [0197.952] SetErrorMode (uMode=0x1) returned 0x0 [0197.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20)) returned 1 [0197.952] SetErrorMode (uMode=0x0) returned 0x1 [0198.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x0) returned 0x50 [0198.058] SetErrorMode (uMode=0x1) returned 0x0 [0198.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.062] SetErrorMode (uMode=0x0) returned 0x1 [0198.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x0) returned 0x50 [0198.064] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png")) returned 0 [0198.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x0) returned 0x50 [0198.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x0) returned 0x50 [0198.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x0) returned 0x50 [0198.069] SetErrorMode (uMode=0x1) returned 0x0 [0198.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.069] GetFileType (hFile=0x18c) returned 0x1 [0198.069] SetErrorMode (uMode=0x0) returned 0x1 [0198.069] GetFileType (hFile=0x18c) returned 0x1 [0198.070] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x493b [0198.070] ReadFile (in: hFile=0x18c, lpBuffer=0x28d08a0, nNumberOfBytesToRead=0x493b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d08a0*, lpNumberOfBytesRead=0x27e6e8*=0x493b, lpOverlapped=0x0) returned 1 [0198.071] CloseHandle (hObject=0x18c) returned 1 [0198.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x0) returned 0x50 [0198.072] SetErrorMode (uMode=0x1) returned 0x0 [0198.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b)) returned 1 [0198.072] SetErrorMode (uMode=0x0) returned 0x1 [0198.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x0) returned 0x50 [0198.231] SetErrorMode (uMode=0x1) returned 0x0 [0198.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.235] SetErrorMode (uMode=0x0) returned 0x1 [0198.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x0) returned 0x50 [0198.236] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png")) returned 0 [0198.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x0) returned 0x50 [0198.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x0) returned 0x50 [0198.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x0) returned 0x50 [0198.241] SetErrorMode (uMode=0x1) returned 0x0 [0198.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.244] GetFileType (hFile=0x18c) returned 0x1 [0198.244] SetErrorMode (uMode=0x0) returned 0x1 [0198.244] GetFileType (hFile=0x18c) returned 0x1 [0198.244] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x52a7 [0198.244] ReadFile (in: hFile=0x18c, lpBuffer=0x274ba98, nNumberOfBytesToRead=0x52a7, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x274ba98*, lpNumberOfBytesRead=0x27e6e8*=0x52a7, lpOverlapped=0x0) returned 1 [0198.246] CloseHandle (hObject=0x18c) returned 1 [0198.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x0) returned 0x50 [0198.247] SetErrorMode (uMode=0x1) returned 0x0 [0198.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7)) returned 1 [0198.247] SetErrorMode (uMode=0x0) returned 0x1 [0198.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x0) returned 0x50 [0198.370] SetErrorMode (uMode=0x1) returned 0x0 [0198.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.382] SetErrorMode (uMode=0x0) returned 0x1 [0198.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x0) returned 0x50 [0198.385] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png")) returned 0 [0198.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x0) returned 0x50 [0198.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x0) returned 0x50 [0198.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x0) returned 0x50 [0198.396] SetErrorMode (uMode=0x1) returned 0x0 [0198.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.396] GetFileType (hFile=0x18c) returned 0x1 [0198.396] SetErrorMode (uMode=0x0) returned 0x1 [0198.396] GetFileType (hFile=0x18c) returned 0x1 [0198.396] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x531b [0198.396] ReadFile (in: hFile=0x18c, lpBuffer=0x27cde48, nNumberOfBytesToRead=0x531b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cde48*, lpNumberOfBytesRead=0x27e6e8*=0x531b, lpOverlapped=0x0) returned 1 [0198.398] CloseHandle (hObject=0x18c) returned 1 [0198.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x0) returned 0x50 [0198.399] SetErrorMode (uMode=0x1) returned 0x0 [0198.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b)) returned 1 [0198.400] SetErrorMode (uMode=0x0) returned 0x1 [0198.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x0) returned 0x50 [0198.523] SetErrorMode (uMode=0x1) returned 0x0 [0198.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.528] SetErrorMode (uMode=0x0) returned 0x1 [0198.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x0) returned 0x50 [0198.529] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png")) returned 0 [0198.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", lpFilePart=0x0) returned 0x59 [0198.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", lpFilePart=0x0) returned 0x59 [0198.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", lpFilePart=0x0) returned 0x59 [0198.537] SetErrorMode (uMode=0x1) returned 0x0 [0198.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.538] GetFileType (hFile=0x18c) returned 0x1 [0198.538] SetErrorMode (uMode=0x0) returned 0x1 [0198.539] GetFileType (hFile=0x18c) returned 0x1 [0198.539] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x46a9 [0198.539] ReadFile (in: hFile=0x18c, lpBuffer=0x284fc38, nNumberOfBytesToRead=0x46a9, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x284fc38*, lpNumberOfBytesRead=0x27e6e8*=0x46a9, lpOverlapped=0x0) returned 1 [0198.540] CloseHandle (hObject=0x18c) returned 1 [0198.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", lpFilePart=0x0) returned 0x59 [0198.541] SetErrorMode (uMode=0x1) returned 0x0 [0198.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b3afe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1b3afe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x46a9)) returned 1 [0198.541] SetErrorMode (uMode=0x0) returned 0x1 [0198.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", lpFilePart=0x0) returned 0x59 [0198.646] SetErrorMode (uMode=0x1) returned 0x0 [0198.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.653] SetErrorMode (uMode=0x0) returned 0x1 [0198.655] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png", lpFilePart=0x0) returned 0x59 [0198.655] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png")) returned 0 [0198.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x0) returned 0x56 [0198.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x0) returned 0x56 [0198.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x0) returned 0x56 [0198.666] SetErrorMode (uMode=0x1) returned 0x0 [0198.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.666] GetFileType (hFile=0x18c) returned 0x1 [0198.666] SetErrorMode (uMode=0x0) returned 0x1 [0198.667] GetFileType (hFile=0x18c) returned 0x1 [0198.667] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa3d5 [0198.667] ReadFile (in: hFile=0x18c, lpBuffer=0x28cb678, nNumberOfBytesToRead=0xa3d5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28cb678*, lpNumberOfBytesRead=0x27e6e8*=0xa3d5, lpOverlapped=0x0) returned 1 [0198.669] CloseHandle (hObject=0x18c) returned 1 [0198.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x0) returned 0x56 [0198.670] SetErrorMode (uMode=0x1) returned 0x0 [0198.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5)) returned 1 [0198.670] SetErrorMode (uMode=0x0) returned 0x1 [0198.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x0) returned 0x56 [0198.842] SetErrorMode (uMode=0x1) returned 0x0 [0198.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.846] SetErrorMode (uMode=0x0) returned 0x1 [0198.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x0) returned 0x56 [0198.848] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png")) returned 0 [0198.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x0) returned 0x53 [0198.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x0) returned 0x53 [0198.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x0) returned 0x53 [0198.857] SetErrorMode (uMode=0x1) returned 0x0 [0198.857] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.858] GetFileType (hFile=0x18c) returned 0x1 [0198.858] SetErrorMode (uMode=0x0) returned 0x1 [0198.858] GetFileType (hFile=0x18c) returned 0x1 [0198.858] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xe9 [0198.858] ReadFile (in: hFile=0x18c, lpBuffer=0x27767a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27767a0*, lpNumberOfBytesRead=0x27e6e8*=0xe9, lpOverlapped=0x0) returned 1 [0198.859] CloseHandle (hObject=0x18c) returned 1 [0198.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x0) returned 0x53 [0198.860] SetErrorMode (uMode=0x1) returned 0x0 [0198.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0198.860] SetErrorMode (uMode=0x0) returned 0x1 [0198.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x0) returned 0x53 [0198.971] SetErrorMode (uMode=0x1) returned 0x0 [0198.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.975] SetErrorMode (uMode=0x0) returned 0x1 [0198.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x0) returned 0x53 [0198.977] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png")) returned 0 [0198.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", lpFilePart=0x0) returned 0x58 [0198.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", lpFilePart=0x0) returned 0x58 [0198.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", lpFilePart=0x0) returned 0x58 [0198.981] SetErrorMode (uMode=0x1) returned 0x0 [0198.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0198.982] GetFileType (hFile=0x18c) returned 0x1 [0198.982] SetErrorMode (uMode=0x0) returned 0x1 [0198.982] GetFileType (hFile=0x18c) returned 0x1 [0198.982] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd75 [0198.982] ReadFile (in: hFile=0x18c, lpBuffer=0x27cbf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cbf40*, lpNumberOfBytesRead=0x27e6e8*=0xd75, lpOverlapped=0x0) returned 1 [0198.985] CloseHandle (hObject=0x18c) returned 1 [0198.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", lpFilePart=0x0) returned 0x58 [0198.986] SetErrorMode (uMode=0x1) returned 0x0 [0198.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba24c07a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba24c07a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd75)) returned 1 [0198.986] SetErrorMode (uMode=0x0) returned 0x1 [0199.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", lpFilePart=0x0) returned 0x58 [0199.113] SetErrorMode (uMode=0x1) returned 0x0 [0199.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.117] SetErrorMode (uMode=0x0) returned 0x1 [0199.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png", lpFilePart=0x0) returned 0x58 [0199.119] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png")) returned 0 [0199.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", lpFilePart=0x0) returned 0x58 [0199.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", lpFilePart=0x0) returned 0x58 [0199.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", lpFilePart=0x0) returned 0x58 [0199.126] SetErrorMode (uMode=0x1) returned 0x0 [0199.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.127] GetFileType (hFile=0x18c) returned 0x1 [0199.127] SetErrorMode (uMode=0x0) returned 0x1 [0199.127] GetFileType (hFile=0x18c) returned 0x1 [0199.127] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd04 [0199.127] ReadFile (in: hFile=0x18c, lpBuffer=0x2831270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2831270*, lpNumberOfBytesRead=0x27e6e8*=0xd04, lpOverlapped=0x0) returned 1 [0199.129] CloseHandle (hObject=0x18c) returned 1 [0199.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", lpFilePart=0x0) returned 0x58 [0199.130] SetErrorMode (uMode=0x1) returned 0x0 [0199.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1 [0199.130] SetErrorMode (uMode=0x0) returned 0x1 [0199.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", lpFilePart=0x0) returned 0x58 [0199.243] SetErrorMode (uMode=0x1) returned 0x0 [0199.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.248] SetErrorMode (uMode=0x0) returned 0x1 [0199.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png", lpFilePart=0x0) returned 0x58 [0199.249] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png")) returned 0 [0199.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x0) returned 0x56 [0199.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x0) returned 0x56 [0199.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x0) returned 0x56 [0199.257] SetErrorMode (uMode=0x1) returned 0x0 [0199.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.257] GetFileType (hFile=0x18c) returned 0x1 [0199.257] SetErrorMode (uMode=0x0) returned 0x1 [0199.257] GetFileType (hFile=0x18c) returned 0x1 [0199.257] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd35 [0199.257] ReadFile (in: hFile=0x18c, lpBuffer=0x28955c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28955c8*, lpNumberOfBytesRead=0x27e6e8*=0xd35, lpOverlapped=0x0) returned 1 [0199.259] CloseHandle (hObject=0x18c) returned 1 [0199.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x0) returned 0x56 [0199.260] SetErrorMode (uMode=0x1) returned 0x0 [0199.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35)) returned 1 [0199.260] SetErrorMode (uMode=0x0) returned 0x1 [0199.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x0) returned 0x56 [0199.391] SetErrorMode (uMode=0x1) returned 0x0 [0199.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.397] SetErrorMode (uMode=0x0) returned 0x1 [0199.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x0) returned 0x56 [0199.399] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png")) returned 0 [0199.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x62 [0199.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x62 [0199.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x62 [0199.404] SetErrorMode (uMode=0x1) returned 0x0 [0199.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.405] GetFileType (hFile=0x18c) returned 0x1 [0199.405] SetErrorMode (uMode=0x0) returned 0x1 [0199.405] GetFileType (hFile=0x18c) returned 0x1 [0199.405] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8c [0199.405] ReadFile (in: hFile=0x18c, lpBuffer=0x28f8e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f8e68*, lpNumberOfBytesRead=0x27e6e8*=0x8c, lpOverlapped=0x0) returned 1 [0199.406] CloseHandle (hObject=0x18c) returned 1 [0199.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x62 [0199.408] SetErrorMode (uMode=0x1) returned 0x0 [0199.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1 [0199.408] SetErrorMode (uMode=0x0) returned 0x1 [0199.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x62 [0199.537] SetErrorMode (uMode=0x1) returned 0x0 [0199.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.541] SetErrorMode (uMode=0x0) returned 0x1 [0199.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png", lpFilePart=0x0) returned 0x62 [0199.543] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png")) returned 0 [0199.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x68 [0199.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x68 [0199.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x68 [0199.548] SetErrorMode (uMode=0x1) returned 0x0 [0199.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.548] GetFileType (hFile=0x18c) returned 0x1 [0199.548] SetErrorMode (uMode=0x0) returned 0x1 [0199.548] GetFileType (hFile=0x18c) returned 0x1 [0199.548] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x87 [0199.548] ReadFile (in: hFile=0x18c, lpBuffer=0x272ef18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x272ef18*, lpNumberOfBytesRead=0x27e6e8*=0x87, lpOverlapped=0x0) returned 1 [0199.550] CloseHandle (hObject=0x18c) returned 1 [0199.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x68 [0199.550] SetErrorMode (uMode=0x1) returned 0x0 [0199.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87)) returned 1 [0199.551] SetErrorMode (uMode=0x0) returned 0x1 [0199.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x68 [0199.656] SetErrorMode (uMode=0x1) returned 0x0 [0199.656] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.660] SetErrorMode (uMode=0x0) returned 0x1 [0199.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png", lpFilePart=0x0) returned 0x68 [0199.661] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png")) returned 0 [0199.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x69 [0199.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x69 [0199.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x69 [0199.670] SetErrorMode (uMode=0x1) returned 0x0 [0199.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.671] GetFileType (hFile=0x18c) returned 0x1 [0199.671] SetErrorMode (uMode=0x0) returned 0x1 [0199.671] GetFileType (hFile=0x18c) returned 0x1 [0199.671] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x87 [0199.671] ReadFile (in: hFile=0x18c, lpBuffer=0x278eef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x278eef0*, lpNumberOfBytesRead=0x27e6e8*=0x87, lpOverlapped=0x0) returned 1 [0199.672] CloseHandle (hObject=0x18c) returned 1 [0199.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x69 [0199.673] SetErrorMode (uMode=0x1) returned 0x0 [0199.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87)) returned 1 [0199.673] SetErrorMode (uMode=0x0) returned 0x1 [0199.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x69 [0199.816] SetErrorMode (uMode=0x1) returned 0x0 [0199.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.820] SetErrorMode (uMode=0x0) returned 0x1 [0199.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png", lpFilePart=0x0) returned 0x69 [0199.822] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png")) returned 0 [0199.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", lpFilePart=0x0) returned 0x60 [0199.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", lpFilePart=0x0) returned 0x60 [0199.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", lpFilePart=0x0) returned 0x60 [0199.830] SetErrorMode (uMode=0x1) returned 0x0 [0199.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.830] GetFileType (hFile=0x18c) returned 0x1 [0199.830] SetErrorMode (uMode=0x0) returned 0x1 [0199.830] GetFileType (hFile=0x18c) returned 0x1 [0199.830] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x89 [0199.830] ReadFile (in: hFile=0x18c, lpBuffer=0x27eeec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27eeec8*, lpNumberOfBytesRead=0x27e6e8*=0x89, lpOverlapped=0x0) returned 1 [0199.831] CloseHandle (hObject=0x18c) returned 1 [0199.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", lpFilePart=0x0) returned 0x60 [0199.832] SetErrorMode (uMode=0x1) returned 0x0 [0199.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0199.832] SetErrorMode (uMode=0x0) returned 0x1 [0199.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", lpFilePart=0x0) returned 0x60 [0199.939] SetErrorMode (uMode=0x1) returned 0x0 [0199.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.945] SetErrorMode (uMode=0x0) returned 0x1 [0199.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png", lpFilePart=0x0) returned 0x60 [0199.947] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png")) returned 0 [0199.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", lpFilePart=0x0) returned 0x61 [0199.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", lpFilePart=0x0) returned 0x61 [0199.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", lpFilePart=0x0) returned 0x61 [0199.953] SetErrorMode (uMode=0x1) returned 0x0 [0199.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0199.953] GetFileType (hFile=0x18c) returned 0x1 [0199.953] SetErrorMode (uMode=0x0) returned 0x1 [0199.953] GetFileType (hFile=0x18c) returned 0x1 [0199.953] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x89 [0199.953] ReadFile (in: hFile=0x18c, lpBuffer=0x284eda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x284eda8*, lpNumberOfBytesRead=0x27e6e8*=0x89, lpOverlapped=0x0) returned 1 [0199.954] CloseHandle (hObject=0x18c) returned 1 [0199.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", lpFilePart=0x0) returned 0x61 [0199.956] SetErrorMode (uMode=0x1) returned 0x0 [0199.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0199.956] SetErrorMode (uMode=0x0) returned 0x1 [0200.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", lpFilePart=0x0) returned 0x61 [0200.061] SetErrorMode (uMode=0x1) returned 0x0 [0200.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.071] SetErrorMode (uMode=0x0) returned 0x1 [0200.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png", lpFilePart=0x0) returned 0x61 [0200.074] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png")) returned 0 [0200.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", lpFilePart=0x0) returned 0x5f [0200.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", lpFilePart=0x0) returned 0x5f [0200.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", lpFilePart=0x0) returned 0x5f [0200.082] SetErrorMode (uMode=0x1) returned 0x0 [0200.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.083] GetFileType (hFile=0x18c) returned 0x1 [0200.083] SetErrorMode (uMode=0x0) returned 0x1 [0200.083] GetFileType (hFile=0x18c) returned 0x1 [0200.083] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x89 [0200.083] ReadFile (in: hFile=0x18c, lpBuffer=0x28aebd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28aebd0*, lpNumberOfBytesRead=0x27e6e8*=0x89, lpOverlapped=0x0) returned 1 [0200.084] CloseHandle (hObject=0x18c) returned 1 [0200.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", lpFilePart=0x0) returned 0x5f [0200.085] SetErrorMode (uMode=0x1) returned 0x0 [0200.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0200.085] SetErrorMode (uMode=0x0) returned 0x1 [0200.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", lpFilePart=0x0) returned 0x5f [0200.229] SetErrorMode (uMode=0x1) returned 0x0 [0200.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.233] SetErrorMode (uMode=0x0) returned 0x1 [0200.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png", lpFilePart=0x0) returned 0x5f [0200.234] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png")) returned 0 [0200.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x6a [0200.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x6a [0200.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x6a [0200.240] SetErrorMode (uMode=0x1) returned 0x0 [0200.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.241] GetFileType (hFile=0x18c) returned 0x1 [0200.241] SetErrorMode (uMode=0x0) returned 0x1 [0200.241] GetFileType (hFile=0x18c) returned 0x1 [0200.241] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa8 [0200.241] ReadFile (in: hFile=0x18c, lpBuffer=0x270eb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x270eb50*, lpNumberOfBytesRead=0x27e6e8*=0xa8, lpOverlapped=0x0) returned 1 [0200.242] CloseHandle (hObject=0x18c) returned 1 [0200.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x6a [0200.243] SetErrorMode (uMode=0x1) returned 0x0 [0200.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3308b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3308b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0200.243] SetErrorMode (uMode=0x0) returned 0x1 [0200.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x6a [0200.341] SetErrorMode (uMode=0x1) returned 0x0 [0200.341] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.345] SetErrorMode (uMode=0x0) returned 0x1 [0200.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png", lpFilePart=0x0) returned 0x6a [0200.347] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png")) returned 0 [0200.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x6b [0200.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x6b [0200.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x6b [0200.356] SetErrorMode (uMode=0x1) returned 0x0 [0200.356] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.357] GetFileType (hFile=0x18c) returned 0x1 [0200.357] SetErrorMode (uMode=0x0) returned 0x1 [0200.357] GetFileType (hFile=0x18c) returned 0x1 [0200.357] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa5 [0200.357] ReadFile (in: hFile=0x18c, lpBuffer=0x276ec30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276ec30*, lpNumberOfBytesRead=0x27e6e8*=0xa5, lpOverlapped=0x0) returned 1 [0200.358] CloseHandle (hObject=0x18c) returned 1 [0200.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x6b [0200.359] SetErrorMode (uMode=0x1) returned 0x0 [0200.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0200.359] SetErrorMode (uMode=0x0) returned 0x1 [0200.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x6b [0200.498] SetErrorMode (uMode=0x1) returned 0x0 [0200.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.503] SetErrorMode (uMode=0x0) returned 0x1 [0200.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png", lpFilePart=0x0) returned 0x6b [0200.504] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png")) returned 0 [0200.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x67 [0200.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x67 [0200.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x67 [0200.513] SetErrorMode (uMode=0x1) returned 0x0 [0200.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.514] GetFileType (hFile=0x18c) returned 0x1 [0200.514] SetErrorMode (uMode=0x0) returned 0x1 [0200.514] GetFileType (hFile=0x18c) returned 0x1 [0200.514] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa6 [0200.514] ReadFile (in: hFile=0x18c, lpBuffer=0x27cedb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cedb0*, lpNumberOfBytesRead=0x27e6e8*=0xa6, lpOverlapped=0x0) returned 1 [0200.515] CloseHandle (hObject=0x18c) returned 1 [0200.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x67 [0200.516] SetErrorMode (uMode=0x1) returned 0x0 [0200.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1 [0200.516] SetErrorMode (uMode=0x0) returned 0x1 [0200.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x67 [0200.615] SetErrorMode (uMode=0x1) returned 0x0 [0200.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.620] SetErrorMode (uMode=0x0) returned 0x1 [0200.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png", lpFilePart=0x0) returned 0x67 [0200.621] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png")) returned 0 [0200.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x68 [0200.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x68 [0200.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x68 [0200.627] SetErrorMode (uMode=0x1) returned 0x0 [0200.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.627] GetFileType (hFile=0x18c) returned 0x1 [0200.627] SetErrorMode (uMode=0x0) returned 0x1 [0200.627] GetFileType (hFile=0x18c) returned 0x1 [0200.627] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa8 [0200.627] ReadFile (in: hFile=0x18c, lpBuffer=0x282eeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x282eeb8*, lpNumberOfBytesRead=0x27e6e8*=0xa8, lpOverlapped=0x0) returned 1 [0200.628] CloseHandle (hObject=0x18c) returned 1 [0200.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x68 [0200.629] SetErrorMode (uMode=0x1) returned 0x0 [0200.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0200.629] SetErrorMode (uMode=0x0) returned 0x1 [0200.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x68 [0200.728] SetErrorMode (uMode=0x1) returned 0x0 [0200.729] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.739] SetErrorMode (uMode=0x0) returned 0x1 [0200.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png", lpFilePart=0x0) returned 0x68 [0200.742] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png")) returned 0 [0200.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", lpFilePart=0x0) returned 0x5f [0200.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", lpFilePart=0x0) returned 0x5f [0200.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", lpFilePart=0x0) returned 0x5f [0200.769] SetErrorMode (uMode=0x1) returned 0x0 [0200.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.769] GetFileType (hFile=0x18c) returned 0x1 [0200.769] SetErrorMode (uMode=0x0) returned 0x1 [0200.769] GetFileType (hFile=0x18c) returned 0x1 [0200.769] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x83 [0200.769] ReadFile (in: hFile=0x18c, lpBuffer=0x288ef20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x288ef20*, lpNumberOfBytesRead=0x27e6e8*=0x83, lpOverlapped=0x0) returned 1 [0200.770] CloseHandle (hObject=0x18c) returned 1 [0200.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", lpFilePart=0x0) returned 0x5f [0200.771] SetErrorMode (uMode=0x1) returned 0x0 [0200.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83)) returned 1 [0200.772] SetErrorMode (uMode=0x0) returned 0x1 [0200.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", lpFilePart=0x0) returned 0x5f [0200.895] SetErrorMode (uMode=0x1) returned 0x0 [0200.895] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.899] SetErrorMode (uMode=0x0) returned 0x1 [0200.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png", lpFilePart=0x0) returned 0x5f [0200.900] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png")) returned 0 [0200.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", lpFilePart=0x0) returned 0x64 [0200.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", lpFilePart=0x0) returned 0x64 [0200.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", lpFilePart=0x0) returned 0x64 [0200.907] SetErrorMode (uMode=0x1) returned 0x0 [0200.907] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0200.907] GetFileType (hFile=0x18c) returned 0x1 [0200.907] SetErrorMode (uMode=0x0) returned 0x1 [0200.907] GetFileType (hFile=0x18c) returned 0x1 [0200.907] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x91 [0200.907] ReadFile (in: hFile=0x18c, lpBuffer=0x28eedf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28eedf0*, lpNumberOfBytesRead=0x27e6e8*=0x91, lpOverlapped=0x0) returned 1 [0200.908] CloseHandle (hObject=0x18c) returned 1 [0200.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", lpFilePart=0x0) returned 0x64 [0200.909] SetErrorMode (uMode=0x1) returned 0x0 [0200.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1 [0200.909] SetErrorMode (uMode=0x0) returned 0x1 [0201.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", lpFilePart=0x0) returned 0x64 [0201.010] SetErrorMode (uMode=0x1) returned 0x0 [0201.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.018] SetErrorMode (uMode=0x0) returned 0x1 [0201.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png", lpFilePart=0x0) returned 0x64 [0201.020] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png")) returned 0 [0201.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", lpFilePart=0x0) returned 0x65 [0201.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", lpFilePart=0x0) returned 0x65 [0201.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", lpFilePart=0x0) returned 0x65 [0201.028] SetErrorMode (uMode=0x1) returned 0x0 [0201.029] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.029] GetFileType (hFile=0x18c) returned 0x1 [0201.029] SetErrorMode (uMode=0x0) returned 0x1 [0201.029] GetFileType (hFile=0x18c) returned 0x1 [0201.029] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8b [0201.029] ReadFile (in: hFile=0x18c, lpBuffer=0x274ee88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x274ee88*, lpNumberOfBytesRead=0x27e6e8*=0x8b, lpOverlapped=0x0) returned 1 [0201.031] CloseHandle (hObject=0x18c) returned 1 [0201.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", lpFilePart=0x0) returned 0x65 [0201.032] SetErrorMode (uMode=0x1) returned 0x0 [0201.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b)) returned 1 [0201.032] SetErrorMode (uMode=0x0) returned 0x1 [0201.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", lpFilePart=0x0) returned 0x65 [0201.164] SetErrorMode (uMode=0x1) returned 0x0 [0201.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.168] SetErrorMode (uMode=0x0) returned 0x1 [0201.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png", lpFilePart=0x0) returned 0x65 [0201.170] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png")) returned 0 [0201.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x65 [0201.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x65 [0201.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x65 [0201.177] SetErrorMode (uMode=0x1) returned 0x0 [0201.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.177] GetFileType (hFile=0x18c) returned 0x1 [0201.177] SetErrorMode (uMode=0x0) returned 0x1 [0201.177] GetFileType (hFile=0x18c) returned 0x1 [0201.177] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b9 [0201.177] ReadFile (in: hFile=0x18c, lpBuffer=0x27af040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27af040*, lpNumberOfBytesRead=0x27e6e8*=0x2b9, lpOverlapped=0x0) returned 1 [0201.179] CloseHandle (hObject=0x18c) returned 1 [0201.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x65 [0201.180] SetErrorMode (uMode=0x1) returned 0x0 [0201.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9)) returned 1 [0201.180] SetErrorMode (uMode=0x0) returned 0x1 [0201.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x65 [0201.273] SetErrorMode (uMode=0x1) returned 0x0 [0201.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.278] SetErrorMode (uMode=0x0) returned 0x1 [0201.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png", lpFilePart=0x0) returned 0x65 [0201.279] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png")) returned 0 [0201.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", lpFilePart=0x0) returned 0x62 [0201.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", lpFilePart=0x0) returned 0x62 [0201.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", lpFilePart=0x0) returned 0x62 [0201.286] SetErrorMode (uMode=0x1) returned 0x0 [0201.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.286] GetFileType (hFile=0x18c) returned 0x1 [0201.286] SetErrorMode (uMode=0x0) returned 0x1 [0201.286] GetFileType (hFile=0x18c) returned 0x1 [0201.286] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x41a [0201.287] ReadFile (in: hFile=0x18c, lpBuffer=0x2810240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2810240*, lpNumberOfBytesRead=0x27e6e8*=0x41a, lpOverlapped=0x0) returned 1 [0201.290] CloseHandle (hObject=0x18c) returned 1 [0201.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", lpFilePart=0x0) returned 0x62 [0201.290] SetErrorMode (uMode=0x1) returned 0x0 [0201.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a)) returned 1 [0201.290] SetErrorMode (uMode=0x0) returned 0x1 [0201.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", lpFilePart=0x0) returned 0x62 [0201.387] SetErrorMode (uMode=0x1) returned 0x0 [0201.387] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.396] SetErrorMode (uMode=0x0) returned 0x1 [0201.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png", lpFilePart=0x0) returned 0x62 [0201.398] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png")) returned 0 [0201.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x64 [0201.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x64 [0201.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x64 [0201.407] SetErrorMode (uMode=0x1) returned 0x0 [0201.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.408] GetFileType (hFile=0x18c) returned 0x1 [0201.408] SetErrorMode (uMode=0x0) returned 0x1 [0201.408] GetFileType (hFile=0x18c) returned 0x1 [0201.408] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x464 [0201.408] ReadFile (in: hFile=0x18c, lpBuffer=0x2872258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2872258*, lpNumberOfBytesRead=0x27e6e8*=0x464, lpOverlapped=0x0) returned 1 [0201.410] CloseHandle (hObject=0x18c) returned 1 [0201.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x64 [0201.410] SetErrorMode (uMode=0x1) returned 0x0 [0201.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3eef8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3eef8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a1371c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1 [0201.411] SetErrorMode (uMode=0x0) returned 0x1 [0201.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x64 [0201.516] SetErrorMode (uMode=0x1) returned 0x0 [0201.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.521] SetErrorMode (uMode=0x0) returned 0x1 [0201.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png", lpFilePart=0x0) returned 0x64 [0201.522] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png")) returned 0 [0201.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", lpFilePart=0x0) returned 0x61 [0201.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", lpFilePart=0x0) returned 0x61 [0201.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", lpFilePart=0x0) returned 0x61 [0201.529] SetErrorMode (uMode=0x1) returned 0x0 [0201.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.529] GetFileType (hFile=0x18c) returned 0x1 [0201.529] SetErrorMode (uMode=0x0) returned 0x1 [0201.530] GetFileType (hFile=0x18c) returned 0x1 [0201.530] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x357 [0201.530] ReadFile (in: hFile=0x18c, lpBuffer=0x28d4650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d4650*, lpNumberOfBytesRead=0x27e6e8*=0x357, lpOverlapped=0x0) returned 1 [0201.531] CloseHandle (hObject=0x18c) returned 1 [0201.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", lpFilePart=0x0) returned 0x61 [0201.532] SetErrorMode (uMode=0x1) returned 0x0 [0201.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357)) returned 1 [0201.532] SetErrorMode (uMode=0x0) returned 0x1 [0201.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", lpFilePart=0x0) returned 0x61 [0201.636] SetErrorMode (uMode=0x1) returned 0x0 [0201.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.641] SetErrorMode (uMode=0x0) returned 0x1 [0201.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png", lpFilePart=0x0) returned 0x61 [0201.642] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png")) returned 0 [0201.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x66 [0201.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x66 [0201.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x66 [0201.647] SetErrorMode (uMode=0x1) returned 0x0 [0201.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.647] GetFileType (hFile=0x18c) returned 0x1 [0201.647] SetErrorMode (uMode=0x0) returned 0x1 [0201.647] GetFileType (hFile=0x18c) returned 0x1 [0201.648] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b9 [0201.648] ReadFile (in: hFile=0x18c, lpBuffer=0x27363a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27363a0*, lpNumberOfBytesRead=0x27e6e8*=0x2b9, lpOverlapped=0x0) returned 1 [0201.649] CloseHandle (hObject=0x18c) returned 1 [0201.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x66 [0201.650] SetErrorMode (uMode=0x1) returned 0x0 [0201.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9)) returned 1 [0201.650] SetErrorMode (uMode=0x0) returned 0x1 [0201.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x66 [0201.744] SetErrorMode (uMode=0x1) returned 0x0 [0201.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.773] SetErrorMode (uMode=0x0) returned 0x1 [0201.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png", lpFilePart=0x0) returned 0x66 [0201.775] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png")) returned 0 [0201.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", lpFilePart=0x0) returned 0x63 [0201.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", lpFilePart=0x0) returned 0x63 [0201.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", lpFilePart=0x0) returned 0x63 [0201.783] SetErrorMode (uMode=0x1) returned 0x0 [0201.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.784] GetFileType (hFile=0x18c) returned 0x1 [0201.784] SetErrorMode (uMode=0x0) returned 0x1 [0201.784] GetFileType (hFile=0x18c) returned 0x1 [0201.784] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x417 [0201.784] ReadFile (in: hFile=0x18c, lpBuffer=0x2797b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2797b58*, lpNumberOfBytesRead=0x27e6e8*=0x417, lpOverlapped=0x0) returned 1 [0201.786] CloseHandle (hObject=0x18c) returned 1 [0201.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", lpFilePart=0x0) returned 0x63 [0201.787] SetErrorMode (uMode=0x1) returned 0x0 [0201.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba43b24d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba43b24d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0aabc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417)) returned 1 [0201.787] SetErrorMode (uMode=0x0) returned 0x1 [0201.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", lpFilePart=0x0) returned 0x63 [0201.917] SetErrorMode (uMode=0x1) returned 0x0 [0201.917] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.922] SetErrorMode (uMode=0x0) returned 0x1 [0201.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png", lpFilePart=0x0) returned 0x63 [0201.923] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png")) returned 0 [0201.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x65 [0201.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x65 [0201.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x65 [0201.929] SetErrorMode (uMode=0x1) returned 0x0 [0201.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0201.930] GetFileType (hFile=0x18c) returned 0x1 [0201.930] SetErrorMode (uMode=0x0) returned 0x1 [0201.930] GetFileType (hFile=0x18c) returned 0x1 [0201.930] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x45f [0201.930] ReadFile (in: hFile=0x18c, lpBuffer=0x27f9b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27f9b88*, lpNumberOfBytesRead=0x27e6e8*=0x45f, lpOverlapped=0x0) returned 1 [0201.931] CloseHandle (hObject=0x18c) returned 1 [0201.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x65 [0201.932] SetErrorMode (uMode=0x1) returned 0x0 [0201.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4613ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4613ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f)) returned 1 [0201.932] SetErrorMode (uMode=0x0) returned 0x1 [0202.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x65 [0202.031] SetErrorMode (uMode=0x1) returned 0x0 [0202.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.035] SetErrorMode (uMode=0x0) returned 0x1 [0202.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png", lpFilePart=0x0) returned 0x65 [0202.036] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png")) returned 0 [0202.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", lpFilePart=0x0) returned 0x62 [0202.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", lpFilePart=0x0) returned 0x62 [0202.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", lpFilePart=0x0) returned 0x62 [0202.046] SetErrorMode (uMode=0x1) returned 0x0 [0202.046] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.046] GetFileType (hFile=0x18c) returned 0x1 [0202.046] SetErrorMode (uMode=0x0) returned 0x1 [0202.046] GetFileType (hFile=0x18c) returned 0x1 [0202.046] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x358 [0202.046] ReadFile (in: hFile=0x18c, lpBuffer=0x285bf50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x285bf50*, lpNumberOfBytesRead=0x27e6e8*=0x358, lpOverlapped=0x0) returned 1 [0202.048] CloseHandle (hObject=0x18c) returned 1 [0202.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", lpFilePart=0x0) returned 0x62 [0202.049] SetErrorMode (uMode=0x1) returned 0x0 [0202.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358)) returned 1 [0202.049] SetErrorMode (uMode=0x0) returned 0x1 [0202.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", lpFilePart=0x0) returned 0x62 [0202.200] SetErrorMode (uMode=0x1) returned 0x0 [0202.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.207] SetErrorMode (uMode=0x0) returned 0x1 [0202.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png", lpFilePart=0x0) returned 0x62 [0202.208] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png")) returned 0 [0202.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", lpFilePart=0x0) returned 0x5b [0202.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", lpFilePart=0x0) returned 0x5b [0202.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", lpFilePart=0x0) returned 0x5b [0202.216] SetErrorMode (uMode=0x1) returned 0x0 [0202.216] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.219] GetFileType (hFile=0x18c) returned 0x1 [0202.219] SetErrorMode (uMode=0x0) returned 0x1 [0202.219] GetFileType (hFile=0x18c) returned 0x1 [0202.219] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4af [0202.219] ReadFile (in: hFile=0x18c, lpBuffer=0x28bd940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28bd940*, lpNumberOfBytesRead=0x27e6e8*=0x4af, lpOverlapped=0x0) returned 1 [0202.222] CloseHandle (hObject=0x18c) returned 1 [0202.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", lpFilePart=0x0) returned 0x5b [0202.222] SetErrorMode (uMode=0x1) returned 0x0 [0202.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4af)) returned 1 [0202.223] SetErrorMode (uMode=0x0) returned 0x1 [0202.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", lpFilePart=0x0) returned 0x5b [0202.322] SetErrorMode (uMode=0x1) returned 0x0 [0202.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.327] SetErrorMode (uMode=0x0) returned 0x1 [0202.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png", lpFilePart=0x0) returned 0x5b [0202.328] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png")) returned 0 [0202.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", lpFilePart=0x0) returned 0x5b [0202.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", lpFilePart=0x0) returned 0x5b [0202.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", lpFilePart=0x0) returned 0x5b [0202.333] SetErrorMode (uMode=0x1) returned 0x0 [0202.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.333] GetFileType (hFile=0x18c) returned 0x1 [0202.333] SetErrorMode (uMode=0x0) returned 0x1 [0202.333] GetFileType (hFile=0x18c) returned 0x1 [0202.333] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd8f [0202.333] ReadFile (in: hFile=0x18c, lpBuffer=0x271eca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x271eca0*, lpNumberOfBytesRead=0x27e6e8*=0xd8f, lpOverlapped=0x0) returned 1 [0202.335] CloseHandle (hObject=0x18c) returned 1 [0202.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", lpFilePart=0x0) returned 0x5b [0202.336] SetErrorMode (uMode=0x1) returned 0x0 [0202.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8f)) returned 1 [0202.336] SetErrorMode (uMode=0x0) returned 0x1 [0202.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", lpFilePart=0x0) returned 0x5b [0202.435] SetErrorMode (uMode=0x1) returned 0x0 [0202.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.446] SetErrorMode (uMode=0x0) returned 0x1 [0202.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png", lpFilePart=0x0) returned 0x5b [0202.448] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png")) returned 0 [0202.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", lpFilePart=0x0) returned 0x5b [0202.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", lpFilePart=0x0) returned 0x5b [0202.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", lpFilePart=0x0) returned 0x5b [0202.458] SetErrorMode (uMode=0x1) returned 0x0 [0202.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.467] GetFileType (hFile=0x18c) returned 0x1 [0202.467] SetErrorMode (uMode=0x0) returned 0x1 [0202.467] GetFileType (hFile=0x18c) returned 0x1 [0202.467] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd33 [0202.467] ReadFile (in: hFile=0x18c, lpBuffer=0x2783c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2783c98*, lpNumberOfBytesRead=0x27e6e8*=0xd33, lpOverlapped=0x0) returned 1 [0202.468] CloseHandle (hObject=0x18c) returned 1 [0202.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", lpFilePart=0x0) returned 0x5b [0202.469] SetErrorMode (uMode=0x1) returned 0x0 [0202.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba298338, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba298338, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd33)) returned 1 [0202.470] SetErrorMode (uMode=0x0) returned 0x1 [0202.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", lpFilePart=0x0) returned 0x5b [0202.601] SetErrorMode (uMode=0x1) returned 0x0 [0202.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.606] SetErrorMode (uMode=0x0) returned 0x1 [0202.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png", lpFilePart=0x0) returned 0x5b [0202.607] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png")) returned 0 [0202.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", lpFilePart=0x0) returned 0x59 [0202.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", lpFilePart=0x0) returned 0x59 [0202.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", lpFilePart=0x0) returned 0x59 [0202.614] SetErrorMode (uMode=0x1) returned 0x0 [0202.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.615] GetFileType (hFile=0x18c) returned 0x1 [0202.615] SetErrorMode (uMode=0x0) returned 0x1 [0202.615] GetFileType (hFile=0x18c) returned 0x1 [0202.615] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd5d [0202.615] ReadFile (in: hFile=0x18c, lpBuffer=0x27e81d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e81d8*, lpNumberOfBytesRead=0x27e6e8*=0xd5d, lpOverlapped=0x0) returned 1 [0202.616] CloseHandle (hObject=0x18c) returned 1 [0202.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", lpFilePart=0x0) returned 0x59 [0202.617] SetErrorMode (uMode=0x1) returned 0x0 [0202.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd5d)) returned 1 [0202.617] SetErrorMode (uMode=0x0) returned 0x1 [0202.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", lpFilePart=0x0) returned 0x59 [0202.728] SetErrorMode (uMode=0x1) returned 0x0 [0202.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.731] SetErrorMode (uMode=0x0) returned 0x1 [0202.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png", lpFilePart=0x0) returned 0x59 [0202.733] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png")) returned 0 [0202.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x0) returned 0x55 [0202.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x0) returned 0x55 [0202.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x0) returned 0x55 [0202.740] SetErrorMode (uMode=0x1) returned 0x0 [0202.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.741] GetFileType (hFile=0x18c) returned 0x1 [0202.741] SetErrorMode (uMode=0x0) returned 0x1 [0202.741] GetFileType (hFile=0x18c) returned 0x1 [0202.741] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xdc [0202.741] ReadFile (in: hFile=0x18c, lpBuffer=0x284bb48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x284bb48*, lpNumberOfBytesRead=0x27e6e8*=0xdc, lpOverlapped=0x0) returned 1 [0202.742] CloseHandle (hObject=0x18c) returned 1 [0202.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x0) returned 0x55 [0202.743] SetErrorMode (uMode=0x1) returned 0x0 [0202.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0202.743] SetErrorMode (uMode=0x0) returned 0x1 [0202.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x0) returned 0x55 [0202.916] SetErrorMode (uMode=0x1) returned 0x0 [0202.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.920] SetErrorMode (uMode=0x0) returned 0x1 [0202.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x0) returned 0x55 [0202.922] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png")) returned 0 [0202.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", lpFilePart=0x0) returned 0x59 [0202.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", lpFilePart=0x0) returned 0x59 [0202.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", lpFilePart=0x0) returned 0x59 [0202.930] SetErrorMode (uMode=0x1) returned 0x0 [0202.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0202.930] GetFileType (hFile=0x18c) returned 0x1 [0202.930] SetErrorMode (uMode=0x0) returned 0x1 [0202.930] GetFileType (hFile=0x18c) returned 0x1 [0202.930] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcd9 [0202.930] ReadFile (in: hFile=0x18c, lpBuffer=0x28aa898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28aa898*, lpNumberOfBytesRead=0x27e6e8*=0xcd9, lpOverlapped=0x0) returned 1 [0202.961] CloseHandle (hObject=0x18c) returned 1 [0202.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", lpFilePart=0x0) returned 0x59 [0202.962] SetErrorMode (uMode=0x1) returned 0x0 [0202.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcd9)) returned 1 [0202.962] SetErrorMode (uMode=0x0) returned 0x1 [0203.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", lpFilePart=0x0) returned 0x59 [0203.099] SetErrorMode (uMode=0x1) returned 0x0 [0203.099] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.104] SetErrorMode (uMode=0x0) returned 0x1 [0203.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png", lpFilePart=0x0) returned 0x59 [0203.106] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png")) returned 0 [0203.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", lpFilePart=0x0) returned 0x5f [0203.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", lpFilePart=0x0) returned 0x5f [0203.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", lpFilePart=0x0) returned 0x5f [0203.112] SetErrorMode (uMode=0x1) returned 0x0 [0203.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.113] GetFileType (hFile=0x18c) returned 0x1 [0203.113] SetErrorMode (uMode=0x0) returned 0x1 [0203.113] GetFileType (hFile=0x18c) returned 0x1 [0203.113] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb43 [0203.114] ReadFile (in: hFile=0x18c, lpBuffer=0x290f5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x290f5c0*, lpNumberOfBytesRead=0x27e6e8*=0xb43, lpOverlapped=0x0) returned 1 [0203.115] CloseHandle (hObject=0x18c) returned 1 [0203.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", lpFilePart=0x0) returned 0x5f [0203.116] SetErrorMode (uMode=0x1) returned 0x0 [0203.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0bdc79c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb43)) returned 1 [0203.116] SetErrorMode (uMode=0x0) returned 0x1 [0203.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", lpFilePart=0x0) returned 0x5f [0203.226] SetErrorMode (uMode=0x1) returned 0x0 [0203.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.233] SetErrorMode (uMode=0x0) returned 0x1 [0203.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png", lpFilePart=0x0) returned 0x5f [0203.235] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png")) returned 0 [0203.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", lpFilePart=0x0) returned 0x59 [0203.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", lpFilePart=0x0) returned 0x59 [0203.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", lpFilePart=0x0) returned 0x59 [0203.245] SetErrorMode (uMode=0x1) returned 0x0 [0203.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.245] GetFileType (hFile=0x18c) returned 0x1 [0203.245] SetErrorMode (uMode=0x0) returned 0x1 [0203.245] GetFileType (hFile=0x18c) returned 0x1 [0203.245] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd3c [0203.246] ReadFile (in: hFile=0x18c, lpBuffer=0x2772e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2772e68*, lpNumberOfBytesRead=0x27e6e8*=0xd3c, lpOverlapped=0x0) returned 1 [0203.248] CloseHandle (hObject=0x18c) returned 1 [0203.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", lpFilePart=0x0) returned 0x59 [0203.249] SetErrorMode (uMode=0x1) returned 0x0 [0203.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1 [0203.249] SetErrorMode (uMode=0x0) returned 0x1 [0203.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", lpFilePart=0x0) returned 0x59 [0203.371] SetErrorMode (uMode=0x1) returned 0x0 [0203.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.376] SetErrorMode (uMode=0x0) returned 0x1 [0203.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png", lpFilePart=0x0) returned 0x59 [0203.377] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png")) returned 0 [0203.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", lpFilePart=0x0) returned 0x59 [0203.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", lpFilePart=0x0) returned 0x59 [0203.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", lpFilePart=0x0) returned 0x59 [0203.383] SetErrorMode (uMode=0x1) returned 0x0 [0203.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.384] GetFileType (hFile=0x18c) returned 0x1 [0203.384] SetErrorMode (uMode=0x0) returned 0x1 [0203.384] GetFileType (hFile=0x18c) returned 0x1 [0203.384] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd37 [0203.384] ReadFile (in: hFile=0x18c, lpBuffer=0x27d7540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d7540*, lpNumberOfBytesRead=0x27e6e8*=0xd37, lpOverlapped=0x0) returned 1 [0203.386] CloseHandle (hObject=0x18c) returned 1 [0203.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", lpFilePart=0x0) returned 0x59 [0203.387] SetErrorMode (uMode=0x1) returned 0x0 [0203.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd37)) returned 1 [0203.387] SetErrorMode (uMode=0x0) returned 0x1 [0203.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", lpFilePart=0x0) returned 0x59 [0203.507] SetErrorMode (uMode=0x1) returned 0x0 [0203.507] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.512] SetErrorMode (uMode=0x0) returned 0x1 [0203.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png", lpFilePart=0x0) returned 0x59 [0203.513] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png")) returned 0 [0203.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x0) returned 0x57 [0203.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x0) returned 0x57 [0203.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x0) returned 0x57 [0203.519] SetErrorMode (uMode=0x1) returned 0x0 [0203.519] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.520] GetFileType (hFile=0x18c) returned 0x1 [0203.520] SetErrorMode (uMode=0x0) returned 0x1 [0203.520] GetFileType (hFile=0x18c) returned 0x1 [0203.520] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xce4 [0203.520] ReadFile (in: hFile=0x18c, lpBuffer=0x283b9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283b9e0*, lpNumberOfBytesRead=0x27e6e8*=0xce4, lpOverlapped=0x0) returned 1 [0203.522] CloseHandle (hObject=0x18c) returned 1 [0203.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x0) returned 0x57 [0203.523] SetErrorMode (uMode=0x1) returned 0x0 [0203.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4)) returned 1 [0203.523] SetErrorMode (uMode=0x0) returned 0x1 [0203.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x0) returned 0x57 [0203.620] SetErrorMode (uMode=0x1) returned 0x0 [0203.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.628] SetErrorMode (uMode=0x0) returned 0x1 [0203.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x0) returned 0x57 [0203.631] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png")) returned 0 [0203.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x64 [0203.641] SetErrorMode (uMode=0x1) returned 0x0 [0203.641] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0203.644] GetFileType (hFile=0x18c) returned 0x1 [0203.644] SetErrorMode (uMode=0x0) returned 0x1 [0203.644] GetFileType (hFile=0x18c) returned 0x1 [0203.645] WriteFile (in: hFile=0x18c, lpBuffer=0x28afd28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28afd28*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0203.647] WriteFile (in: hFile=0x18c, lpBuffer=0x28afd28*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x28afd28*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0203.647] CloseHandle (hObject=0x18c) returned 1 [0203.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0203.649] SetErrorMode (uMode=0x1) returned 0x0 [0203.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0203.651] GetFileType (hFile=0x18c) returned 0x1 [0203.651] SetErrorMode (uMode=0x0) returned 0x1 [0203.651] GetFileType (hFile=0x18c) returned 0x1 [0203.667] WriteFile (in: hFile=0x18c, lpBuffer=0x28c5e58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x28c5e58*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0203.669] CloseHandle (hObject=0x18c) returned 1 [0203.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x3e [0203.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x3e [0203.670] SetErrorMode (uMode=0x1) returned 0x0 [0203.670] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0203.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0203.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0203.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0203.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0203.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0203.672] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0203.672] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0203.672] SetErrorMode (uMode=0x0) returned 0x1 [0203.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x3e [0203.672] SetErrorMode (uMode=0x1) returned 0x0 [0203.672] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0203.672] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0203.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0203.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0203.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0203.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0203.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0203.673] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0203.673] SetErrorMode (uMode=0x0) returned 0x1 [0203.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0203.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0203.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0203.674] SetErrorMode (uMode=0x1) returned 0x0 [0203.674] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.675] GetFileType (hFile=0x18c) returned 0x1 [0203.675] SetErrorMode (uMode=0x0) returned 0x1 [0203.675] GetFileType (hFile=0x18c) returned 0x1 [0203.675] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x2141 [0203.675] ReadFile (in: hFile=0x18c, lpBuffer=0x28ce238, nNumberOfBytesToRead=0x2141, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28ce238*, lpNumberOfBytesRead=0x27e788*=0x2141, lpOverlapped=0x0) returned 1 [0203.677] CloseHandle (hObject=0x18c) returned 1 [0203.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0203.678] SetErrorMode (uMode=0x1) returned 0x0 [0203.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141)) returned 1 [0203.678] SetErrorMode (uMode=0x0) returned 0x1 [0203.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0203.829] SetErrorMode (uMode=0x1) returned 0x0 [0203.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.834] SetErrorMode (uMode=0x0) returned 0x1 [0203.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0203.835] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png")) returned 0 [0203.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0203.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0203.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0203.843] SetErrorMode (uMode=0x1) returned 0x0 [0203.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.844] GetFileType (hFile=0x18c) returned 0x1 [0203.844] SetErrorMode (uMode=0x0) returned 0x1 [0203.844] GetFileType (hFile=0x18c) returned 0x1 [0203.844] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1d07 [0203.844] ReadFile (in: hFile=0x18c, lpBuffer=0x273c7d8, nNumberOfBytesToRead=0x1d07, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x273c7d8*, lpNumberOfBytesRead=0x27e788*=0x1d07, lpOverlapped=0x0) returned 1 [0203.846] CloseHandle (hObject=0x18c) returned 1 [0203.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0203.847] SetErrorMode (uMode=0x1) returned 0x0 [0203.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07)) returned 1 [0203.847] SetErrorMode (uMode=0x0) returned 0x1 [0203.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0203.955] SetErrorMode (uMode=0x1) returned 0x0 [0203.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.962] SetErrorMode (uMode=0x0) returned 0x1 [0203.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x0) returned 0x47 [0203.964] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png")) returned 0 [0203.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0203.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0203.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0203.974] SetErrorMode (uMode=0x1) returned 0x0 [0203.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0203.974] GetFileType (hFile=0x18c) returned 0x1 [0203.974] SetErrorMode (uMode=0x0) returned 0x1 [0203.974] GetFileType (hFile=0x18c) returned 0x1 [0203.975] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1816 [0203.975] ReadFile (in: hFile=0x18c, lpBuffer=0x27a6518, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27a6518*, lpNumberOfBytesRead=0x27e788*=0x1816, lpOverlapped=0x0) returned 1 [0203.976] CloseHandle (hObject=0x18c) returned 1 [0203.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0203.978] SetErrorMode (uMode=0x1) returned 0x0 [0203.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0203.978] SetErrorMode (uMode=0x0) returned 0x1 [0204.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0204.079] SetErrorMode (uMode=0x1) returned 0x0 [0204.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.083] SetErrorMode (uMode=0x0) returned 0x1 [0204.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x0) returned 0x47 [0204.085] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png")) returned 0 [0204.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0204.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0204.098] SetErrorMode (uMode=0x1) returned 0x0 [0204.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0204.099] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0204.100] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0204.100] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0204.100] SetErrorMode (uMode=0x0) returned 0x1 [0204.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", lpFilePart=0x0) returned 0x44 [0204.101] SetErrorMode (uMode=0x1) returned 0x0 [0204.101] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0204.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0204.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0204.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0204.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0204.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1 [0204.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0204.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0204.102] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0204.102] SetErrorMode (uMode=0x0) returned 0x1 [0204.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", lpFilePart=0x0) returned 0x50 [0204.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", lpFilePart=0x0) returned 0x50 [0204.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", lpFilePart=0x0) returned 0x50 [0204.103] SetErrorMode (uMode=0x1) returned 0x0 [0204.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.104] GetFileType (hFile=0x18c) returned 0x1 [0204.104] SetErrorMode (uMode=0x0) returned 0x1 [0204.104] GetFileType (hFile=0x18c) returned 0x1 [0204.104] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x86a [0204.104] ReadFile (in: hFile=0x18c, lpBuffer=0x2811b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2811b20*, lpNumberOfBytesRead=0x27e6e8*=0x86a, lpOverlapped=0x0) returned 1 [0204.105] CloseHandle (hObject=0x18c) returned 1 [0204.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", lpFilePart=0x0) returned 0x50 [0204.106] SetErrorMode (uMode=0x1) returned 0x0 [0204.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a)) returned 1 [0204.106] SetErrorMode (uMode=0x0) returned 0x1 [0204.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", lpFilePart=0x0) returned 0x50 [0204.259] SetErrorMode (uMode=0x1) returned 0x0 [0204.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.263] SetErrorMode (uMode=0x0) returned 0x1 [0204.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html", lpFilePart=0x0) returned 0x50 [0204.265] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html")) returned 0 [0204.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0204.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0204.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0204.271] SetErrorMode (uMode=0x1) returned 0x0 [0204.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.272] GetFileType (hFile=0x18c) returned 0x1 [0204.272] SetErrorMode (uMode=0x0) returned 0x1 [0204.272] GetFileType (hFile=0x18c) returned 0x1 [0204.272] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3ed [0204.272] ReadFile (in: hFile=0x18c, lpBuffer=0x2873c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2873c60*, lpNumberOfBytesRead=0x27e6e8*=0x3ed, lpOverlapped=0x0) returned 1 [0204.273] CloseHandle (hObject=0x18c) returned 1 [0204.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0204.274] SetErrorMode (uMode=0x1) returned 0x0 [0204.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed)) returned 1 [0204.274] SetErrorMode (uMode=0x0) returned 0x1 [0204.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0204.391] SetErrorMode (uMode=0x1) returned 0x0 [0204.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.397] SetErrorMode (uMode=0x0) returned 0x1 [0204.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4f [0204.398] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml")) returned 0 [0204.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", lpFilePart=0x0) returned 0x52 [0204.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", lpFilePart=0x0) returned 0x52 [0204.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", lpFilePart=0x0) returned 0x52 [0204.404] SetErrorMode (uMode=0x1) returned 0x0 [0204.404] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.405] GetFileType (hFile=0x18c) returned 0x1 [0204.405] SetErrorMode (uMode=0x0) returned 0x1 [0204.405] GetFileType (hFile=0x18c) returned 0x1 [0204.405] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x271c [0204.405] ReadFile (in: hFile=0x18c, lpBuffer=0x28d3698, nNumberOfBytesToRead=0x271c, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d3698*, lpNumberOfBytesRead=0x27e6e8*=0x271c, lpOverlapped=0x0) returned 1 [0204.409] CloseHandle (hObject=0x18c) returned 1 [0204.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", lpFilePart=0x0) returned 0x52 [0204.411] SetErrorMode (uMode=0x1) returned 0x0 [0204.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c)) returned 1 [0204.411] SetErrorMode (uMode=0x0) returned 0x1 [0204.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", lpFilePart=0x0) returned 0x52 [0204.550] SetErrorMode (uMode=0x1) returned 0x0 [0204.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.554] SetErrorMode (uMode=0x0) returned 0x1 [0204.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html", lpFilePart=0x0) returned 0x52 [0204.555] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html")) returned 0 [0204.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x52 [0204.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x52 [0204.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x52 [0204.562] SetErrorMode (uMode=0x1) returned 0x0 [0204.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.563] GetFileType (hFile=0x18c) returned 0x1 [0204.563] SetErrorMode (uMode=0x0) returned 0x1 [0204.563] GetFileType (hFile=0x18c) returned 0x1 [0204.563] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcfe [0204.563] ReadFile (in: hFile=0x18c, lpBuffer=0x27450a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27450a0*, lpNumberOfBytesRead=0x27e6e8*=0xcfe, lpOverlapped=0x0) returned 1 [0204.565] CloseHandle (hObject=0x18c) returned 1 [0204.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x52 [0204.566] SetErrorMode (uMode=0x1) returned 0x0 [0204.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe)) returned 1 [0204.566] SetErrorMode (uMode=0x0) returned 0x1 [0204.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x52 [0204.691] SetErrorMode (uMode=0x1) returned 0x0 [0204.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.696] SetErrorMode (uMode=0x0) returned 0x1 [0204.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x52 [0204.697] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html")) returned 0 [0204.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0204.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0204.704] SetErrorMode (uMode=0x1) returned 0x0 [0204.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0204.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0204.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1 [0204.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0204.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0204.705] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0204.705] SetErrorMode (uMode=0x0) returned 0x1 [0204.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x48 [0204.705] SetErrorMode (uMode=0x1) returned 0x0 [0204.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0204.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0204.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1 [0204.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0204.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0204.706] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0204.706] SetErrorMode (uMode=0x0) returned 0x1 [0204.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x0) returned 0x53 [0204.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x0) returned 0x53 [0204.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x0) returned 0x53 [0204.707] SetErrorMode (uMode=0x1) returned 0x0 [0204.707] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.708] GetFileType (hFile=0x18c) returned 0x1 [0204.708] SetErrorMode (uMode=0x0) returned 0x1 [0204.709] GetFileType (hFile=0x18c) returned 0x1 [0204.709] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xb92 [0204.709] ReadFile (in: hFile=0x18c, lpBuffer=0x27aa4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27aa4b0*, lpNumberOfBytesRead=0x27e648*=0xb92, lpOverlapped=0x0) returned 1 [0204.711] CloseHandle (hObject=0x18c) returned 1 [0204.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x0) returned 0x53 [0204.711] SetErrorMode (uMode=0x1) returned 0x0 [0204.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92)) returned 1 [0204.711] SetErrorMode (uMode=0x0) returned 0x1 [0204.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x0) returned 0x53 [0204.834] SetErrorMode (uMode=0x1) returned 0x0 [0204.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.843] SetErrorMode (uMode=0x0) returned 0x1 [0204.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x0) returned 0x53 [0204.846] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css")) returned 0 [0204.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x0) returned 0x55 [0204.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x0) returned 0x55 [0204.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x0) returned 0x55 [0204.852] SetErrorMode (uMode=0x1) returned 0x0 [0204.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.852] GetFileType (hFile=0x18c) returned 0x1 [0204.852] SetErrorMode (uMode=0x0) returned 0x1 [0204.852] GetFileType (hFile=0x18c) returned 0x1 [0204.852] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xbc8 [0204.852] ReadFile (in: hFile=0x18c, lpBuffer=0x280ed40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x280ed40*, lpNumberOfBytesRead=0x27e648*=0xbc8, lpOverlapped=0x0) returned 1 [0204.854] CloseHandle (hObject=0x18c) returned 1 [0204.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x0) returned 0x55 [0204.855] SetErrorMode (uMode=0x1) returned 0x0 [0204.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0204.855] SetErrorMode (uMode=0x0) returned 0x1 [0204.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x0) returned 0x55 [0204.963] SetErrorMode (uMode=0x1) returned 0x0 [0204.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.975] SetErrorMode (uMode=0x0) returned 0x1 [0204.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x0) returned 0x55 [0204.978] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css")) returned 0 [0204.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x55 [0204.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x55 [0204.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x55 [0204.987] SetErrorMode (uMode=0x1) returned 0x0 [0204.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0204.989] GetFileType (hFile=0x18c) returned 0x1 [0204.989] SetErrorMode (uMode=0x0) returned 0x1 [0204.989] GetFileType (hFile=0x18c) returned 0x1 [0204.989] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x4e6 [0204.989] ReadFile (in: hFile=0x18c, lpBuffer=0x2872140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2872140*, lpNumberOfBytesRead=0x27e648*=0x4e6, lpOverlapped=0x0) returned 1 [0204.990] CloseHandle (hObject=0x18c) returned 1 [0204.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x55 [0204.992] SetErrorMode (uMode=0x1) returned 0x0 [0204.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6)) returned 1 [0204.992] SetErrorMode (uMode=0x0) returned 0x1 [0205.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x55 [0205.090] SetErrorMode (uMode=0x1) returned 0x0 [0205.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.094] SetErrorMode (uMode=0x0) returned 0x1 [0205.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x55 [0205.096] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css")) returned 0 [0205.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x62 [0205.103] SetErrorMode (uMode=0x1) returned 0x0 [0205.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0205.106] GetFileType (hFile=0x18c) returned 0x1 [0205.106] SetErrorMode (uMode=0x0) returned 0x1 [0205.106] GetFileType (hFile=0x18c) returned 0x1 [0205.107] WriteFile (in: hFile=0x18c, lpBuffer=0x28e2dc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28e2dc0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0205.109] WriteFile (in: hFile=0x18c, lpBuffer=0x28e2dc0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28e2dc0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0205.109] CloseHandle (hObject=0x18c) returned 1 [0205.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0205.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0205.110] SetErrorMode (uMode=0x1) returned 0x0 [0205.110] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0205.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1 [0205.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0205.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0205.111] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0205.111] SetErrorMode (uMode=0x0) returned 0x1 [0205.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x47 [0205.111] SetErrorMode (uMode=0x1) returned 0x0 [0205.111] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0205.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1 [0205.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0205.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0205.112] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0205.112] SetErrorMode (uMode=0x0) returned 0x1 [0205.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", lpFilePart=0x0) returned 0x53 [0205.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", lpFilePart=0x0) returned 0x53 [0205.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", lpFilePart=0x0) returned 0x53 [0205.113] SetErrorMode (uMode=0x1) returned 0x0 [0205.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.113] GetFileType (hFile=0x18c) returned 0x1 [0205.113] SetErrorMode (uMode=0x0) returned 0x1 [0205.113] GetFileType (hFile=0x18c) returned 0x1 [0205.113] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1aee4 [0205.114] ReadFile (in: hFile=0x18c, lpBuffer=0x3626a0e0, nNumberOfBytesToRead=0x1aee4, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x3626a0e0*, lpNumberOfBytesRead=0x27e648*=0x1aee4, lpOverlapped=0x0) returned 1 [0205.119] CloseHandle (hObject=0x18c) returned 1 [0205.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", lpFilePart=0x0) returned 0x53 [0205.121] SetErrorMode (uMode=0x1) returned 0x0 [0205.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4)) returned 1 [0205.121] SetErrorMode (uMode=0x0) returned 0x1 [0205.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", lpFilePart=0x0) returned 0x53 [0205.231] SetErrorMode (uMode=0x1) returned 0x0 [0205.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.238] SetErrorMode (uMode=0x0) returned 0x1 [0205.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js", lpFilePart=0x0) returned 0x53 [0205.239] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js")) returned 0 [0205.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x53 [0205.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x53 [0205.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x53 [0205.247] SetErrorMode (uMode=0x1) returned 0x0 [0205.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.250] GetFileType (hFile=0x18c) returned 0x1 [0205.250] SetErrorMode (uMode=0x0) returned 0x1 [0205.250] GetFileType (hFile=0x18c) returned 0x1 [0205.250] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x15a6 [0205.250] ReadFile (in: hFile=0x18c, lpBuffer=0x2747630, nNumberOfBytesToRead=0x15a6, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2747630*, lpNumberOfBytesRead=0x27e648*=0x15a6, lpOverlapped=0x0) returned 1 [0205.252] CloseHandle (hObject=0x18c) returned 1 [0205.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x53 [0205.253] SetErrorMode (uMode=0x1) returned 0x0 [0205.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6)) returned 1 [0205.253] SetErrorMode (uMode=0x0) returned 0x1 [0205.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x53 [0205.378] SetErrorMode (uMode=0x1) returned 0x0 [0205.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.382] SetErrorMode (uMode=0x0) returned 0x1 [0205.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x53 [0205.384] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js")) returned 0 [0205.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0205.391] SetErrorMode (uMode=0x1) returned 0x0 [0205.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0205.392] GetFileType (hFile=0x18c) returned 0x1 [0205.392] SetErrorMode (uMode=0x0) returned 0x1 [0205.392] GetFileType (hFile=0x18c) returned 0x1 [0205.394] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0aa8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27c0aa8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] WriteFile (in: hFile=0x18c, lpBuffer=0x27c0aa8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27c0aa8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0205.395] CloseHandle (hObject=0x18c) returned 1 [0205.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0205.396] SetErrorMode (uMode=0x1) returned 0x0 [0205.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0205.398] GetFileType (hFile=0x18c) returned 0x1 [0205.398] SetErrorMode (uMode=0x0) returned 0x1 [0205.398] GetFileType (hFile=0x18c) returned 0x1 [0205.400] WriteFile (in: hFile=0x18c, lpBuffer=0x27d6bd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27d6bd8*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0205.401] CloseHandle (hObject=0x18c) returned 1 [0205.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", lpFilePart=0x0) returned 0x45 [0205.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", lpFilePart=0x0) returned 0x45 [0205.402] SetErrorMode (uMode=0x1) returned 0x0 [0205.402] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0205.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc48435dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f4167c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5de162, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5de162, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f677dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4f9928, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4f9928, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba51fa87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba51fa87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc5d89a7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba545be6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba545be6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1 [0205.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1 [0205.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba62a420, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba62a420, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1 [0205.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69bcb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1 [0205.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1 [0205.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1 [0205.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1 [0205.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0 [0205.405] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0205.406] SetErrorMode (uMode=0x0) returned 0x1 [0205.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", lpFilePart=0x0) returned 0x45 [0205.406] SetErrorMode (uMode=0x1) returned 0x0 [0205.406] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0205.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc48435dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1 [0205.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f4167c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1 [0205.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5de162, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5de162, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f677dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1 [0205.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1 [0205.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4f9928, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4f9928, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba51fa87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba51fa87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc5d89a7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba545be6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba545be6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba62a420, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba62a420, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69bcb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1 [0205.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1 [0205.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0 [0205.409] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0205.409] SetErrorMode (uMode=0x0) returned 0x1 [0205.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", lpFilePart=0x0) returned 0x55 [0205.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", lpFilePart=0x0) returned 0x55 [0205.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", lpFilePart=0x0) returned 0x55 [0205.410] SetErrorMode (uMode=0x1) returned 0x0 [0205.410] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.411] GetFileType (hFile=0x18c) returned 0x1 [0205.411] SetErrorMode (uMode=0x0) returned 0x1 [0205.411] GetFileType (hFile=0x18c) returned 0x1 [0205.411] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1369 [0205.411] ReadFile (in: hFile=0x18c, lpBuffer=0x27e01c8, nNumberOfBytesToRead=0x1369, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e01c8*, lpNumberOfBytesRead=0x27e6e8*=0x1369, lpOverlapped=0x0) returned 1 [0205.420] CloseHandle (hObject=0x18c) returned 1 [0205.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", lpFilePart=0x0) returned 0x55 [0205.421] SetErrorMode (uMode=0x1) returned 0x0 [0205.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc48435dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1369)) returned 1 [0205.421] SetErrorMode (uMode=0x0) returned 0x1 [0205.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", lpFilePart=0x0) returned 0x55 [0205.532] SetErrorMode (uMode=0x1) returned 0x0 [0205.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.536] SetErrorMode (uMode=0x0) returned 0x1 [0205.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif", lpFilePart=0x0) returned 0x55 [0205.538] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif")) returned 0 [0205.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", lpFilePart=0x0) returned 0x58 [0205.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", lpFilePart=0x0) returned 0x58 [0205.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", lpFilePart=0x0) returned 0x58 [0205.543] SetErrorMode (uMode=0x1) returned 0x0 [0205.543] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.544] GetFileType (hFile=0x18c) returned 0x1 [0205.544] SetErrorMode (uMode=0x0) returned 0x1 [0205.545] GetFileType (hFile=0x18c) returned 0x1 [0205.545] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x125 [0205.545] ReadFile (in: hFile=0x18c, lpBuffer=0x2845a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2845a30*, lpNumberOfBytesRead=0x27e6e8*=0x125, lpOverlapped=0x0) returned 1 [0205.546] CloseHandle (hObject=0x18c) returned 1 [0205.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", lpFilePart=0x0) returned 0x58 [0205.546] SetErrorMode (uMode=0x1) returned 0x0 [0205.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f4167c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0205.547] SetErrorMode (uMode=0x0) returned 0x1 [0205.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", lpFilePart=0x0) returned 0x58 [0205.670] SetErrorMode (uMode=0x1) returned 0x0 [0205.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.674] SetErrorMode (uMode=0x0) returned 0x1 [0205.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png", lpFilePart=0x0) returned 0x58 [0205.676] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png")) returned 0 [0205.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", lpFilePart=0x0) returned 0x57 [0205.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", lpFilePart=0x0) returned 0x57 [0205.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", lpFilePart=0x0) returned 0x57 [0205.684] SetErrorMode (uMode=0x1) returned 0x0 [0205.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.684] GetFileType (hFile=0x18c) returned 0x1 [0205.684] SetErrorMode (uMode=0x0) returned 0x1 [0205.684] GetFileType (hFile=0x18c) returned 0x1 [0205.685] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1cf [0205.685] ReadFile (in: hFile=0x18c, lpBuffer=0x28a3960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a3960*, lpNumberOfBytesRead=0x27e6e8*=0x1cf, lpOverlapped=0x0) returned 1 [0205.686] CloseHandle (hObject=0x18c) returned 1 [0205.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", lpFilePart=0x0) returned 0x57 [0205.687] SetErrorMode (uMode=0x1) returned 0x0 [0205.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5de162, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5de162, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f677dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0205.687] SetErrorMode (uMode=0x0) returned 0x1 [0205.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", lpFilePart=0x0) returned 0x57 [0205.841] SetErrorMode (uMode=0x1) returned 0x0 [0205.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.845] SetErrorMode (uMode=0x0) returned 0x1 [0205.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png", lpFilePart=0x0) returned 0x57 [0205.846] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png")) returned 0 [0205.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", lpFilePart=0x0) returned 0x56 [0205.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", lpFilePart=0x0) returned 0x56 [0205.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", lpFilePart=0x0) returned 0x56 [0205.855] SetErrorMode (uMode=0x1) returned 0x0 [0205.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.856] GetFileType (hFile=0x18c) returned 0x1 [0205.856] SetErrorMode (uMode=0x0) returned 0x1 [0205.856] GetFileType (hFile=0x18c) returned 0x1 [0205.856] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x118 [0205.856] ReadFile (in: hFile=0x18c, lpBuffer=0x2902e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2902e40*, lpNumberOfBytesRead=0x27e6e8*=0x118, lpOverlapped=0x0) returned 1 [0205.857] CloseHandle (hObject=0x18c) returned 1 [0205.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", lpFilePart=0x0) returned 0x56 [0205.857] SetErrorMode (uMode=0x1) returned 0x0 [0205.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x118)) returned 1 [0205.857] SetErrorMode (uMode=0x0) returned 0x1 [0205.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", lpFilePart=0x0) returned 0x56 [0205.976] SetErrorMode (uMode=0x1) returned 0x0 [0205.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.982] SetErrorMode (uMode=0x0) returned 0x1 [0205.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png", lpFilePart=0x0) returned 0x56 [0205.983] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png")) returned 0 [0205.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", lpFilePart=0x0) returned 0x55 [0205.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", lpFilePart=0x0) returned 0x55 [0205.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", lpFilePart=0x0) returned 0x55 [0205.990] SetErrorMode (uMode=0x1) returned 0x0 [0205.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0205.991] GetFileType (hFile=0x18c) returned 0x1 [0205.991] SetErrorMode (uMode=0x0) returned 0x1 [0205.991] GetFileType (hFile=0x18c) returned 0x1 [0205.991] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1c3 [0205.991] ReadFile (in: hFile=0x18c, lpBuffer=0x2761e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2761e18*, lpNumberOfBytesRead=0x27e6e8*=0x1c3, lpOverlapped=0x0) returned 1 [0205.993] CloseHandle (hObject=0x18c) returned 1 [0205.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", lpFilePart=0x0) returned 0x55 [0205.993] SetErrorMode (uMode=0x1) returned 0x0 [0205.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0205.994] SetErrorMode (uMode=0x0) returned 0x1 [0206.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", lpFilePart=0x0) returned 0x55 [0206.106] SetErrorMode (uMode=0x1) returned 0x0 [0206.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.118] SetErrorMode (uMode=0x0) returned 0x1 [0206.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png", lpFilePart=0x0) returned 0x55 [0206.120] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png")) returned 0 [0206.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", lpFilePart=0x0) returned 0x54 [0206.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", lpFilePart=0x0) returned 0x54 [0206.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", lpFilePart=0x0) returned 0x54 [0206.131] SetErrorMode (uMode=0x1) returned 0x0 [0206.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0206.133] GetFileType (hFile=0x18c) returned 0x1 [0206.133] SetErrorMode (uMode=0x0) returned 0x1 [0206.133] GetFileType (hFile=0x18c) returned 0x1 [0206.133] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x112b [0206.133] ReadFile (in: hFile=0x18c, lpBuffer=0x27c1170, nNumberOfBytesToRead=0x112b, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c1170*, lpNumberOfBytesRead=0x27e6e8*=0x112b, lpOverlapped=0x0) returned 1 [0206.135] CloseHandle (hObject=0x18c) returned 1 [0206.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", lpFilePart=0x0) returned 0x54 [0206.136] SetErrorMode (uMode=0x1) returned 0x0 [0206.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x112b)) returned 1 [0206.136] SetErrorMode (uMode=0x0) returned 0x1 [0206.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", lpFilePart=0x0) returned 0x54 [0206.325] SetErrorMode (uMode=0x1) returned 0x0 [0206.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.330] SetErrorMode (uMode=0x0) returned 0x1 [0206.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png", lpFilePart=0x0) returned 0x54 [0206.331] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png")) returned 0 [0206.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", lpFilePart=0x0) returned 0x5b [0206.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", lpFilePart=0x0) returned 0x5b [0206.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", lpFilePart=0x0) returned 0x5b [0206.338] SetErrorMode (uMode=0x1) returned 0x0 [0206.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0206.339] GetFileType (hFile=0x18c) returned 0x1 [0206.339] SetErrorMode (uMode=0x0) returned 0x1 [0206.339] GetFileType (hFile=0x18c) returned 0x1 [0206.339] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfc [0206.339] ReadFile (in: hFile=0x18c, lpBuffer=0x2827268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2827268*, lpNumberOfBytesRead=0x27e6e8*=0xfc, lpOverlapped=0x0) returned 1 [0206.340] CloseHandle (hObject=0x18c) returned 1 [0206.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", lpFilePart=0x0) returned 0x5b [0206.341] SetErrorMode (uMode=0x1) returned 0x0 [0206.341] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4f9928, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4f9928, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0206.341] SetErrorMode (uMode=0x0) returned 0x1 [0206.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", lpFilePart=0x0) returned 0x5b [0206.455] SetErrorMode (uMode=0x1) returned 0x0 [0206.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.459] SetErrorMode (uMode=0x0) returned 0x1 [0206.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png", lpFilePart=0x0) returned 0x5b [0206.461] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png")) returned 0 [0206.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", lpFilePart=0x0) returned 0x5d [0206.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", lpFilePart=0x0) returned 0x5d [0206.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", lpFilePart=0x0) returned 0x5d [0206.471] SetErrorMode (uMode=0x1) returned 0x0 [0206.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0206.472] GetFileType (hFile=0x18c) returned 0x1 [0206.472] SetErrorMode (uMode=0x0) returned 0x1 [0206.472] GetFileType (hFile=0x18c) returned 0x1 [0206.472] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xba3 [0206.472] ReadFile (in: hFile=0x18c, lpBuffer=0x2885ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2885ce0*, lpNumberOfBytesRead=0x27e6e8*=0xba3, lpOverlapped=0x0) returned 1 [0206.474] CloseHandle (hObject=0x18c) returned 1 [0206.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", lpFilePart=0x0) returned 0x5d [0206.475] SetErrorMode (uMode=0x1) returned 0x0 [0206.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba51fa87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba51fa87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc5d89a7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3)) returned 1 [0206.475] SetErrorMode (uMode=0x0) returned 0x1 [0206.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", lpFilePart=0x0) returned 0x5d [0206.626] SetErrorMode (uMode=0x1) returned 0x0 [0206.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.631] SetErrorMode (uMode=0x0) returned 0x1 [0206.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png", lpFilePart=0x0) returned 0x5d [0206.633] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png")) returned 0 [0206.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", lpFilePart=0x0) returned 0x5b [0206.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", lpFilePart=0x0) returned 0x5b [0206.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", lpFilePart=0x0) returned 0x5b [0206.642] SetErrorMode (uMode=0x1) returned 0x0 [0206.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0206.642] GetFileType (hFile=0x18c) returned 0x1 [0206.642] SetErrorMode (uMode=0x0) returned 0x1 [0206.642] GetFileType (hFile=0x18c) returned 0x1 [0206.642] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb6e [0206.642] ReadFile (in: hFile=0x18c, lpBuffer=0x28ea1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ea1f0*, lpNumberOfBytesRead=0x27e6e8*=0xb6e, lpOverlapped=0x0) returned 1 [0206.645] CloseHandle (hObject=0x18c) returned 1 [0206.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", lpFilePart=0x0) returned 0x5b [0206.646] SetErrorMode (uMode=0x1) returned 0x0 [0206.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba545be6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba545be6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6e)) returned 1 [0206.646] SetErrorMode (uMode=0x0) returned 0x1 [0206.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", lpFilePart=0x0) returned 0x5b [0206.780] SetErrorMode (uMode=0x1) returned 0x0 [0206.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.784] SetErrorMode (uMode=0x0) returned 0x1 [0206.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png", lpFilePart=0x0) returned 0x5b [0206.786] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png")) returned 0 [0206.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x0) returned 0x51 [0206.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x0) returned 0x51 [0206.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x0) returned 0x51 [0206.792] SetErrorMode (uMode=0x1) returned 0x0 [0206.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0206.793] GetFileType (hFile=0x18c) returned 0x1 [0206.793] SetErrorMode (uMode=0x0) returned 0x1 [0206.793] GetFileType (hFile=0x18c) returned 0x1 [0206.794] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcaa [0206.794] ReadFile (in: hFile=0x18c, lpBuffer=0x274dbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x274dbb8*, lpNumberOfBytesRead=0x27e6e8*=0xcaa, lpOverlapped=0x0) returned 1 [0206.795] CloseHandle (hObject=0x18c) returned 1 [0206.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x0) returned 0x51 [0206.796] SetErrorMode (uMode=0x1) returned 0x0 [0206.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa)) returned 1 [0206.796] SetErrorMode (uMode=0x0) returned 0x1 [0206.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x0) returned 0x51 [0206.897] SetErrorMode (uMode=0x1) returned 0x0 [0206.897] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.903] SetErrorMode (uMode=0x0) returned 0x1 [0206.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x0) returned 0x51 [0206.906] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png")) returned 0 [0206.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", lpFilePart=0x0) returned 0x5c [0206.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", lpFilePart=0x0) returned 0x5c [0206.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", lpFilePart=0x0) returned 0x5c [0206.916] SetErrorMode (uMode=0x1) returned 0x0 [0206.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0206.917] GetFileType (hFile=0x18c) returned 0x1 [0206.917] SetErrorMode (uMode=0x0) returned 0x1 [0206.917] GetFileType (hFile=0x18c) returned 0x1 [0206.917] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x175c [0206.917] ReadFile (in: hFile=0x18c, lpBuffer=0x27b10f8, nNumberOfBytesToRead=0x175c, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27b10f8*, lpNumberOfBytesRead=0x27e6e8*=0x175c, lpOverlapped=0x0) returned 1 [0206.918] CloseHandle (hObject=0x18c) returned 1 [0206.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", lpFilePart=0x0) returned 0x5c [0206.919] SetErrorMode (uMode=0x1) returned 0x0 [0206.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1 [0206.919] SetErrorMode (uMode=0x0) returned 0x1 [0207.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", lpFilePart=0x0) returned 0x5c [0207.064] SetErrorMode (uMode=0x1) returned 0x0 [0207.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.069] SetErrorMode (uMode=0x0) returned 0x1 [0207.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png", lpFilePart=0x0) returned 0x5c [0207.070] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png")) returned 0 [0207.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", lpFilePart=0x0) returned 0x5e [0207.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", lpFilePart=0x0) returned 0x5e [0207.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", lpFilePart=0x0) returned 0x5e [0207.078] SetErrorMode (uMode=0x1) returned 0x0 [0207.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.079] GetFileType (hFile=0x18c) returned 0x1 [0207.079] SetErrorMode (uMode=0x0) returned 0x1 [0207.079] GetFileType (hFile=0x18c) returned 0x1 [0207.080] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x22ee [0207.080] ReadFile (in: hFile=0x18c, lpBuffer=0x2819860, nNumberOfBytesToRead=0x22ee, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2819860*, lpNumberOfBytesRead=0x27e6e8*=0x22ee, lpOverlapped=0x0) returned 1 [0207.081] CloseHandle (hObject=0x18c) returned 1 [0207.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", lpFilePart=0x0) returned 0x5e [0207.082] SetErrorMode (uMode=0x1) returned 0x0 [0207.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba62a420, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba62a420, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22ee)) returned 1 [0207.083] SetErrorMode (uMode=0x0) returned 0x1 [0207.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", lpFilePart=0x0) returned 0x5e [0207.193] SetErrorMode (uMode=0x1) returned 0x0 [0207.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.197] SetErrorMode (uMode=0x0) returned 0x1 [0207.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png", lpFilePart=0x0) returned 0x5e [0207.199] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png")) returned 0 [0207.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", lpFilePart=0x0) returned 0x51 [0207.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", lpFilePart=0x0) returned 0x51 [0207.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", lpFilePart=0x0) returned 0x51 [0207.203] SetErrorMode (uMode=0x1) returned 0x0 [0207.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.204] GetFileType (hFile=0x18c) returned 0x1 [0207.204] SetErrorMode (uMode=0x0) returned 0x1 [0207.204] GetFileType (hFile=0x18c) returned 0x1 [0207.204] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6a0 [0207.204] ReadFile (in: hFile=0x18c, lpBuffer=0x2887800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2887800*, lpNumberOfBytesRead=0x27e6e8*=0x6a0, lpOverlapped=0x0) returned 1 [0207.206] CloseHandle (hObject=0x18c) returned 1 [0207.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", lpFilePart=0x0) returned 0x51 [0207.206] SetErrorMode (uMode=0x1) returned 0x0 [0207.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69bcb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0207.207] SetErrorMode (uMode=0x0) returned 0x1 [0207.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", lpFilePart=0x0) returned 0x51 [0207.334] SetErrorMode (uMode=0x1) returned 0x0 [0207.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.339] SetErrorMode (uMode=0x0) returned 0x1 [0207.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif", lpFilePart=0x0) returned 0x51 [0207.340] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif")) returned 0 [0207.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", lpFilePart=0x0) returned 0x62 [0207.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", lpFilePart=0x0) returned 0x62 [0207.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", lpFilePart=0x0) returned 0x62 [0207.347] SetErrorMode (uMode=0x1) returned 0x0 [0207.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.349] GetFileType (hFile=0x18c) returned 0x1 [0207.349] SetErrorMode (uMode=0x0) returned 0x1 [0207.349] GetFileType (hFile=0x18c) returned 0x1 [0207.349] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb8d [0207.349] ReadFile (in: hFile=0x18c, lpBuffer=0x28e7730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e7730*, lpNumberOfBytesRead=0x27e6e8*=0xb8d, lpOverlapped=0x0) returned 1 [0207.350] CloseHandle (hObject=0x18c) returned 1 [0207.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", lpFilePart=0x0) returned 0x62 [0207.351] SetErrorMode (uMode=0x1) returned 0x0 [0207.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8d)) returned 1 [0207.352] SetErrorMode (uMode=0x0) returned 0x1 [0207.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", lpFilePart=0x0) returned 0x62 [0207.481] SetErrorMode (uMode=0x1) returned 0x0 [0207.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.489] SetErrorMode (uMode=0x0) returned 0x1 [0207.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png", lpFilePart=0x0) returned 0x62 [0207.491] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png")) returned 0 [0207.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", lpFilePart=0x0) returned 0x64 [0207.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", lpFilePart=0x0) returned 0x64 [0207.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", lpFilePart=0x0) returned 0x64 [0207.499] SetErrorMode (uMode=0x1) returned 0x0 [0207.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.501] GetFileType (hFile=0x18c) returned 0x1 [0207.501] SetErrorMode (uMode=0x0) returned 0x1 [0207.501] GetFileType (hFile=0x18c) returned 0x1 [0207.501] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbb7 [0207.501] ReadFile (in: hFile=0x18c, lpBuffer=0x274b750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x274b750*, lpNumberOfBytesRead=0x27e6e8*=0xbb7, lpOverlapped=0x0) returned 1 [0207.510] CloseHandle (hObject=0x18c) returned 1 [0207.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", lpFilePart=0x0) returned 0x64 [0207.511] SetErrorMode (uMode=0x1) returned 0x0 [0207.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb7)) returned 1 [0207.511] SetErrorMode (uMode=0x0) returned 0x1 [0207.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", lpFilePart=0x0) returned 0x64 [0207.654] SetErrorMode (uMode=0x1) returned 0x0 [0207.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.659] SetErrorMode (uMode=0x0) returned 0x1 [0207.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png", lpFilePart=0x0) returned 0x64 [0207.660] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png")) returned 0 [0207.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", lpFilePart=0x0) returned 0x62 [0207.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", lpFilePart=0x0) returned 0x62 [0207.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", lpFilePart=0x0) returned 0x62 [0207.666] SetErrorMode (uMode=0x1) returned 0x0 [0207.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.668] GetFileType (hFile=0x18c) returned 0x1 [0207.668] SetErrorMode (uMode=0x0) returned 0x1 [0207.668] GetFileType (hFile=0x18c) returned 0x1 [0207.668] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4f2 [0207.668] ReadFile (in: hFile=0x18c, lpBuffer=0x27aed58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27aed58*, lpNumberOfBytesRead=0x27e6e8*=0x4f2, lpOverlapped=0x0) returned 1 [0207.670] CloseHandle (hObject=0x18c) returned 1 [0207.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", lpFilePart=0x0) returned 0x62 [0207.671] SetErrorMode (uMode=0x1) returned 0x0 [0207.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2)) returned 1 [0207.671] SetErrorMode (uMode=0x0) returned 0x1 [0207.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", lpFilePart=0x0) returned 0x62 [0207.810] SetErrorMode (uMode=0x1) returned 0x0 [0207.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.815] SetErrorMode (uMode=0x0) returned 0x1 [0207.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png", lpFilePart=0x0) returned 0x62 [0207.817] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png")) returned 0 [0207.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0207.822] SetErrorMode (uMode=0x1) returned 0x0 [0207.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0207.823] GetFileType (hFile=0x18c) returned 0x1 [0207.823] SetErrorMode (uMode=0x0) returned 0x1 [0207.823] GetFileType (hFile=0x18c) returned 0x1 [0207.825] WriteFile (in: hFile=0x18c, lpBuffer=0x281fbc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x281fbc0*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0207.827] WriteFile (in: hFile=0x18c, lpBuffer=0x281fbc0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x281fbc0*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0207.827] CloseHandle (hObject=0x18c) returned 1 [0207.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0207.829] SetErrorMode (uMode=0x1) returned 0x0 [0207.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0207.831] GetFileType (hFile=0x18c) returned 0x1 [0207.831] SetErrorMode (uMode=0x0) returned 0x1 [0207.831] GetFileType (hFile=0x18c) returned 0x1 [0207.833] WriteFile (in: hFile=0x18c, lpBuffer=0x2835ce0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x2835ce0*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0207.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x3f [0207.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x3f [0207.836] SetErrorMode (uMode=0x1) returned 0x0 [0207.836] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0207.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0207.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0207.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0207.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0207.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0207.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0207.838] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0207.838] SetErrorMode (uMode=0x0) returned 0x1 [0207.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x3f [0207.838] SetErrorMode (uMode=0x1) returned 0x0 [0207.838] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0207.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0207.839] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0207.839] SetErrorMode (uMode=0x0) returned 0x1 [0207.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0207.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0207.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0207.840] SetErrorMode (uMode=0x1) returned 0x0 [0207.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.840] GetFileType (hFile=0x18c) returned 0x1 [0207.840] SetErrorMode (uMode=0x0) returned 0x1 [0207.841] GetFileType (hFile=0x18c) returned 0x1 [0207.841] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x7575 [0207.841] ReadFile (in: hFile=0x18c, lpBuffer=0x283e110, nNumberOfBytesToRead=0x7575, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x283e110*, lpNumberOfBytesRead=0x27e788*=0x7575, lpOverlapped=0x0) returned 1 [0207.843] CloseHandle (hObject=0x18c) returned 1 [0207.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0207.843] SetErrorMode (uMode=0x1) returned 0x0 [0207.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575)) returned 1 [0207.843] SetErrorMode (uMode=0x0) returned 0x1 [0207.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0207.946] SetErrorMode (uMode=0x1) returned 0x0 [0207.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.951] SetErrorMode (uMode=0x0) returned 0x1 [0207.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0207.952] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png")) returned 0 [0207.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x0) returned 0x48 [0207.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x0) returned 0x48 [0207.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x0) returned 0x48 [0207.959] SetErrorMode (uMode=0x1) returned 0x0 [0207.959] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0207.960] GetFileType (hFile=0x18c) returned 0x1 [0207.960] SetErrorMode (uMode=0x0) returned 0x1 [0207.960] GetFileType (hFile=0x18c) returned 0x1 [0207.960] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x2732 [0207.961] ReadFile (in: hFile=0x18c, lpBuffer=0x28d4230, nNumberOfBytesToRead=0x2732, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28d4230*, lpNumberOfBytesRead=0x27e788*=0x2732, lpOverlapped=0x0) returned 1 [0207.962] CloseHandle (hObject=0x18c) returned 1 [0207.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x0) returned 0x48 [0207.963] SetErrorMode (uMode=0x1) returned 0x0 [0207.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732)) returned 1 [0207.963] SetErrorMode (uMode=0x0) returned 0x1 [0208.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x0) returned 0x48 [0208.094] SetErrorMode (uMode=0x1) returned 0x0 [0208.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.098] SetErrorMode (uMode=0x0) returned 0x1 [0208.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x0) returned 0x48 [0208.100] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png")) returned 0 [0208.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x0) returned 0x48 [0208.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x0) returned 0x48 [0208.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x0) returned 0x48 [0208.106] SetErrorMode (uMode=0x1) returned 0x0 [0208.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0208.107] GetFileType (hFile=0x18c) returned 0x1 [0208.107] SetErrorMode (uMode=0x0) returned 0x1 [0208.107] GetFileType (hFile=0x18c) returned 0x1 [0208.107] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1816 [0208.107] ReadFile (in: hFile=0x18c, lpBuffer=0x273dce8, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x273dce8*, lpNumberOfBytesRead=0x27e788*=0x1816, lpOverlapped=0x0) returned 1 [0208.115] CloseHandle (hObject=0x18c) returned 1 [0208.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x0) returned 0x48 [0208.116] SetErrorMode (uMode=0x1) returned 0x0 [0208.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0208.117] SetErrorMode (uMode=0x0) returned 0x1 [0208.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x0) returned 0x48 [0208.254] SetErrorMode (uMode=0x1) returned 0x0 [0208.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.259] SetErrorMode (uMode=0x0) returned 0x1 [0208.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x0) returned 0x48 [0208.262] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png")) returned 0 [0208.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", lpFilePart=0x0) returned 0x45 [0208.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", lpFilePart=0x0) returned 0x45 [0208.270] SetErrorMode (uMode=0x1) returned 0x0 [0208.270] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0208.270] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.270] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0208.271] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0208.271] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0208.271] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0208.271] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1 [0208.271] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0 [0208.271] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0208.272] SetErrorMode (uMode=0x0) returned 0x1 [0208.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", lpFilePart=0x0) returned 0x45 [0208.272] SetErrorMode (uMode=0x1) returned 0x0 [0208.272] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0208.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1 [0208.273] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0 [0208.273] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0208.273] SetErrorMode (uMode=0x0) returned 0x1 [0208.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x50 [0208.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x50 [0208.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x50 [0208.273] SetErrorMode (uMode=0x1) returned 0x0 [0208.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0208.274] GetFileType (hFile=0x18c) returned 0x1 [0208.274] SetErrorMode (uMode=0x0) returned 0x1 [0208.274] GetFileType (hFile=0x18c) returned 0x1 [0208.274] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3dd [0208.274] ReadFile (in: hFile=0x18c, lpBuffer=0x27a8350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a8350*, lpNumberOfBytesRead=0x27e6e8*=0x3dd, lpOverlapped=0x0) returned 1 [0208.276] CloseHandle (hObject=0x18c) returned 1 [0208.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x50 [0208.276] SetErrorMode (uMode=0x1) returned 0x0 [0208.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd)) returned 1 [0208.276] SetErrorMode (uMode=0x0) returned 0x1 [0208.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x50 [0208.380] SetErrorMode (uMode=0x1) returned 0x0 [0208.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.390] SetErrorMode (uMode=0x0) returned 0x1 [0208.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x50 [0208.393] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml")) returned 0 [0208.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x53 [0208.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x53 [0208.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x53 [0208.401] SetErrorMode (uMode=0x1) returned 0x0 [0208.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0208.402] GetFileType (hFile=0x18c) returned 0x1 [0208.402] SetErrorMode (uMode=0x0) returned 0x1 [0208.402] GetFileType (hFile=0x18c) returned 0x1 [0208.402] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1910 [0208.403] ReadFile (in: hFile=0x18c, lpBuffer=0x2807fe8, nNumberOfBytesToRead=0x1910, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2807fe8*, lpNumberOfBytesRead=0x27e6e8*=0x1910, lpOverlapped=0x0) returned 1 [0208.404] CloseHandle (hObject=0x18c) returned 1 [0208.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x53 [0208.405] SetErrorMode (uMode=0x1) returned 0x0 [0208.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910)) returned 1 [0208.405] SetErrorMode (uMode=0x0) returned 0x1 [0208.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x53 [0208.520] SetErrorMode (uMode=0x1) returned 0x0 [0208.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.524] SetErrorMode (uMode=0x0) returned 0x1 [0208.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x53 [0208.526] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html")) returned 0 [0208.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", lpFilePart=0x0) returned 0x54 [0208.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", lpFilePart=0x0) returned 0x54 [0208.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", lpFilePart=0x0) returned 0x54 [0208.532] SetErrorMode (uMode=0x1) returned 0x0 [0208.532] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0208.532] GetFileType (hFile=0x18c) returned 0x1 [0208.532] SetErrorMode (uMode=0x0) returned 0x1 [0208.532] GetFileType (hFile=0x18c) returned 0x1 [0208.532] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd64 [0208.533] ReadFile (in: hFile=0x18c, lpBuffer=0x2872a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2872a08*, lpNumberOfBytesRead=0x27e6e8*=0xd64, lpOverlapped=0x0) returned 1 [0208.535] CloseHandle (hObject=0x18c) returned 1 [0208.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", lpFilePart=0x0) returned 0x54 [0208.536] SetErrorMode (uMode=0x1) returned 0x0 [0208.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64)) returned 1 [0208.536] SetErrorMode (uMode=0x0) returned 0x1 [0208.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", lpFilePart=0x0) returned 0x54 [0208.660] SetErrorMode (uMode=0x1) returned 0x0 [0208.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.665] SetErrorMode (uMode=0x0) returned 0x1 [0208.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html", lpFilePart=0x0) returned 0x54 [0208.666] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html")) returned 0 [0208.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x49 [0208.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x49 [0208.677] SetErrorMode (uMode=0x1) returned 0x0 [0208.677] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0208.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0208.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1 [0208.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0 [0208.678] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0208.679] SetErrorMode (uMode=0x0) returned 0x1 [0208.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x49 [0208.679] SetErrorMode (uMode=0x1) returned 0x0 [0208.679] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0208.679] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.679] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0208.679] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1 [0208.680] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0 [0208.680] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0208.680] SetErrorMode (uMode=0x0) returned 0x1 [0208.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x56 [0208.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x56 [0208.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x56 [0208.680] SetErrorMode (uMode=0x1) returned 0x0 [0208.681] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0208.682] GetFileType (hFile=0x18c) returned 0x1 [0208.682] SetErrorMode (uMode=0x0) returned 0x1 [0208.682] GetFileType (hFile=0x18c) returned 0x1 [0208.682] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x510 [0208.682] ReadFile (in: hFile=0x18c, lpBuffer=0x28d8768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28d8768*, lpNumberOfBytesRead=0x27e648*=0x510, lpOverlapped=0x0) returned 1 [0208.684] CloseHandle (hObject=0x18c) returned 1 [0208.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x56 [0208.685] SetErrorMode (uMode=0x1) returned 0x0 [0208.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0208.685] SetErrorMode (uMode=0x0) returned 0x1 [0208.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x56 [0208.869] SetErrorMode (uMode=0x1) returned 0x0 [0208.869] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.874] SetErrorMode (uMode=0x0) returned 0x1 [0208.876] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x56 [0208.876] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css")) returned 0 [0208.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", lpFilePart=0x0) returned 0x57 [0208.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", lpFilePart=0x0) returned 0x57 [0208.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", lpFilePart=0x0) returned 0x57 [0208.885] SetErrorMode (uMode=0x1) returned 0x0 [0208.885] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0208.885] GetFileType (hFile=0x18c) returned 0x1 [0208.885] SetErrorMode (uMode=0x0) returned 0x1 [0208.885] GetFileType (hFile=0x18c) returned 0x1 [0208.885] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x11b0 [0208.885] ReadFile (in: hFile=0x18c, lpBuffer=0x2739588, nNumberOfBytesToRead=0x11b0, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2739588*, lpNumberOfBytesRead=0x27e648*=0x11b0, lpOverlapped=0x0) returned 1 [0208.887] CloseHandle (hObject=0x18c) returned 1 [0208.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", lpFilePart=0x0) returned 0x57 [0208.888] SetErrorMode (uMode=0x1) returned 0x0 [0208.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0)) returned 1 [0208.888] SetErrorMode (uMode=0x0) returned 0x1 [0209.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", lpFilePart=0x0) returned 0x57 [0209.007] SetErrorMode (uMode=0x1) returned 0x0 [0209.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.012] SetErrorMode (uMode=0x0) returned 0x1 [0209.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css", lpFilePart=0x0) returned 0x57 [0209.014] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css")) returned 0 [0209.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x63 [0209.019] SetErrorMode (uMode=0x1) returned 0x0 [0209.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0209.021] GetFileType (hFile=0x18c) returned 0x1 [0209.021] SetErrorMode (uMode=0x0) returned 0x1 [0209.021] GetFileType (hFile=0x18c) returned 0x1 [0209.023] WriteFile (in: hFile=0x18c, lpBuffer=0x27b0430*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27b0430*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0209.025] WriteFile (in: hFile=0x18c, lpBuffer=0x27b0430*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27b0430*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0209.025] CloseHandle (hObject=0x18c) returned 1 [0209.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x48 [0209.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x48 [0209.026] SetErrorMode (uMode=0x1) returned 0x0 [0209.026] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0209.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1 [0209.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0 [0209.027] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0209.027] SetErrorMode (uMode=0x0) returned 0x1 [0209.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x48 [0209.027] SetErrorMode (uMode=0x1) returned 0x0 [0209.027] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0209.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.027] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1 [0209.028] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0 [0209.028] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0209.028] SetErrorMode (uMode=0x0) returned 0x1 [0209.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", lpFilePart=0x0) returned 0x55 [0209.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", lpFilePart=0x0) returned 0x55 [0209.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", lpFilePart=0x0) returned 0x55 [0209.028] SetErrorMode (uMode=0x1) returned 0x0 [0209.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.030] GetFileType (hFile=0x18c) returned 0x1 [0209.030] SetErrorMode (uMode=0x0) returned 0x1 [0209.030] GetFileType (hFile=0x18c) returned 0x1 [0209.030] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xd96c [0209.030] ReadFile (in: hFile=0x18c, lpBuffer=0x27b8158, nNumberOfBytesToRead=0xd96c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27b8158*, lpNumberOfBytesRead=0x27e648*=0xd96c, lpOverlapped=0x0) returned 1 [0209.033] CloseHandle (hObject=0x18c) returned 1 [0209.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", lpFilePart=0x0) returned 0x55 [0209.034] SetErrorMode (uMode=0x1) returned 0x0 [0209.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c)) returned 1 [0209.034] SetErrorMode (uMode=0x0) returned 0x1 [0209.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", lpFilePart=0x0) returned 0x55 [0209.147] SetErrorMode (uMode=0x1) returned 0x0 [0209.147] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.152] SetErrorMode (uMode=0x0) returned 0x1 [0209.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js", lpFilePart=0x0) returned 0x55 [0209.154] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js")) returned 0 [0209.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x62 [0209.162] SetErrorMode (uMode=0x1) returned 0x0 [0209.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0209.163] GetFileType (hFile=0x18c) returned 0x1 [0209.163] SetErrorMode (uMode=0x0) returned 0x1 [0209.163] GetFileType (hFile=0x18c) returned 0x1 [0209.165] WriteFile (in: hFile=0x18c, lpBuffer=0x2876b80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2876b80*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0209.167] CloseHandle (hObject=0x18c) returned 1 [0209.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0209.167] SetErrorMode (uMode=0x1) returned 0x0 [0209.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0209.170] GetFileType (hFile=0x18c) returned 0x1 [0209.170] SetErrorMode (uMode=0x0) returned 0x1 [0209.170] GetFileType (hFile=0x18c) returned 0x1 [0209.172] CloseHandle (hObject=0x18c) returned 1 [0209.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", lpFilePart=0x0) returned 0x46 [0209.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", lpFilePart=0x0) returned 0x46 [0209.172] SetErrorMode (uMode=0x1) returned 0x0 [0209.172] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="IN_SID~1")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb14c09c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb14c09c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc0a0d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbadc0a0d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1721fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="ON_DES~1")) returned 1 [0209.175] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaea5247, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaea5247, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1be4bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaecb3a6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaecb3a6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaef1505, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaef1505, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1 [0209.176] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1 [0209.177] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1 [0209.177] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1 [0209.177] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0 [0209.177] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0209.178] SetErrorMode (uMode=0x0) returned 0x1 [0209.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", lpFilePart=0x0) returned 0x46 [0209.178] SetErrorMode (uMode=0x1) returned 0x0 [0209.178] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="IN_SID~1")) returned 1 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb14c09c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb14c09c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc0a0d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbadc0a0d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1721fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1 [0209.179] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="ON_DES~1")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaea5247, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaea5247, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1be4bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaecb3a6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaecb3a6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaef1505, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaef1505, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1 [0209.180] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1 [0209.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1 [0209.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1 [0209.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1 [0209.181] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0 [0209.181] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0209.182] SetErrorMode (uMode=0x0) returned 0x1 [0209.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x0) returned 0x50 [0209.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x0) returned 0x50 [0209.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x0) returned 0x50 [0209.182] SetErrorMode (uMode=0x1) returned 0x0 [0209.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.183] GetFileType (hFile=0x18c) returned 0x1 [0209.183] SetErrorMode (uMode=0x0) returned 0x1 [0209.184] GetFileType (hFile=0x18c) returned 0x1 [0209.184] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd86 [0209.184] ReadFile (in: hFile=0x18c, lpBuffer=0x28975e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28975e0*, lpNumberOfBytesRead=0x27e6e8*=0xd86, lpOverlapped=0x0) returned 1 [0209.185] CloseHandle (hObject=0x18c) returned 1 [0209.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x0) returned 0x50 [0209.186] SetErrorMode (uMode=0x1) returned 0x0 [0209.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86)) returned 1 [0209.187] SetErrorMode (uMode=0x0) returned 0x1 [0209.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x0) returned 0x50 [0209.356] SetErrorMode (uMode=0x1) returned 0x0 [0209.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.364] SetErrorMode (uMode=0x0) returned 0x1 [0209.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x0) returned 0x50 [0209.365] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png")) returned 0 [0209.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", lpFilePart=0x0) returned 0x54 [0209.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", lpFilePart=0x0) returned 0x54 [0209.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", lpFilePart=0x0) returned 0x54 [0209.373] SetErrorMode (uMode=0x1) returned 0x0 [0209.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.374] GetFileType (hFile=0x18c) returned 0x1 [0209.374] SetErrorMode (uMode=0x0) returned 0x1 [0209.374] GetFileType (hFile=0x18c) returned 0x1 [0209.374] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbf7 [0209.374] ReadFile (in: hFile=0x18c, lpBuffer=0x28eeb08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28eeb08*, lpNumberOfBytesRead=0x27e6e8*=0xbf7, lpOverlapped=0x0) returned 1 [0209.376] CloseHandle (hObject=0x18c) returned 1 [0209.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", lpFilePart=0x0) returned 0x54 [0209.378] SetErrorMode (uMode=0x1) returned 0x0 [0209.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb14c09c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb14c09c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf7)) returned 1 [0209.378] SetErrorMode (uMode=0x0) returned 0x1 [0209.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", lpFilePart=0x0) returned 0x54 [0209.496] SetErrorMode (uMode=0x1) returned 0x0 [0209.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.502] SetErrorMode (uMode=0x0) returned 0x1 [0209.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png", lpFilePart=0x0) returned 0x54 [0209.503] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png")) returned 0 [0209.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x0) returned 0x53 [0209.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x0) returned 0x53 [0209.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x0) returned 0x53 [0209.513] SetErrorMode (uMode=0x1) returned 0x0 [0209.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.513] GetFileType (hFile=0x18c) returned 0x1 [0209.513] SetErrorMode (uMode=0x0) returned 0x1 [0209.513] GetFileType (hFile=0x18c) returned 0x1 [0209.513] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbf9 [0209.513] ReadFile (in: hFile=0x18c, lpBuffer=0x27525b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27525b0*, lpNumberOfBytesRead=0x27e6e8*=0xbf9, lpOverlapped=0x0) returned 1 [0209.515] CloseHandle (hObject=0x18c) returned 1 [0209.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x0) returned 0x53 [0209.516] SetErrorMode (uMode=0x1) returned 0x0 [0209.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9)) returned 1 [0209.516] SetErrorMode (uMode=0x0) returned 0x1 [0209.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x0) returned 0x53 [0209.638] SetErrorMode (uMode=0x1) returned 0x0 [0209.638] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.642] SetErrorMode (uMode=0x0) returned 0x1 [0209.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x0) returned 0x53 [0209.644] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png")) returned 0 [0209.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", lpFilePart=0x0) returned 0x54 [0209.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", lpFilePart=0x0) returned 0x54 [0209.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", lpFilePart=0x0) returned 0x54 [0209.649] SetErrorMode (uMode=0x1) returned 0x0 [0209.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.650] GetFileType (hFile=0x18c) returned 0x1 [0209.650] SetErrorMode (uMode=0x0) returned 0x1 [0209.650] GetFileType (hFile=0x18c) returned 0x1 [0209.651] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb57 [0209.651] ReadFile (in: hFile=0x18c, lpBuffer=0x2797c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2797c90*, lpNumberOfBytesRead=0x27e6e8*=0xb57, lpOverlapped=0x0) returned 1 [0209.653] CloseHandle (hObject=0x18c) returned 1 [0209.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", lpFilePart=0x0) returned 0x54 [0209.654] SetErrorMode (uMode=0x1) returned 0x0 [0209.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc0a0d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbadc0a0d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1721fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57)) returned 1 [0209.654] SetErrorMode (uMode=0x0) returned 0x1 [0209.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", lpFilePart=0x0) returned 0x54 [0209.794] SetErrorMode (uMode=0x1) returned 0x0 [0209.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.803] SetErrorMode (uMode=0x0) returned 0x1 [0209.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png", lpFilePart=0x0) returned 0x54 [0209.805] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png")) returned 0 [0209.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", lpFilePart=0x0) returned 0x55 [0209.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", lpFilePart=0x0) returned 0x55 [0209.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", lpFilePart=0x0) returned 0x55 [0209.817] SetErrorMode (uMode=0x1) returned 0x0 [0209.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.818] GetFileType (hFile=0x18c) returned 0x1 [0209.818] SetErrorMode (uMode=0x0) returned 0x1 [0209.818] GetFileType (hFile=0x18c) returned 0x1 [0209.818] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbca [0209.818] ReadFile (in: hFile=0x18c, lpBuffer=0x27fe718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27fe718*, lpNumberOfBytesRead=0x27e6e8*=0xbca, lpOverlapped=0x0) returned 1 [0209.820] CloseHandle (hObject=0x18c) returned 1 [0209.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", lpFilePart=0x0) returned 0x55 [0209.823] SetErrorMode (uMode=0x1) returned 0x0 [0209.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbca)) returned 1 [0209.823] SetErrorMode (uMode=0x0) returned 0x1 [0209.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", lpFilePart=0x0) returned 0x55 [0209.934] SetErrorMode (uMode=0x1) returned 0x0 [0209.934] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.938] SetErrorMode (uMode=0x0) returned 0x1 [0209.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png", lpFilePart=0x0) returned 0x55 [0209.940] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png")) returned 0 [0209.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", lpFilePart=0x0) returned 0x54 [0209.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", lpFilePart=0x0) returned 0x54 [0209.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", lpFilePart=0x0) returned 0x54 [0209.948] SetErrorMode (uMode=0x1) returned 0x0 [0209.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0209.949] GetFileType (hFile=0x18c) returned 0x1 [0209.949] SetErrorMode (uMode=0x0) returned 0x1 [0209.949] GetFileType (hFile=0x18c) returned 0x1 [0209.949] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbd3 [0209.949] ReadFile (in: hFile=0x18c, lpBuffer=0x2865370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2865370*, lpNumberOfBytesRead=0x27e6e8*=0xbd3, lpOverlapped=0x0) returned 1 [0209.951] CloseHandle (hObject=0x18c) returned 1 [0209.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", lpFilePart=0x0) returned 0x54 [0209.952] SetErrorMode (uMode=0x1) returned 0x0 [0209.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaea5247, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaea5247, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1be4bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd3)) returned 1 [0209.952] SetErrorMode (uMode=0x0) returned 0x1 [0210.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", lpFilePart=0x0) returned 0x54 [0210.100] SetErrorMode (uMode=0x1) returned 0x0 [0210.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.105] SetErrorMode (uMode=0x0) returned 0x1 [0210.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png", lpFilePart=0x0) returned 0x54 [0210.107] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png")) returned 0 [0210.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", lpFilePart=0x0) returned 0x55 [0210.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", lpFilePart=0x0) returned 0x55 [0210.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", lpFilePart=0x0) returned 0x55 [0210.116] SetErrorMode (uMode=0x1) returned 0x0 [0210.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.116] GetFileType (hFile=0x18c) returned 0x1 [0210.116] SetErrorMode (uMode=0x0) returned 0x1 [0210.116] GetFileType (hFile=0x18c) returned 0x1 [0210.116] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb11 [0210.116] ReadFile (in: hFile=0x18c, lpBuffer=0x28cc030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28cc030*, lpNumberOfBytesRead=0x27e6e8*=0xb11, lpOverlapped=0x0) returned 1 [0210.119] CloseHandle (hObject=0x18c) returned 1 [0210.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", lpFilePart=0x0) returned 0x55 [0210.120] SetErrorMode (uMode=0x1) returned 0x0 [0210.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaecb3a6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaecb3a6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb11)) returned 1 [0210.120] SetErrorMode (uMode=0x0) returned 0x1 [0210.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", lpFilePart=0x0) returned 0x55 [0210.240] SetErrorMode (uMode=0x1) returned 0x0 [0210.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.246] SetErrorMode (uMode=0x0) returned 0x1 [0210.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png", lpFilePart=0x0) returned 0x55 [0210.249] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png")) returned 0 [0210.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", lpFilePart=0x0) returned 0x54 [0210.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", lpFilePart=0x0) returned 0x54 [0210.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", lpFilePart=0x0) returned 0x54 [0210.259] SetErrorMode (uMode=0x1) returned 0x0 [0210.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.267] GetFileType (hFile=0x18c) returned 0x1 [0210.267] SetErrorMode (uMode=0x0) returned 0x1 [0210.267] GetFileType (hFile=0x18c) returned 0x1 [0210.267] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbf2 [0210.267] ReadFile (in: hFile=0x18c, lpBuffer=0x27329a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27329a8*, lpNumberOfBytesRead=0x27e6e8*=0xbf2, lpOverlapped=0x0) returned 1 [0210.271] CloseHandle (hObject=0x18c) returned 1 [0210.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", lpFilePart=0x0) returned 0x54 [0210.272] SetErrorMode (uMode=0x1) returned 0x0 [0210.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaef1505, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaef1505, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf2)) returned 1 [0210.272] SetErrorMode (uMode=0x0) returned 0x1 [0210.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", lpFilePart=0x0) returned 0x54 [0210.372] SetErrorMode (uMode=0x1) returned 0x0 [0210.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.378] SetErrorMode (uMode=0x0) returned 0x1 [0210.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png", lpFilePart=0x0) returned 0x54 [0210.379] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png")) returned 0 [0210.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x0) returned 0x53 [0210.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x0) returned 0x53 [0210.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x0) returned 0x53 [0210.390] SetErrorMode (uMode=0x1) returned 0x0 [0210.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.390] GetFileType (hFile=0x18c) returned 0x1 [0210.391] SetErrorMode (uMode=0x0) returned 0x1 [0210.391] GetFileType (hFile=0x18c) returned 0x1 [0210.391] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbf6 [0210.391] ReadFile (in: hFile=0x18c, lpBuffer=0x27996f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27996f0*, lpNumberOfBytesRead=0x27e6e8*=0xbf6, lpOverlapped=0x0) returned 1 [0210.393] CloseHandle (hObject=0x18c) returned 1 [0210.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x0) returned 0x53 [0210.393] SetErrorMode (uMode=0x1) returned 0x0 [0210.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6)) returned 1 [0210.393] SetErrorMode (uMode=0x0) returned 0x1 [0210.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x0) returned 0x53 [0210.523] SetErrorMode (uMode=0x1) returned 0x0 [0210.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.527] SetErrorMode (uMode=0x0) returned 0x1 [0210.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x0) returned 0x53 [0210.528] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png")) returned 0 [0210.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", lpFilePart=0x0) returned 0x54 [0210.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", lpFilePart=0x0) returned 0x54 [0210.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", lpFilePart=0x0) returned 0x54 [0210.533] SetErrorMode (uMode=0x1) returned 0x0 [0210.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.535] GetFileType (hFile=0x18c) returned 0x1 [0210.535] SetErrorMode (uMode=0x0) returned 0x1 [0210.535] GetFileType (hFile=0x18c) returned 0x1 [0210.535] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb46 [0210.535] ReadFile (in: hFile=0x18c, lpBuffer=0x2800528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2800528*, lpNumberOfBytesRead=0x27e6e8*=0xb46, lpOverlapped=0x0) returned 1 [0210.536] CloseHandle (hObject=0x18c) returned 1 [0210.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", lpFilePart=0x0) returned 0x54 [0210.537] SetErrorMode (uMode=0x1) returned 0x0 [0210.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb46)) returned 1 [0210.537] SetErrorMode (uMode=0x0) returned 0x1 [0210.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", lpFilePart=0x0) returned 0x54 [0210.655] SetErrorMode (uMode=0x1) returned 0x0 [0210.655] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.660] SetErrorMode (uMode=0x0) returned 0x1 [0210.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png", lpFilePart=0x0) returned 0x54 [0210.662] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png")) returned 0 [0210.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", lpFilePart=0x0) returned 0x54 [0210.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", lpFilePart=0x0) returned 0x54 [0210.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", lpFilePart=0x0) returned 0x54 [0210.670] SetErrorMode (uMode=0x1) returned 0x0 [0210.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.671] GetFileType (hFile=0x18c) returned 0x1 [0210.671] SetErrorMode (uMode=0x0) returned 0x1 [0210.671] GetFileType (hFile=0x18c) returned 0x1 [0210.671] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbf6 [0210.671] ReadFile (in: hFile=0x18c, lpBuffer=0x2866f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2866f68*, lpNumberOfBytesRead=0x27e6e8*=0xbf6, lpOverlapped=0x0) returned 1 [0210.675] CloseHandle (hObject=0x18c) returned 1 [0210.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", lpFilePart=0x0) returned 0x54 [0210.676] SetErrorMode (uMode=0x1) returned 0x0 [0210.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6)) returned 1 [0210.677] SetErrorMode (uMode=0x0) returned 0x1 [0210.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", lpFilePart=0x0) returned 0x54 [0210.819] SetErrorMode (uMode=0x1) returned 0x0 [0210.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.824] SetErrorMode (uMode=0x0) returned 0x1 [0210.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png", lpFilePart=0x0) returned 0x54 [0210.825] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png")) returned 0 [0210.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x0) returned 0x53 [0210.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x0) returned 0x53 [0210.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x0) returned 0x53 [0210.831] SetErrorMode (uMode=0x1) returned 0x0 [0210.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.832] GetFileType (hFile=0x18c) returned 0x1 [0210.832] SetErrorMode (uMode=0x0) returned 0x1 [0210.832] GetFileType (hFile=0x18c) returned 0x1 [0210.832] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc05 [0210.832] ReadFile (in: hFile=0x18c, lpBuffer=0x28cdce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28cdce8*, lpNumberOfBytesRead=0x27e6e8*=0xc05, lpOverlapped=0x0) returned 1 [0210.833] CloseHandle (hObject=0x18c) returned 1 [0210.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x0) returned 0x53 [0210.834] SetErrorMode (uMode=0x1) returned 0x0 [0210.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05)) returned 1 [0210.835] SetErrorMode (uMode=0x0) returned 0x1 [0210.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x0) returned 0x53 [0210.965] SetErrorMode (uMode=0x1) returned 0x0 [0210.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.969] SetErrorMode (uMode=0x0) returned 0x1 [0210.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x0) returned 0x53 [0210.971] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png")) returned 0 [0210.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", lpFilePart=0x0) returned 0x54 [0210.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", lpFilePart=0x0) returned 0x54 [0210.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", lpFilePart=0x0) returned 0x54 [0210.977] SetErrorMode (uMode=0x1) returned 0x0 [0210.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0210.977] GetFileType (hFile=0x18c) returned 0x1 [0210.977] SetErrorMode (uMode=0x0) returned 0x1 [0210.977] GetFileType (hFile=0x18c) returned 0x1 [0210.977] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb58 [0210.978] ReadFile (in: hFile=0x18c, lpBuffer=0x2734800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2734800*, lpNumberOfBytesRead=0x27e6e8*=0xb58, lpOverlapped=0x0) returned 1 [0210.979] CloseHandle (hObject=0x18c) returned 1 [0210.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", lpFilePart=0x0) returned 0x54 [0210.980] SetErrorMode (uMode=0x1) returned 0x0 [0210.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb58)) returned 1 [0210.980] SetErrorMode (uMode=0x0) returned 0x1 [0211.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", lpFilePart=0x0) returned 0x54 [0211.099] SetErrorMode (uMode=0x1) returned 0x0 [0211.099] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.103] SetErrorMode (uMode=0x0) returned 0x1 [0211.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png", lpFilePart=0x0) returned 0x54 [0211.104] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png")) returned 0 [0211.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", lpFilePart=0x0) returned 0x56 [0211.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", lpFilePart=0x0) returned 0x56 [0211.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", lpFilePart=0x0) returned 0x56 [0211.110] SetErrorMode (uMode=0x1) returned 0x0 [0211.110] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0211.111] GetFileType (hFile=0x18c) returned 0x1 [0211.111] SetErrorMode (uMode=0x0) returned 0x1 [0211.111] GetFileType (hFile=0x18c) returned 0x1 [0211.111] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc5a [0211.111] ReadFile (in: hFile=0x18c, lpBuffer=0x2797fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2797fe0*, lpNumberOfBytesRead=0x27e6e8*=0xc5a, lpOverlapped=0x0) returned 1 [0211.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", lpFilePart=0x0) returned 0x56 [0211.113] SetErrorMode (uMode=0x1) returned 0x0 [0211.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc5a)) returned 1 [0211.114] SetErrorMode (uMode=0x0) returned 0x1 [0211.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", lpFilePart=0x0) returned 0x56 [0211.260] SetErrorMode (uMode=0x1) returned 0x0 [0211.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.268] SetErrorMode (uMode=0x0) returned 0x1 [0211.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png", lpFilePart=0x0) returned 0x56 [0211.269] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png")) returned 0 [0211.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", lpFilePart=0x0) returned 0x55 [0211.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", lpFilePart=0x0) returned 0x55 [0211.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", lpFilePart=0x0) returned 0x55 [0211.277] SetErrorMode (uMode=0x1) returned 0x0 [0211.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0211.277] GetFileType (hFile=0x18c) returned 0x1 [0211.277] SetErrorMode (uMode=0x0) returned 0x1 [0211.277] GetFileType (hFile=0x18c) returned 0x1 [0211.277] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xc59 [0211.277] ReadFile (in: hFile=0x18c, lpBuffer=0x27fbfa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27fbfa0*, lpNumberOfBytesRead=0x27e6e8*=0xc59, lpOverlapped=0x0) returned 1 [0211.279] CloseHandle (hObject=0x18c) returned 1 [0211.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", lpFilePart=0x0) returned 0x55 [0211.280] SetErrorMode (uMode=0x1) returned 0x0 [0211.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc59)) returned 1 [0211.280] SetErrorMode (uMode=0x0) returned 0x1 [0211.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", lpFilePart=0x0) returned 0x55 [0211.401] SetErrorMode (uMode=0x1) returned 0x0 [0211.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.405] SetErrorMode (uMode=0x0) returned 0x1 [0211.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png", lpFilePart=0x0) returned 0x55 [0211.407] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png")) returned 0 [0211.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", lpFilePart=0x0) returned 0x56 [0211.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", lpFilePart=0x0) returned 0x56 [0211.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", lpFilePart=0x0) returned 0x56 [0211.413] SetErrorMode (uMode=0x1) returned 0x0 [0211.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0211.414] GetFileType (hFile=0x18c) returned 0x1 [0211.414] SetErrorMode (uMode=0x0) returned 0x1 [0211.415] GetFileType (hFile=0x18c) returned 0x1 [0211.415] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xba6 [0211.415] ReadFile (in: hFile=0x18c, lpBuffer=0x285fd90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x285fd90*, lpNumberOfBytesRead=0x27e6e8*=0xba6, lpOverlapped=0x0) returned 1 [0211.416] CloseHandle (hObject=0x18c) returned 1 [0211.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", lpFilePart=0x0) returned 0x56 [0211.417] SetErrorMode (uMode=0x1) returned 0x0 [0211.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba6)) returned 1 [0211.417] SetErrorMode (uMode=0x0) returned 0x1 [0211.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", lpFilePart=0x0) returned 0x56 [0211.517] SetErrorMode (uMode=0x1) returned 0x0 [0211.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.527] SetErrorMode (uMode=0x0) returned 0x1 [0211.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png", lpFilePart=0x0) returned 0x56 [0211.530] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png")) returned 0 [0211.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x0) returned 0x50 [0211.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x0) returned 0x50 [0211.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x0) returned 0x50 [0211.542] SetErrorMode (uMode=0x1) returned 0x0 [0211.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0211.542] GetFileType (hFile=0x18c) returned 0x1 [0211.542] SetErrorMode (uMode=0x0) returned 0x1 [0211.543] GetFileType (hFile=0x18c) returned 0x1 [0211.543] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x61b80 [0211.544] ReadFile (in: hFile=0x18c, lpBuffer=0x36342530, nNumberOfBytesToRead=0x61b80, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x36342530*, lpNumberOfBytesRead=0x27e6e8*=0x61b80, lpOverlapped=0x0) returned 1 [0211.552] CloseHandle (hObject=0x18c) returned 1 [0211.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x0) returned 0x50 [0211.557] SetErrorMode (uMode=0x1) returned 0x0 [0211.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80)) returned 1 [0211.557] SetErrorMode (uMode=0x0) returned 0x1 [0211.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x0) returned 0x50 [0211.737] SetErrorMode (uMode=0x1) returned 0x0 [0211.737] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.746] SetErrorMode (uMode=0x0) returned 0x1 [0211.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x0) returned 0x50 [0211.747] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg")) returned 0 [0211.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", lpFilePart=0x0) returned 0x51 [0211.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", lpFilePart=0x0) returned 0x51 [0211.782] SetErrorMode (uMode=0x1) returned 0x0 [0211.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0211.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1 [0211.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0211.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0211.783] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0211.784] SetErrorMode (uMode=0x0) returned 0x1 [0211.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", lpFilePart=0x0) returned 0x51 [0211.784] SetErrorMode (uMode=0x1) returned 0x0 [0211.784] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0211.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0211.785] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0211.785] SetErrorMode (uMode=0x0) returned 0x1 [0211.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", lpFilePart=0x0) returned 0x60 [0211.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", lpFilePart=0x0) returned 0x60 [0211.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", lpFilePart=0x0) returned 0x60 [0211.786] SetErrorMode (uMode=0x1) returned 0x0 [0211.786] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0211.788] GetFileType (hFile=0x18c) returned 0x1 [0211.788] SetErrorMode (uMode=0x0) returned 0x1 [0211.788] GetFileType (hFile=0x18c) returned 0x1 [0211.788] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xdf6 [0211.788] ReadFile (in: hFile=0x18c, lpBuffer=0x2722a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2722a90*, lpNumberOfBytesRead=0x27e648*=0xdf6, lpOverlapped=0x0) returned 1 [0211.790] CloseHandle (hObject=0x18c) returned 1 [0211.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", lpFilePart=0x0) returned 0x60 [0211.791] SetErrorMode (uMode=0x1) returned 0x0 [0211.791] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6)) returned 1 [0211.791] SetErrorMode (uMode=0x0) returned 0x1 [0211.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", lpFilePart=0x0) returned 0x60 [0211.896] SetErrorMode (uMode=0x1) returned 0x0 [0211.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.901] SetErrorMode (uMode=0x0) returned 0x1 [0211.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png", lpFilePart=0x0) returned 0x60 [0211.902] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png")) returned 0 [0211.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0211.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0211.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0211.909] SetErrorMode (uMode=0x1) returned 0x0 [0211.909] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0211.909] GetFileType (hFile=0x18c) returned 0x1 [0211.909] SetErrorMode (uMode=0x0) returned 0x1 [0211.909] GetFileType (hFile=0x18c) returned 0x1 [0211.909] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xdb7 [0211.909] ReadFile (in: hFile=0x18c, lpBuffer=0x27894c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27894c8*, lpNumberOfBytesRead=0x27e648*=0xdb7, lpOverlapped=0x0) returned 1 [0211.911] CloseHandle (hObject=0x18c) returned 1 [0211.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0211.912] SetErrorMode (uMode=0x1) returned 0x0 [0211.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7)) returned 1 [0211.913] SetErrorMode (uMode=0x0) returned 0x1 [0212.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.048] SetErrorMode (uMode=0x1) returned 0x0 [0212.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.053] SetErrorMode (uMode=0x0) returned 0x1 [0212.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.054] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png")) returned 0 [0212.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6b [0212.064] SetErrorMode (uMode=0x1) returned 0x0 [0212.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0212.066] GetFileType (hFile=0x18c) returned 0x1 [0212.066] SetErrorMode (uMode=0x0) returned 0x1 [0212.066] GetFileType (hFile=0x18c) returned 0x1 [0212.068] WriteFile (in: hFile=0x18c, lpBuffer=0x27fdf68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27fdf68*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0212.069] WriteFile (in: hFile=0x18c, lpBuffer=0x27fdf68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27fdf68*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0212.070] CloseHandle (hObject=0x18c) returned 1 [0212.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", lpFilePart=0x0) returned 0x51 [0212.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", lpFilePart=0x0) returned 0x51 [0212.071] SetErrorMode (uMode=0x1) returned 0x0 [0212.071] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0212.072] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.072] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0212.072] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0212.072] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0212.072] SetErrorMode (uMode=0x0) returned 0x1 [0212.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", lpFilePart=0x0) returned 0x51 [0212.073] SetErrorMode (uMode=0x1) returned 0x0 [0212.073] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0212.073] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.073] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0212.073] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0212.073] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0212.073] SetErrorMode (uMode=0x0) returned 0x1 [0212.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.074] SetErrorMode (uMode=0x1) returned 0x0 [0212.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0212.076] GetFileType (hFile=0x18c) returned 0x1 [0212.076] SetErrorMode (uMode=0x0) returned 0x1 [0212.076] GetFileType (hFile=0x18c) returned 0x1 [0212.076] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1589 [0212.076] ReadFile (in: hFile=0x18c, lpBuffer=0x2805f18, nNumberOfBytesToRead=0x1589, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2805f18*, lpNumberOfBytesRead=0x27e648*=0x1589, lpOverlapped=0x0) returned 1 [0212.078] CloseHandle (hObject=0x18c) returned 1 [0212.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.079] SetErrorMode (uMode=0x1) returned 0x0 [0212.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589)) returned 1 [0212.079] SetErrorMode (uMode=0x0) returned 0x1 [0212.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.225] SetErrorMode (uMode=0x1) returned 0x0 [0212.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.230] SetErrorMode (uMode=0x0) returned 0x1 [0212.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png", lpFilePart=0x0) returned 0x6b [0212.232] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png")) returned 0 [0212.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6b [0212.237] SetErrorMode (uMode=0x1) returned 0x0 [0212.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0212.238] GetFileType (hFile=0x18c) returned 0x1 [0212.238] SetErrorMode (uMode=0x0) returned 0x1 [0212.238] GetFileType (hFile=0x18c) returned 0x1 [0212.240] WriteFile (in: hFile=0x18c, lpBuffer=0x287e5a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x287e5a0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0212.241] WriteFile (in: hFile=0x18c, lpBuffer=0x287e5a0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x287e5a0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0212.242] CloseHandle (hObject=0x18c) returned 1 [0212.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x60 [0212.242] SetErrorMode (uMode=0x1) returned 0x0 [0212.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0212.243] GetFileType (hFile=0x18c) returned 0x1 [0212.243] SetErrorMode (uMode=0x0) returned 0x1 [0212.243] GetFileType (hFile=0x18c) returned 0x1 [0212.245] WriteFile (in: hFile=0x18c, lpBuffer=0x28946e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28946e0*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0212.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0212.248] SetErrorMode (uMode=0x1) returned 0x0 [0212.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0212.250] GetFileType (hFile=0x18c) returned 0x1 [0212.250] SetErrorMode (uMode=0x0) returned 0x1 [0212.250] GetFileType (hFile=0x18c) returned 0x1 [0212.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x3d [0212.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x3d [0212.252] SetErrorMode (uMode=0x1) returned 0x0 [0212.252] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0212.252] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0212.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0212.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0212.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0212.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0212.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0212.253] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0212.253] SetErrorMode (uMode=0x0) returned 0x1 [0212.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x3d [0212.254] SetErrorMode (uMode=0x1) returned 0x0 [0212.254] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0212.255] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0212.255] SetErrorMode (uMode=0x0) returned 0x1 [0212.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0212.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0212.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0212.255] SetErrorMode (uMode=0x1) returned 0x0 [0212.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0212.256] GetFileType (hFile=0x18c) returned 0x1 [0212.256] SetErrorMode (uMode=0x0) returned 0x1 [0212.256] GetFileType (hFile=0x18c) returned 0x1 [0212.256] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x3260 [0212.256] ReadFile (in: hFile=0x18c, lpBuffer=0x28b2b80, nNumberOfBytesToRead=0x3260, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x28b2b80*, lpNumberOfBytesRead=0x27e788*=0x3260, lpOverlapped=0x0) returned 1 [0212.258] CloseHandle (hObject=0x18c) returned 1 [0212.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0212.259] SetErrorMode (uMode=0x1) returned 0x0 [0212.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1 [0212.259] SetErrorMode (uMode=0x0) returned 0x1 [0212.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0212.414] SetErrorMode (uMode=0x1) returned 0x0 [0212.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.418] SetErrorMode (uMode=0x0) returned 0x1 [0212.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0212.420] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png")) returned 0 [0212.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x0) returned 0x46 [0212.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x0) returned 0x46 [0212.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x0) returned 0x46 [0212.428] SetErrorMode (uMode=0x1) returned 0x0 [0212.429] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0212.430] GetFileType (hFile=0x18c) returned 0x1 [0212.430] SetErrorMode (uMode=0x0) returned 0x1 [0212.430] GetFileType (hFile=0x18c) returned 0x1 [0212.430] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x32a0 [0212.430] ReadFile (in: hFile=0x18c, lpBuffer=0x2729c00, nNumberOfBytesToRead=0x32a0, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2729c00*, lpNumberOfBytesRead=0x27e788*=0x32a0, lpOverlapped=0x0) returned 1 [0212.432] CloseHandle (hObject=0x18c) returned 1 [0212.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x0) returned 0x46 [0212.433] SetErrorMode (uMode=0x1) returned 0x0 [0212.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0)) returned 1 [0212.433] SetErrorMode (uMode=0x0) returned 0x1 [0212.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x0) returned 0x46 [0212.568] SetErrorMode (uMode=0x1) returned 0x0 [0212.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.573] SetErrorMode (uMode=0x0) returned 0x1 [0212.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x0) returned 0x46 [0212.574] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png")) returned 0 [0212.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x0) returned 0x46 [0212.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x0) returned 0x46 [0212.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x0) returned 0x46 [0212.583] SetErrorMode (uMode=0x1) returned 0x0 [0212.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0212.584] GetFileType (hFile=0x18c) returned 0x1 [0212.584] SetErrorMode (uMode=0x0) returned 0x1 [0212.584] GetFileType (hFile=0x18c) returned 0x1 [0212.584] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x172a [0212.584] ReadFile (in: hFile=0x18c, lpBuffer=0x2799fe8, nNumberOfBytesToRead=0x172a, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x2799fe8*, lpNumberOfBytesRead=0x27e788*=0x172a, lpOverlapped=0x0) returned 1 [0212.586] CloseHandle (hObject=0x18c) returned 1 [0212.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x0) returned 0x46 [0212.586] SetErrorMode (uMode=0x1) returned 0x0 [0212.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a)) returned 1 [0212.587] SetErrorMode (uMode=0x0) returned 0x1 [0212.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x0) returned 0x46 [0212.739] SetErrorMode (uMode=0x1) returned 0x0 [0212.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.743] SetErrorMode (uMode=0x0) returned 0x1 [0212.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x0) returned 0x46 [0212.744] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png")) returned 0 [0212.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", lpFilePart=0x0) returned 0x43 [0212.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", lpFilePart=0x0) returned 0x43 [0212.778] SetErrorMode (uMode=0x1) returned 0x0 [0212.778] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0212.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.780] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0212.780] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0212.780] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0212.781] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0212.781] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1 [0212.781] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0 [0212.781] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0212.782] SetErrorMode (uMode=0x0) returned 0x1 [0212.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", lpFilePart=0x0) returned 0x43 [0212.782] SetErrorMode (uMode=0x1) returned 0x0 [0212.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0212.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0212.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0212.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0212.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0212.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1 [0212.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0 [0212.785] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0212.785] SetErrorMode (uMode=0x0) returned 0x1 [0212.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4e [0212.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4e [0212.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4e [0212.785] SetErrorMode (uMode=0x1) returned 0x0 [0212.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0212.786] GetFileType (hFile=0x18c) returned 0x1 [0212.786] SetErrorMode (uMode=0x0) returned 0x1 [0212.786] GetFileType (hFile=0x18c) returned 0x1 [0212.786] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7c6 [0212.786] ReadFile (in: hFile=0x18c, lpBuffer=0x28036a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28036a8*, lpNumberOfBytesRead=0x27e6e8*=0x7c6, lpOverlapped=0x0) returned 1 [0212.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4e [0212.788] SetErrorMode (uMode=0x1) returned 0x0 [0212.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6)) returned 1 [0212.788] SetErrorMode (uMode=0x0) returned 0x1 [0212.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4e [0212.912] SetErrorMode (uMode=0x1) returned 0x0 [0212.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.918] SetErrorMode (uMode=0x0) returned 0x1 [0212.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x0) returned 0x4e [0212.920] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml")) returned 0 [0212.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x51 [0212.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x51 [0212.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x51 [0212.927] SetErrorMode (uMode=0x1) returned 0x0 [0212.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0212.928] GetFileType (hFile=0x18c) returned 0x1 [0212.928] SetErrorMode (uMode=0x0) returned 0x1 [0212.928] GetFileType (hFile=0x18c) returned 0x1 [0212.928] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x20be [0212.928] ReadFile (in: hFile=0x18c, lpBuffer=0x2864f58, nNumberOfBytesToRead=0x20be, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2864f58*, lpNumberOfBytesRead=0x27e6e8*=0x20be, lpOverlapped=0x0) returned 1 [0212.930] CloseHandle (hObject=0x18c) returned 1 [0212.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x51 [0212.931] SetErrorMode (uMode=0x1) returned 0x0 [0212.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be)) returned 1 [0212.931] SetErrorMode (uMode=0x0) returned 0x1 [0213.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x51 [0213.036] SetErrorMode (uMode=0x1) returned 0x0 [0213.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.040] SetErrorMode (uMode=0x0) returned 0x1 [0213.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html", lpFilePart=0x0) returned 0x51 [0213.042] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html")) returned 0 [0213.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", lpFilePart=0x0) returned 0x50 [0213.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", lpFilePart=0x0) returned 0x50 [0213.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", lpFilePart=0x0) returned 0x50 [0213.048] SetErrorMode (uMode=0x1) returned 0x0 [0213.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.049] GetFileType (hFile=0x18c) returned 0x1 [0213.049] SetErrorMode (uMode=0x0) returned 0x1 [0213.049] GetFileType (hFile=0x18c) returned 0x1 [0213.049] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3f3e [0213.049] ReadFile (in: hFile=0x18c, lpBuffer=0x28d2540, nNumberOfBytesToRead=0x3f3e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28d2540*, lpNumberOfBytesRead=0x27e6e8*=0x3f3e, lpOverlapped=0x0) returned 1 [0213.050] CloseHandle (hObject=0x18c) returned 1 [0213.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", lpFilePart=0x0) returned 0x50 [0213.051] SetErrorMode (uMode=0x1) returned 0x0 [0213.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e)) returned 1 [0213.051] SetErrorMode (uMode=0x0) returned 0x1 [0213.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", lpFilePart=0x0) returned 0x50 [0213.184] SetErrorMode (uMode=0x1) returned 0x0 [0213.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.189] SetErrorMode (uMode=0x0) returned 0x1 [0213.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html", lpFilePart=0x0) returned 0x50 [0213.190] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html")) returned 0 [0213.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x47 [0213.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x47 [0213.195] SetErrorMode (uMode=0x1) returned 0x0 [0213.195] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0213.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1 [0213.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0213.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1 [0213.196] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0 [0213.196] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0213.196] SetErrorMode (uMode=0x0) returned 0x1 [0213.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", lpFilePart=0x0) returned 0x47 [0213.197] SetErrorMode (uMode=0x1) returned 0x0 [0213.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0213.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1 [0213.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0213.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1 [0213.197] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0 [0213.197] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0213.198] SetErrorMode (uMode=0x0) returned 0x1 [0213.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", lpFilePart=0x0) returned 0x5d [0213.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", lpFilePart=0x0) returned 0x5d [0213.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", lpFilePart=0x0) returned 0x5d [0213.198] SetErrorMode (uMode=0x1) returned 0x0 [0213.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.201] GetFileType (hFile=0x18c) returned 0x1 [0213.201] SetErrorMode (uMode=0x0) returned 0x1 [0213.201] GetFileType (hFile=0x18c) returned 0x1 [0213.201] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3ce [0213.201] ReadFile (in: hFile=0x18c, lpBuffer=0x2750760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2750760*, lpNumberOfBytesRead=0x27e648*=0x3ce, lpOverlapped=0x0) returned 1 [0213.202] CloseHandle (hObject=0x18c) returned 1 [0213.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", lpFilePart=0x0) returned 0x5d [0213.203] SetErrorMode (uMode=0x1) returned 0x0 [0213.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce)) returned 1 [0213.203] SetErrorMode (uMode=0x0) returned 0x1 [0213.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", lpFilePart=0x0) returned 0x5d [0213.312] SetErrorMode (uMode=0x1) returned 0x0 [0213.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.317] SetErrorMode (uMode=0x0) returned 0x1 [0213.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css", lpFilePart=0x0) returned 0x5d [0213.318] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css")) returned 0 [0213.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x54 [0213.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x54 [0213.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x54 [0213.328] SetErrorMode (uMode=0x1) returned 0x0 [0213.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.329] GetFileType (hFile=0x18c) returned 0x1 [0213.329] SetErrorMode (uMode=0x0) returned 0x1 [0213.329] GetFileType (hFile=0x18c) returned 0x1 [0213.329] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2786 [0213.329] ReadFile (in: hFile=0x18c, lpBuffer=0x27adc58, nNumberOfBytesToRead=0x2786, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27adc58*, lpNumberOfBytesRead=0x27e648*=0x2786, lpOverlapped=0x0) returned 1 [0213.333] CloseHandle (hObject=0x18c) returned 1 [0213.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x54 [0213.334] SetErrorMode (uMode=0x1) returned 0x0 [0213.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786)) returned 1 [0213.334] SetErrorMode (uMode=0x0) returned 0x1 [0213.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x54 [0213.469] SetErrorMode (uMode=0x1) returned 0x0 [0213.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.473] SetErrorMode (uMode=0x0) returned 0x1 [0213.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x0) returned 0x54 [0213.475] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css")) returned 0 [0213.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x0) returned 0x53 [0213.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x0) returned 0x53 [0213.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x0) returned 0x53 [0213.480] SetErrorMode (uMode=0x1) returned 0x0 [0213.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.481] GetFileType (hFile=0x18c) returned 0x1 [0213.481] SetErrorMode (uMode=0x0) returned 0x1 [0213.481] GetFileType (hFile=0x18c) returned 0x1 [0213.481] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x603c [0213.482] ReadFile (in: hFile=0x18c, lpBuffer=0x281ec98, nNumberOfBytesToRead=0x603c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x281ec98*, lpNumberOfBytesRead=0x27e648*=0x603c, lpOverlapped=0x0) returned 1 [0213.483] CloseHandle (hObject=0x18c) returned 1 [0213.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x0) returned 0x53 [0213.484] SetErrorMode (uMode=0x1) returned 0x0 [0213.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c)) returned 1 [0213.484] SetErrorMode (uMode=0x0) returned 0x1 [0213.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x0) returned 0x53 [0213.589] SetErrorMode (uMode=0x1) returned 0x0 [0213.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.594] SetErrorMode (uMode=0x0) returned 0x1 [0213.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x0) returned 0x53 [0213.595] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css")) returned 0 [0213.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x61 [0213.602] SetErrorMode (uMode=0x1) returned 0x0 [0213.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0213.603] GetFileType (hFile=0x18c) returned 0x1 [0213.603] SetErrorMode (uMode=0x0) returned 0x1 [0213.603] GetFileType (hFile=0x18c) returned 0x1 [0213.605] WriteFile (in: hFile=0x18c, lpBuffer=0x28bacb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28bacb0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0213.606] WriteFile (in: hFile=0x18c, lpBuffer=0x28bacb0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28bacb0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0213.607] CloseHandle (hObject=0x18c) returned 1 [0213.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x46 [0213.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x46 [0213.607] SetErrorMode (uMode=0x1) returned 0x0 [0213.607] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1 [0213.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0 [0213.609] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0213.609] SetErrorMode (uMode=0x0) returned 0x1 [0213.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", lpFilePart=0x0) returned 0x46 [0213.609] SetErrorMode (uMode=0x1) returned 0x0 [0213.609] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0213.609] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.609] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1 [0213.609] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0213.610] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0213.610] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0213.610] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1 [0213.610] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0 [0213.610] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0213.610] SetErrorMode (uMode=0x0) returned 0x1 [0213.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", lpFilePart=0x0) returned 0x5a [0213.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", lpFilePart=0x0) returned 0x5a [0213.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", lpFilePart=0x0) returned 0x5a [0213.611] SetErrorMode (uMode=0x1) returned 0x0 [0213.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.611] GetFileType (hFile=0x18c) returned 0x1 [0213.611] SetErrorMode (uMode=0x0) returned 0x1 [0213.611] GetFileType (hFile=0x18c) returned 0x1 [0213.611] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x71c [0213.611] ReadFile (in: hFile=0x18c, lpBuffer=0x28c36d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28c36d0*, lpNumberOfBytesRead=0x27e648*=0x71c, lpOverlapped=0x0) returned 1 [0213.613] CloseHandle (hObject=0x18c) returned 1 [0213.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", lpFilePart=0x0) returned 0x5a [0213.614] SetErrorMode (uMode=0x1) returned 0x0 [0213.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0213.614] SetErrorMode (uMode=0x0) returned 0x1 [0213.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", lpFilePart=0x0) returned 0x5a [0213.777] SetErrorMode (uMode=0x1) returned 0x0 [0213.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.784] SetErrorMode (uMode=0x0) returned 0x1 [0213.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js", lpFilePart=0x0) returned 0x5a [0213.786] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js")) returned 0 [0213.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x51 [0213.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x51 [0213.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x51 [0213.794] SetErrorMode (uMode=0x1) returned 0x0 [0213.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.795] GetFileType (hFile=0x18c) returned 0x1 [0213.795] SetErrorMode (uMode=0x0) returned 0x1 [0213.795] GetFileType (hFile=0x18c) returned 0x1 [0213.795] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xab00 [0213.795] ReadFile (in: hFile=0x18c, lpBuffer=0x271f258, nNumberOfBytesToRead=0xab00, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x271f258*, lpNumberOfBytesRead=0x27e648*=0xab00, lpOverlapped=0x0) returned 1 [0213.797] CloseHandle (hObject=0x18c) returned 1 [0213.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x51 [0213.799] SetErrorMode (uMode=0x1) returned 0x0 [0213.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00)) returned 1 [0213.799] SetErrorMode (uMode=0x0) returned 0x1 [0213.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x51 [0213.945] SetErrorMode (uMode=0x1) returned 0x0 [0213.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.951] SetErrorMode (uMode=0x0) returned 0x1 [0213.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js", lpFilePart=0x0) returned 0x51 [0213.952] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js")) returned 0 [0213.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5a [0213.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5a [0213.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5a [0213.960] SetErrorMode (uMode=0x1) returned 0x0 [0213.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0213.961] GetFileType (hFile=0x18c) returned 0x1 [0213.961] SetErrorMode (uMode=0x0) returned 0x1 [0213.961] GetFileType (hFile=0x18c) returned 0x1 [0213.961] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x388c [0213.961] ReadFile (in: hFile=0x18c, lpBuffer=0x27bc318, nNumberOfBytesToRead=0x388c, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27bc318*, lpNumberOfBytesRead=0x27e648*=0x388c, lpOverlapped=0x0) returned 1 [0213.963] CloseHandle (hObject=0x18c) returned 1 [0213.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5a [0213.964] SetErrorMode (uMode=0x1) returned 0x0 [0213.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c)) returned 1 [0213.964] SetErrorMode (uMode=0x0) returned 0x1 [0214.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5a [0214.079] SetErrorMode (uMode=0x1) returned 0x0 [0214.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.085] SetErrorMode (uMode=0x0) returned 0x1 [0214.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js", lpFilePart=0x0) returned 0x5a [0214.086] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js")) returned 0 [0214.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x52 [0214.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x52 [0214.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x52 [0214.092] SetErrorMode (uMode=0x1) returned 0x0 [0214.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0214.093] GetFileType (hFile=0x18c) returned 0x1 [0214.093] SetErrorMode (uMode=0x0) returned 0x1 [0214.093] GetFileType (hFile=0x18c) returned 0x1 [0214.093] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0xe268 [0214.094] ReadFile (in: hFile=0x18c, lpBuffer=0x282b4e0, nNumberOfBytesToRead=0xe268, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x282b4e0*, lpNumberOfBytesRead=0x27e648*=0xe268, lpOverlapped=0x0) returned 1 [0214.096] CloseHandle (hObject=0x18c) returned 1 [0214.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x52 [0214.098] SetErrorMode (uMode=0x1) returned 0x0 [0214.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268)) returned 1 [0214.098] SetErrorMode (uMode=0x0) returned 0x1 [0214.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x52 [0214.236] SetErrorMode (uMode=0x1) returned 0x0 [0214.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.241] SetErrorMode (uMode=0x0) returned 0x1 [0214.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js", lpFilePart=0x0) returned 0x52 [0214.243] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js")) returned 0 [0214.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", lpFilePart=0x0) returned 0x51 [0214.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", lpFilePart=0x0) returned 0x51 [0214.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", lpFilePart=0x0) returned 0x51 [0214.251] SetErrorMode (uMode=0x1) returned 0x0 [0214.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0214.252] GetFileType (hFile=0x18c) returned 0x1 [0214.252] SetErrorMode (uMode=0x0) returned 0x1 [0214.252] GetFileType (hFile=0x18c) returned 0x1 [0214.252] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x210ca [0214.252] ReadFile (in: hFile=0x18c, lpBuffer=0x36620c00, nNumberOfBytesToRead=0x210ca, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x36620c00*, lpNumberOfBytesRead=0x27e648*=0x210ca, lpOverlapped=0x0) returned 1 [0214.258] CloseHandle (hObject=0x18c) returned 1 [0214.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", lpFilePart=0x0) returned 0x51 [0214.261] SetErrorMode (uMode=0x1) returned 0x0 [0214.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca)) returned 1 [0214.261] SetErrorMode (uMode=0x0) returned 0x1 [0214.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", lpFilePart=0x0) returned 0x51 [0214.411] SetErrorMode (uMode=0x1) returned 0x0 [0214.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.416] SetErrorMode (uMode=0x0) returned 0x1 [0214.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js", lpFilePart=0x0) returned 0x51 [0214.417] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js")) returned 0 [0214.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x60 [0214.428] SetErrorMode (uMode=0x1) returned 0x0 [0214.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0214.463] GetFileType (hFile=0x18c) returned 0x1 [0214.463] SetErrorMode (uMode=0x0) returned 0x1 [0214.464] GetFileType (hFile=0x18c) returned 0x1 [0214.465] WriteFile (in: hFile=0x18c, lpBuffer=0x2739be0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0214.466] WriteFile (in: hFile=0x18c, lpBuffer=0x2739be0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0214.467] CloseHandle (hObject=0x18c) returned 1 [0214.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0214.468] SetErrorMode (uMode=0x1) returned 0x0 [0214.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0214.471] GetFileType (hFile=0x18c) returned 0x1 [0214.471] SetErrorMode (uMode=0x0) returned 0x1 [0214.471] GetFileType (hFile=0x18c) returned 0x1 [0214.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", lpFilePart=0x0) returned 0x44 [0214.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", lpFilePart=0x0) returned 0x44 [0214.475] SetErrorMode (uMode=0x1) returned 0x0 [0214.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0214.500] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0214.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1 [0214.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1 [0214.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1 [0214.508] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1 [0214.509] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1 [0214.509] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1 [0214.509] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1 [0214.509] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1 [0214.509] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1 [0214.511] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0214.511] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1 [0214.511] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0214.512] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1 [0214.513] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1 [0214.514] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1 [0214.514] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1 [0214.514] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1 [0214.515] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1 [0214.515] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1 [0214.515] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1 [0214.515] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1 [0214.516] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1 [0214.517] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1 [0214.517] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0214.518] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.518] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1 [0214.518] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.518] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0214.519] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.519] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1 [0214.519] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0214.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0214.520] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0214.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0214.521] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1 [0214.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1 [0214.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0214.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1 [0214.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1 [0214.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1 [0214.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcff8567, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcff8567, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1 [0214.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd01e6c6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd01e6c6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0214.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd044825, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd044825, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0214.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06a984, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd06a984, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1 [0214.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1 [0214.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1 [0214.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1 [0214.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0214.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1 [0214.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1 [0214.527] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0214.528] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0214.528] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="redStateIcon.png", cAlternateFileName="")) returned 1 [0214.528] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_background.png", cAlternateFileName="")) returned 1 [0214.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2339f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2339f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x758e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked-loading.png", cAlternateFileName="")) returned 1 [0214.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_cloudy.png", cAlternateFileName="")) returned 1 [0214.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5b46cc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5b46cc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_few-showers.png", cAlternateFileName="")) returned 1 [0214.529] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc60098a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc60098a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_foggy.png", cAlternateFileName="")) returned 1 [0214.530] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6e51c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc6e51c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_hail.png", cAlternateFileName="")) returned 1 [0214.530] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc70b323, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc70b323, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0214.530] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x60f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.530] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full.png", cAlternateFileName="")) returned 1 [0214.531] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc77d740, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc77d740, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x65e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.531] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0214.531] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7c99fe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7c99fe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x558a, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new.png", cAlternateFileName="")) returned 1 [0214.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7efb5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7efb5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83be1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc83be1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0214.532] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6469, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0214.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8880d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8880d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x62fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0214.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6455, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8d4397, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8d4397, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0214.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8fa4f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8fa4f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6222, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc920655, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc920655, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe103b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x94ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_rainy.png", cAlternateFileName="")) returned 1 [0214.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9467b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9467b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_snow.png", cAlternateFileName="")) returned 1 [0214.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc96c913, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc96c913, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0214.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_windy.png", cAlternateFileName="")) returned 1 [0214.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6add, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9b8bd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9b8bd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_snow.png", cAlternateFileName="")) returned 1 [0214.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9ded30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9ded30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_sun.png", cAlternateFileName="")) returned 1 [0214.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca04e8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca04e8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc54, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_windy.png", cAlternateFileName="")) returned 1 [0214.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca2afee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca2afee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8184, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0214.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0214.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x893d, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_foggy.png", cAlternateFileName="")) returned 1 [0214.537] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac356a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcac356a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_hail.png", cAlternateFileName="")) returned 1 [0214.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcae96c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcae96c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa742, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_rainy.png", cAlternateFileName="")) returned 1 [0214.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_snow.png", cAlternateFileName="")) returned 1 [0214.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0214.538] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 0 [0214.539] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0214.540] SetErrorMode (uMode=0x0) returned 0x1 [0214.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", lpFilePart=0x0) returned 0x44 [0214.540] SetErrorMode (uMode=0x1) returned 0x0 [0214.541] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0214.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0214.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0214.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0214.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1 [0214.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1 [0214.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1 [0214.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1 [0214.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1 [0214.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1 [0214.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1 [0214.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1 [0214.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1 [0214.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1 [0214.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1 [0214.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0214.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1 [0214.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1 [0214.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1 [0214.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1 [0214.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1 [0214.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1 [0214.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1 [0214.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1 [0214.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1 [0214.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1 [0214.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0214.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1 [0214.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1 [0214.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1 [0214.550] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1 [0214.550] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1 [0214.550] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1 [0214.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1 [0214.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1 [0214.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1 [0214.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1 [0214.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0214.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1 [0214.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1 [0214.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1 [0214.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1 [0214.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1 [0214.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1 [0214.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1 [0214.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1 [0214.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0214.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0214.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0214.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0214.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0214.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0214.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1 [0214.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1 [0214.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1 [0214.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1 [0214.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1 [0214.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1 [0214.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1 [0214.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1 [0214.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0214.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0214.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0214.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcff8567, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcff8567, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd01e6c6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd01e6c6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd044825, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd044825, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06a984, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd06a984, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0214.563] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0214.564] SetErrorMode (uMode=0x0) returned 0x1 [0214.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x0) returned 0x4a [0214.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x0) returned 0x4a [0214.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x0) returned 0x4a [0214.565] SetErrorMode (uMode=0x1) returned 0x0 [0214.567] SetErrorMode (uMode=0x0) returned 0x1 [0214.567] GetFileType (hFile=0x18c) returned 0x1 [0214.567] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0214.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x0) returned 0x4a [0214.573] SetErrorMode (uMode=0x1) returned 0x0 [0214.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0214.573] SetErrorMode (uMode=0x0) returned 0x1 [0214.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x0) returned 0x4a [0214.698] SetErrorMode (uMode=0x1) returned 0x0 [0214.703] SetErrorMode (uMode=0x0) returned 0x1 [0214.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x0) returned 0x4a [0214.704] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png")) returned 0 [0214.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x0) returned 0x4b [0214.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x0) returned 0x4b [0214.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x0) returned 0x4b [0214.709] SetErrorMode (uMode=0x1) returned 0x0 [0214.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0214.710] GetFileType (hFile=0x18c) returned 0x1 [0214.710] SetErrorMode (uMode=0x0) returned 0x1 [0214.710] GetFileType (hFile=0x18c) returned 0x1 [0214.710] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0214.710] ReadFile (in: hFile=0x18c, lpBuffer=0x27d4568, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d4568*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0214.712] CloseHandle (hObject=0x18c) returned 1 [0214.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x0) returned 0x4b [0214.713] SetErrorMode (uMode=0x1) returned 0x0 [0214.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0214.713] SetErrorMode (uMode=0x0) returned 0x1 [0214.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x0) returned 0x4b [0214.868] SetErrorMode (uMode=0x1) returned 0x0 [0214.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.873] SetErrorMode (uMode=0x0) returned 0x1 [0214.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x0) returned 0x4b [0214.874] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png")) returned 0 [0214.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x0) returned 0x4b [0214.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x0) returned 0x4b [0214.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x0) returned 0x4b [0214.881] SetErrorMode (uMode=0x1) returned 0x0 [0214.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0214.882] GetFileType (hFile=0x18c) returned 0x1 [0214.882] SetErrorMode (uMode=0x0) returned 0x1 [0214.882] GetFileType (hFile=0x18c) returned 0x1 [0214.882] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0214.882] ReadFile (in: hFile=0x18c, lpBuffer=0x283b230, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283b230*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0214.884] CloseHandle (hObject=0x18c) returned 1 [0214.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x0) returned 0x4b [0214.885] SetErrorMode (uMode=0x1) returned 0x0 [0214.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0214.885] SetErrorMode (uMode=0x0) returned 0x1 [0215.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x0) returned 0x4b [0215.005] SetErrorMode (uMode=0x1) returned 0x0 [0215.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.013] SetErrorMode (uMode=0x0) returned 0x1 [0215.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x0) returned 0x4b [0215.014] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png")) returned 0 [0215.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x0) returned 0x4b [0215.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x0) returned 0x4b [0215.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x0) returned 0x4b [0215.021] SetErrorMode (uMode=0x1) returned 0x0 [0215.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0215.022] GetFileType (hFile=0x18c) returned 0x1 [0215.022] SetErrorMode (uMode=0x0) returned 0x1 [0215.022] GetFileType (hFile=0x18c) returned 0x1 [0215.022] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0215.022] ReadFile (in: hFile=0x18c, lpBuffer=0x28a1e00, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a1e00*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0215.055] CloseHandle (hObject=0x18c) returned 1 [0215.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x0) returned 0x4b [0215.056] SetErrorMode (uMode=0x1) returned 0x0 [0215.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0215.056] SetErrorMode (uMode=0x0) returned 0x1 [0215.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x0) returned 0x4b [0215.194] SetErrorMode (uMode=0x1) returned 0x0 [0215.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.201] SetErrorMode (uMode=0x0) returned 0x1 [0215.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x0) returned 0x4b [0215.202] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png")) returned 0 [0215.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x0) returned 0x4b [0215.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x0) returned 0x4b [0215.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x0) returned 0x4b [0215.208] SetErrorMode (uMode=0x1) returned 0x0 [0215.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0215.209] GetFileType (hFile=0x18c) returned 0x1 [0215.209] SetErrorMode (uMode=0x0) returned 0x1 [0215.209] GetFileType (hFile=0x18c) returned 0x1 [0215.209] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfe2 [0215.209] ReadFile (in: hFile=0x18c, lpBuffer=0x29099f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x29099f0*, lpNumberOfBytesRead=0x27e6e8*=0xfe2, lpOverlapped=0x0) returned 1 [0215.211] CloseHandle (hObject=0x18c) returned 1 [0215.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x0) returned 0x4b [0215.212] SetErrorMode (uMode=0x1) returned 0x0 [0215.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0215.212] SetErrorMode (uMode=0x0) returned 0x1 [0215.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x0) returned 0x4b [0215.361] SetErrorMode (uMode=0x1) returned 0x0 [0215.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.369] SetErrorMode (uMode=0x0) returned 0x1 [0215.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x0) returned 0x4b [0215.370] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png")) returned 0 [0215.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x0) returned 0x4b [0215.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x0) returned 0x4b [0215.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x0) returned 0x4b [0215.377] SetErrorMode (uMode=0x1) returned 0x0 [0215.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0215.380] GetFileType (hFile=0x18c) returned 0x1 [0215.380] SetErrorMode (uMode=0x0) returned 0x1 [0215.381] GetFileType (hFile=0x18c) returned 0x1 [0215.381] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfe2 [0215.381] ReadFile (in: hFile=0x18c, lpBuffer=0x276eb00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276eb00*, lpNumberOfBytesRead=0x27e6e8*=0xfe2, lpOverlapped=0x0) returned 1 [0215.383] CloseHandle (hObject=0x18c) returned 1 [0215.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x0) returned 0x4b [0215.384] SetErrorMode (uMode=0x1) returned 0x0 [0215.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0215.384] SetErrorMode (uMode=0x0) returned 0x1 [0215.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x0) returned 0x4b [0215.500] SetErrorMode (uMode=0x1) returned 0x0 [0215.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.505] SetErrorMode (uMode=0x0) returned 0x1 [0215.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x0) returned 0x4b [0215.506] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png")) returned 0 [0215.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x0) returned 0x4b [0215.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x0) returned 0x4b [0215.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x0) returned 0x4b [0215.517] SetErrorMode (uMode=0x1) returned 0x0 [0215.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0215.517] GetFileType (hFile=0x18c) returned 0x1 [0215.517] SetErrorMode (uMode=0x0) returned 0x1 [0215.517] GetFileType (hFile=0x18c) returned 0x1 [0215.517] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfe2 [0215.518] ReadFile (in: hFile=0x18c, lpBuffer=0x27d4120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d4120*, lpNumberOfBytesRead=0x27e6e8*=0xfe2, lpOverlapped=0x0) returned 1 [0215.519] CloseHandle (hObject=0x18c) returned 1 [0215.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x0) returned 0x4b [0215.520] SetErrorMode (uMode=0x1) returned 0x0 [0215.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0215.520] SetErrorMode (uMode=0x0) returned 0x1 [0215.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x0) returned 0x4b [0215.686] SetErrorMode (uMode=0x1) returned 0x0 [0215.686] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.692] SetErrorMode (uMode=0x0) returned 0x1 [0215.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x0) returned 0x4b [0215.694] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png")) returned 0 [0215.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x0) returned 0x4b [0215.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x0) returned 0x4b [0215.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x0) returned 0x4b [0215.702] SetErrorMode (uMode=0x1) returned 0x0 [0215.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0215.703] GetFileType (hFile=0x18c) returned 0x1 [0215.703] SetErrorMode (uMode=0x0) returned 0x1 [0215.703] GetFileType (hFile=0x18c) returned 0x1 [0215.703] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfe2 [0215.703] ReadFile (in: hFile=0x18c, lpBuffer=0x2839740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2839740*, lpNumberOfBytesRead=0x27e6e8*=0xfe2, lpOverlapped=0x0) returned 1 [0215.714] CloseHandle (hObject=0x18c) returned 1 [0215.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x0) returned 0x4b [0215.715] SetErrorMode (uMode=0x1) returned 0x0 [0215.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0215.715] SetErrorMode (uMode=0x0) returned 0x1 [0215.876] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x0) returned 0x4b [0215.876] SetErrorMode (uMode=0x1) returned 0x0 [0215.877] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.882] SetErrorMode (uMode=0x0) returned 0x1 [0215.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x0) returned 0x4b [0215.883] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png")) returned 0 [0215.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x0) returned 0x4b [0215.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x0) returned 0x4b [0215.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x0) returned 0x4b [0215.888] SetErrorMode (uMode=0x1) returned 0x0 [0215.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0215.890] GetFileType (hFile=0x18c) returned 0x1 [0215.890] SetErrorMode (uMode=0x0) returned 0x1 [0215.890] GetFileType (hFile=0x18c) returned 0x1 [0215.890] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1c0e [0215.890] ReadFile (in: hFile=0x18c, lpBuffer=0x289dd50, nNumberOfBytesToRead=0x1c0e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x289dd50*, lpNumberOfBytesRead=0x27e6e8*=0x1c0e, lpOverlapped=0x0) returned 1 [0215.891] CloseHandle (hObject=0x18c) returned 1 [0215.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x0) returned 0x4b [0215.892] SetErrorMode (uMode=0x1) returned 0x0 [0215.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e)) returned 1 [0215.892] SetErrorMode (uMode=0x0) returned 0x1 [0216.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x0) returned 0x4b [0216.034] SetErrorMode (uMode=0x1) returned 0x0 [0216.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.040] SetErrorMode (uMode=0x0) returned 0x1 [0216.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x0) returned 0x4b [0216.042] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png")) returned 0 [0216.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x0) returned 0x4b [0216.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x0) returned 0x4b [0216.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x0) returned 0x4b [0216.048] SetErrorMode (uMode=0x1) returned 0x0 [0216.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.051] GetFileType (hFile=0x18c) returned 0x1 [0216.051] SetErrorMode (uMode=0x0) returned 0x1 [0216.051] GetFileType (hFile=0x18c) returned 0x1 [0216.051] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1c0e [0216.051] ReadFile (in: hFile=0x18c, lpBuffer=0x2908480, nNumberOfBytesToRead=0x1c0e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2908480*, lpNumberOfBytesRead=0x27e6e8*=0x1c0e, lpOverlapped=0x0) returned 1 [0216.053] CloseHandle (hObject=0x18c) returned 1 [0216.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x0) returned 0x4b [0216.054] SetErrorMode (uMode=0x1) returned 0x0 [0216.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e)) returned 1 [0216.054] SetErrorMode (uMode=0x0) returned 0x1 [0216.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x0) returned 0x4b [0216.212] SetErrorMode (uMode=0x1) returned 0x0 [0216.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.218] SetErrorMode (uMode=0x0) returned 0x1 [0216.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x0) returned 0x4b [0216.219] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png")) returned 0 [0216.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x0) returned 0x4b [0216.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x0) returned 0x4b [0216.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x0) returned 0x4b [0216.228] SetErrorMode (uMode=0x1) returned 0x0 [0216.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.230] GetFileType (hFile=0x18c) returned 0x1 [0216.230] SetErrorMode (uMode=0x0) returned 0x1 [0216.230] GetFileType (hFile=0x18c) returned 0x1 [0216.230] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x17b9 [0216.230] ReadFile (in: hFile=0x18c, lpBuffer=0x2771f60, nNumberOfBytesToRead=0x17b9, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2771f60*, lpNumberOfBytesRead=0x27e6e8*=0x17b9, lpOverlapped=0x0) returned 1 [0216.232] CloseHandle (hObject=0x18c) returned 1 [0216.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x0) returned 0x4b [0216.232] SetErrorMode (uMode=0x1) returned 0x0 [0216.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9)) returned 1 [0216.233] SetErrorMode (uMode=0x0) returned 0x1 [0216.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x0) returned 0x4b [0216.366] SetErrorMode (uMode=0x1) returned 0x0 [0216.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.370] SetErrorMode (uMode=0x0) returned 0x1 [0216.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x0) returned 0x4b [0216.372] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png")) returned 0 [0216.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", lpFilePart=0x0) returned 0x4c [0216.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", lpFilePart=0x0) returned 0x4c [0216.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", lpFilePart=0x0) returned 0x4c [0216.377] SetErrorMode (uMode=0x1) returned 0x0 [0216.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.378] GetFileType (hFile=0x18c) returned 0x1 [0216.378] SetErrorMode (uMode=0x0) returned 0x1 [0216.378] GetFileType (hFile=0x18c) returned 0x1 [0216.378] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b [0216.378] ReadFile (in: hFile=0x18c, lpBuffer=0x27d9830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d9830*, lpNumberOfBytesRead=0x27e6e8*=0x2b, lpOverlapped=0x0) returned 1 [0216.379] CloseHandle (hObject=0x18c) returned 1 [0216.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", lpFilePart=0x0) returned 0x4c [0216.380] SetErrorMode (uMode=0x1) returned 0x0 [0216.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0216.380] SetErrorMode (uMode=0x0) returned 0x1 [0216.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", lpFilePart=0x0) returned 0x4c [0216.477] SetErrorMode (uMode=0x1) returned 0x0 [0216.478] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.485] SetErrorMode (uMode=0x0) returned 0x1 [0216.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif", lpFilePart=0x0) returned 0x4c [0216.488] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif")) returned 0 [0216.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x0) returned 0x4a [0216.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x0) returned 0x4a [0216.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x0) returned 0x4a [0216.498] SetErrorMode (uMode=0x1) returned 0x0 [0216.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.498] GetFileType (hFile=0x18c) returned 0x1 [0216.498] SetErrorMode (uMode=0x0) returned 0x1 [0216.498] GetFileType (hFile=0x18c) returned 0x1 [0216.498] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0216.499] ReadFile (in: hFile=0x18c, lpBuffer=0x2836848, nNumberOfBytesToRead=0x1456, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2836848*, lpNumberOfBytesRead=0x27e6e8*=0x1456, lpOverlapped=0x0) returned 1 [0216.500] CloseHandle (hObject=0x18c) returned 1 [0216.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x0) returned 0x4a [0216.501] SetErrorMode (uMode=0x1) returned 0x0 [0216.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0216.501] SetErrorMode (uMode=0x0) returned 0x1 [0216.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x0) returned 0x4a [0216.617] SetErrorMode (uMode=0x1) returned 0x0 [0216.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.622] SetErrorMode (uMode=0x0) returned 0x1 [0216.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x0) returned 0x4a [0216.623] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png")) returned 0 [0216.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x0) returned 0x4b [0216.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x0) returned 0x4b [0216.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x0) returned 0x4b [0216.634] SetErrorMode (uMode=0x1) returned 0x0 [0216.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.634] GetFileType (hFile=0x18c) returned 0x1 [0216.634] SetErrorMode (uMode=0x0) returned 0x1 [0216.634] GetFileType (hFile=0x18c) returned 0x1 [0216.634] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x17b9 [0216.634] ReadFile (in: hFile=0x18c, lpBuffer=0x289e168, nNumberOfBytesToRead=0x17b9, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x289e168*, lpNumberOfBytesRead=0x27e6e8*=0x17b9, lpOverlapped=0x0) returned 1 [0216.636] CloseHandle (hObject=0x18c) returned 1 [0216.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x0) returned 0x4b [0216.637] SetErrorMode (uMode=0x1) returned 0x0 [0216.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9)) returned 1 [0216.637] SetErrorMode (uMode=0x0) returned 0x1 [0216.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x0) returned 0x4b [0216.823] SetErrorMode (uMode=0x1) returned 0x0 [0216.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.827] SetErrorMode (uMode=0x0) returned 0x1 [0216.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x0) returned 0x4b [0216.829] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png")) returned 0 [0216.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x0) returned 0x4b [0216.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x0) returned 0x4b [0216.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x0) returned 0x4b [0216.845] SetErrorMode (uMode=0x1) returned 0x0 [0216.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.845] GetFileType (hFile=0x18c) returned 0x1 [0216.845] SetErrorMode (uMode=0x0) returned 0x1 [0216.846] GetFileType (hFile=0x18c) returned 0x1 [0216.846] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x17b9 [0216.846] ReadFile (in: hFile=0x18c, lpBuffer=0x2906190, nNumberOfBytesToRead=0x17b9, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2906190*, lpNumberOfBytesRead=0x27e6e8*=0x17b9, lpOverlapped=0x0) returned 1 [0216.850] CloseHandle (hObject=0x18c) returned 1 [0216.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x0) returned 0x4b [0216.852] SetErrorMode (uMode=0x1) returned 0x0 [0216.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9)) returned 1 [0216.853] SetErrorMode (uMode=0x0) returned 0x1 [0216.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x0) returned 0x4b [0216.974] SetErrorMode (uMode=0x1) returned 0x0 [0216.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.980] SetErrorMode (uMode=0x0) returned 0x1 [0216.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x0) returned 0x4b [0216.982] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png")) returned 0 [0216.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x0) returned 0x4b [0216.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x0) returned 0x4b [0216.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x0) returned 0x4b [0216.990] SetErrorMode (uMode=0x1) returned 0x0 [0216.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0216.990] GetFileType (hFile=0x18c) returned 0x1 [0216.990] SetErrorMode (uMode=0x0) returned 0x1 [0216.990] GetFileType (hFile=0x18c) returned 0x1 [0216.990] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x17b9 [0216.990] ReadFile (in: hFile=0x18c, lpBuffer=0x276de50, nNumberOfBytesToRead=0x17b9, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276de50*, lpNumberOfBytesRead=0x27e6e8*=0x17b9, lpOverlapped=0x0) returned 1 [0216.992] CloseHandle (hObject=0x18c) returned 1 [0216.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x0) returned 0x4b [0216.993] SetErrorMode (uMode=0x1) returned 0x0 [0216.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9)) returned 1 [0216.993] SetErrorMode (uMode=0x0) returned 0x1 [0217.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x0) returned 0x4b [0217.112] SetErrorMode (uMode=0x1) returned 0x0 [0217.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.117] SetErrorMode (uMode=0x0) returned 0x1 [0217.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x0) returned 0x4b [0217.119] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png")) returned 0 [0217.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x0) returned 0x4b [0217.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x0) returned 0x4b [0217.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x0) returned 0x4b [0217.128] SetErrorMode (uMode=0x1) returned 0x0 [0217.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0217.130] GetFileType (hFile=0x18c) returned 0x1 [0217.130] SetErrorMode (uMode=0x0) returned 0x1 [0217.130] GetFileType (hFile=0x18c) returned 0x1 [0217.130] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x15c5 [0217.130] ReadFile (in: hFile=0x18c, lpBuffer=0x27d5b40, nNumberOfBytesToRead=0x15c5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d5b40*, lpNumberOfBytesRead=0x27e6e8*=0x15c5, lpOverlapped=0x0) returned 1 [0217.132] CloseHandle (hObject=0x18c) returned 1 [0217.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x0) returned 0x4b [0217.133] SetErrorMode (uMode=0x1) returned 0x0 [0217.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5)) returned 1 [0217.133] SetErrorMode (uMode=0x0) returned 0x1 [0217.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x0) returned 0x4b [0217.279] SetErrorMode (uMode=0x1) returned 0x0 [0217.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.285] SetErrorMode (uMode=0x0) returned 0x1 [0217.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x0) returned 0x4b [0217.287] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png")) returned 0 [0217.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x0) returned 0x4b [0217.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x0) returned 0x4b [0217.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x0) returned 0x4b [0217.293] SetErrorMode (uMode=0x1) returned 0x0 [0217.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0217.294] GetFileType (hFile=0x18c) returned 0x1 [0217.294] SetErrorMode (uMode=0x0) returned 0x1 [0217.294] GetFileType (hFile=0x18c) returned 0x1 [0217.294] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x15c5 [0217.294] ReadFile (in: hFile=0x18c, lpBuffer=0x283c890, nNumberOfBytesToRead=0x15c5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283c890*, lpNumberOfBytesRead=0x27e6e8*=0x15c5, lpOverlapped=0x0) returned 1 [0217.296] CloseHandle (hObject=0x18c) returned 1 [0217.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x0) returned 0x4b [0217.298] SetErrorMode (uMode=0x1) returned 0x0 [0217.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5)) returned 1 [0217.298] SetErrorMode (uMode=0x0) returned 0x1 [0217.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x0) returned 0x4b [0217.403] SetErrorMode (uMode=0x1) returned 0x0 [0217.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.408] SetErrorMode (uMode=0x0) returned 0x1 [0217.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x0) returned 0x4b [0217.410] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png")) returned 0 [0217.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x0) returned 0x4b [0217.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x0) returned 0x4b [0217.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x0) returned 0x4b [0217.420] SetErrorMode (uMode=0x1) returned 0x0 [0217.420] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0217.420] GetFileType (hFile=0x18c) returned 0x1 [0217.420] SetErrorMode (uMode=0x0) returned 0x1 [0217.420] GetFileType (hFile=0x18c) returned 0x1 [0217.420] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x15c5 [0217.420] ReadFile (in: hFile=0x18c, lpBuffer=0x28a37a0, nNumberOfBytesToRead=0x15c5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a37a0*, lpNumberOfBytesRead=0x27e6e8*=0x15c5, lpOverlapped=0x0) returned 1 [0217.422] CloseHandle (hObject=0x18c) returned 1 [0217.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x0) returned 0x4b [0217.423] SetErrorMode (uMode=0x1) returned 0x0 [0217.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5)) returned 1 [0217.423] SetErrorMode (uMode=0x0) returned 0x1 [0217.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x0) returned 0x4b [0217.562] SetErrorMode (uMode=0x1) returned 0x0 [0217.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.567] SetErrorMode (uMode=0x0) returned 0x1 [0217.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x0) returned 0x4b [0217.569] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png")) returned 0 [0217.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x0) returned 0x4b [0217.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x0) returned 0x4b [0217.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x0) returned 0x4b [0217.576] SetErrorMode (uMode=0x1) returned 0x0 [0217.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0217.577] GetFileType (hFile=0x18c) returned 0x1 [0217.577] SetErrorMode (uMode=0x0) returned 0x1 [0217.577] GetFileType (hFile=0x18c) returned 0x1 [0217.577] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x13c8 [0217.577] ReadFile (in: hFile=0x18c, lpBuffer=0x290a6b0, nNumberOfBytesToRead=0x13c8, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x290a6b0*, lpNumberOfBytesRead=0x27e6e8*=0x13c8, lpOverlapped=0x0) returned 1 [0217.579] CloseHandle (hObject=0x18c) returned 1 [0217.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x0) returned 0x4b [0217.579] SetErrorMode (uMode=0x1) returned 0x0 [0217.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8)) returned 1 [0217.580] SetErrorMode (uMode=0x0) returned 0x1 [0217.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x0) returned 0x4b [0217.692] SetErrorMode (uMode=0x1) returned 0x0 [0217.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.697] SetErrorMode (uMode=0x0) returned 0x1 [0217.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x0) returned 0x4b [0217.699] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png")) returned 0 [0217.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x0) returned 0x4b [0217.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x0) returned 0x4b [0217.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x0) returned 0x4b [0217.707] SetErrorMode (uMode=0x1) returned 0x0 [0217.707] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0217.708] GetFileType (hFile=0x18c) returned 0x1 [0217.708] SetErrorMode (uMode=0x0) returned 0x1 [0217.708] GetFileType (hFile=0x18c) returned 0x1 [0217.708] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x13c8 [0217.708] ReadFile (in: hFile=0x18c, lpBuffer=0x27705e8, nNumberOfBytesToRead=0x13c8, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27705e8*, lpNumberOfBytesRead=0x27e6e8*=0x13c8, lpOverlapped=0x0) returned 1 [0217.709] CloseHandle (hObject=0x18c) returned 1 [0217.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x0) returned 0x4b [0217.710] SetErrorMode (uMode=0x1) returned 0x0 [0217.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8)) returned 1 [0217.710] SetErrorMode (uMode=0x0) returned 0x1 [0217.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x0) returned 0x4b [0217.857] SetErrorMode (uMode=0x1) returned 0x0 [0217.857] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.862] SetErrorMode (uMode=0x0) returned 0x1 [0217.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x0) returned 0x4b [0217.866] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png")) returned 0 [0217.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x0) returned 0x4b [0217.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x0) returned 0x4b [0217.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x0) returned 0x4b [0217.874] SetErrorMode (uMode=0x1) returned 0x0 [0217.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0217.875] GetFileType (hFile=0x18c) returned 0x1 [0217.875] SetErrorMode (uMode=0x0) returned 0x1 [0217.876] GetFileType (hFile=0x18c) returned 0x1 [0217.876] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x13c8 [0217.876] ReadFile (in: hFile=0x18c, lpBuffer=0x27d66d8, nNumberOfBytesToRead=0x13c8, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d66d8*, lpNumberOfBytesRead=0x27e6e8*=0x13c8, lpOverlapped=0x0) returned 1 [0217.877] CloseHandle (hObject=0x18c) returned 1 [0217.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x0) returned 0x4b [0217.878] SetErrorMode (uMode=0x1) returned 0x0 [0217.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8)) returned 1 [0217.878] SetErrorMode (uMode=0x0) returned 0x1 [0218.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x0) returned 0x4b [0218.022] SetErrorMode (uMode=0x1) returned 0x0 [0218.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.028] SetErrorMode (uMode=0x0) returned 0x1 [0218.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x0) returned 0x4b [0218.029] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png")) returned 0 [0218.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x0) returned 0x4b [0218.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x0) returned 0x4b [0218.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x0) returned 0x4b [0218.036] SetErrorMode (uMode=0x1) returned 0x0 [0218.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.038] GetFileType (hFile=0x18c) returned 0x1 [0218.038] SetErrorMode (uMode=0x0) returned 0x1 [0218.038] GetFileType (hFile=0x18c) returned 0x1 [0218.038] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1010 [0218.038] ReadFile (in: hFile=0x18c, lpBuffer=0x283c808, nNumberOfBytesToRead=0x1010, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283c808*, lpNumberOfBytesRead=0x27e6e8*=0x1010, lpOverlapped=0x0) returned 1 [0218.040] CloseHandle (hObject=0x18c) returned 1 [0218.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x0) returned 0x4b [0218.041] SetErrorMode (uMode=0x1) returned 0x0 [0218.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0218.041] SetErrorMode (uMode=0x0) returned 0x1 [0218.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x0) returned 0x4b [0218.151] SetErrorMode (uMode=0x1) returned 0x0 [0218.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.156] SetErrorMode (uMode=0x0) returned 0x1 [0218.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x0) returned 0x4b [0218.158] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png")) returned 0 [0218.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x0) returned 0x4a [0218.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x0) returned 0x4a [0218.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x0) returned 0x4a [0218.165] SetErrorMode (uMode=0x1) returned 0x0 [0218.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.166] GetFileType (hFile=0x18c) returned 0x1 [0218.166] SetErrorMode (uMode=0x0) returned 0x1 [0218.166] GetFileType (hFile=0x18c) returned 0x1 [0218.166] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0218.166] ReadFile (in: hFile=0x18c, lpBuffer=0x28a0b88, nNumberOfBytesToRead=0x1456, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a0b88*, lpNumberOfBytesRead=0x27e6e8*=0x1456, lpOverlapped=0x0) returned 1 [0218.179] CloseHandle (hObject=0x18c) returned 1 [0218.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x0) returned 0x4a [0218.180] SetErrorMode (uMode=0x1) returned 0x0 [0218.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0218.180] SetErrorMode (uMode=0x0) returned 0x1 [0218.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x0) returned 0x4a [0218.324] SetErrorMode (uMode=0x1) returned 0x0 [0218.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.329] SetErrorMode (uMode=0x0) returned 0x1 [0218.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x0) returned 0x4a [0218.331] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png")) returned 0 [0218.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x0) returned 0x4b [0218.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x0) returned 0x4b [0218.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x0) returned 0x4b [0218.335] SetErrorMode (uMode=0x1) returned 0x0 [0218.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.337] GetFileType (hFile=0x18c) returned 0x1 [0218.337] SetErrorMode (uMode=0x0) returned 0x1 [0218.337] GetFileType (hFile=0x18c) returned 0x1 [0218.337] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1010 [0218.337] ReadFile (in: hFile=0x18c, lpBuffer=0x29074e0, nNumberOfBytesToRead=0x1010, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x29074e0*, lpNumberOfBytesRead=0x27e6e8*=0x1010, lpOverlapped=0x0) returned 1 [0218.338] CloseHandle (hObject=0x18c) returned 1 [0218.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x0) returned 0x4b [0218.339] SetErrorMode (uMode=0x1) returned 0x0 [0218.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0218.339] SetErrorMode (uMode=0x0) returned 0x1 [0218.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x0) returned 0x4b [0218.448] SetErrorMode (uMode=0x1) returned 0x0 [0218.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.453] SetErrorMode (uMode=0x0) returned 0x1 [0218.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x0) returned 0x4b [0218.455] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png")) returned 0 [0218.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x0) returned 0x4b [0218.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x0) returned 0x4b [0218.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x0) returned 0x4b [0218.463] SetErrorMode (uMode=0x1) returned 0x0 [0218.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.465] GetFileType (hFile=0x18c) returned 0x1 [0218.465] SetErrorMode (uMode=0x0) returned 0x1 [0218.465] GetFileType (hFile=0x18c) returned 0x1 [0218.465] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x16df [0218.465] ReadFile (in: hFile=0x18c, lpBuffer=0x276b7f8, nNumberOfBytesToRead=0x16df, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276b7f8*, lpNumberOfBytesRead=0x27e6e8*=0x16df, lpOverlapped=0x0) returned 1 [0218.468] CloseHandle (hObject=0x18c) returned 1 [0218.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x0) returned 0x4b [0218.469] SetErrorMode (uMode=0x1) returned 0x0 [0218.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df)) returned 1 [0218.469] SetErrorMode (uMode=0x0) returned 0x1 [0218.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x0) returned 0x4b [0218.586] SetErrorMode (uMode=0x1) returned 0x0 [0218.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.591] SetErrorMode (uMode=0x0) returned 0x1 [0218.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x0) returned 0x4b [0218.593] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png")) returned 0 [0218.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x0) returned 0x4b [0218.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x0) returned 0x4b [0218.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x0) returned 0x4b [0218.600] SetErrorMode (uMode=0x1) returned 0x0 [0218.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.600] GetFileType (hFile=0x18c) returned 0x1 [0218.600] SetErrorMode (uMode=0x0) returned 0x1 [0218.600] GetFileType (hFile=0x18c) returned 0x1 [0218.600] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x16df [0218.600] ReadFile (in: hFile=0x18c, lpBuffer=0x27d3520, nNumberOfBytesToRead=0x16df, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d3520*, lpNumberOfBytesRead=0x27e6e8*=0x16df, lpOverlapped=0x0) returned 1 [0218.612] CloseHandle (hObject=0x18c) returned 1 [0218.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x0) returned 0x4b [0218.613] SetErrorMode (uMode=0x1) returned 0x0 [0218.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df)) returned 1 [0218.615] SetErrorMode (uMode=0x0) returned 0x1 [0218.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x0) returned 0x4b [0218.809] SetErrorMode (uMode=0x1) returned 0x0 [0218.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.815] SetErrorMode (uMode=0x0) returned 0x1 [0218.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x0) returned 0x4b [0218.817] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png")) returned 0 [0218.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x0) returned 0x4b [0218.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x0) returned 0x4b [0218.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x0) returned 0x4b [0218.823] SetErrorMode (uMode=0x1) returned 0x0 [0218.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.825] GetFileType (hFile=0x18c) returned 0x1 [0218.825] SetErrorMode (uMode=0x0) returned 0x1 [0218.825] GetFileType (hFile=0x18c) returned 0x1 [0218.825] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1010 [0218.825] ReadFile (in: hFile=0x18c, lpBuffer=0x283abc0, nNumberOfBytesToRead=0x1010, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283abc0*, lpNumberOfBytesRead=0x27e6e8*=0x1010, lpOverlapped=0x0) returned 1 [0218.827] CloseHandle (hObject=0x18c) returned 1 [0218.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x0) returned 0x4b [0218.827] SetErrorMode (uMode=0x1) returned 0x0 [0218.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0218.828] SetErrorMode (uMode=0x0) returned 0x1 [0218.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x0) returned 0x4b [0218.963] SetErrorMode (uMode=0x1) returned 0x0 [0218.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.968] SetErrorMode (uMode=0x0) returned 0x1 [0218.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x0) returned 0x4b [0218.971] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png")) returned 0 [0218.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x0) returned 0x4b [0218.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x0) returned 0x4b [0218.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x0) returned 0x4b [0218.980] SetErrorMode (uMode=0x1) returned 0x0 [0218.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0218.980] GetFileType (hFile=0x18c) returned 0x1 [0218.980] SetErrorMode (uMode=0x0) returned 0x1 [0218.980] GetFileType (hFile=0x18c) returned 0x1 [0218.981] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1010 [0218.981] ReadFile (in: hFile=0x18c, lpBuffer=0x289ebe8, nNumberOfBytesToRead=0x1010, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x289ebe8*, lpNumberOfBytesRead=0x27e6e8*=0x1010, lpOverlapped=0x0) returned 1 [0218.991] CloseHandle (hObject=0x18c) returned 1 [0218.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x0) returned 0x4b [0218.992] SetErrorMode (uMode=0x1) returned 0x0 [0218.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0218.992] SetErrorMode (uMode=0x0) returned 0x1 [0219.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x0) returned 0x4b [0219.152] SetErrorMode (uMode=0x1) returned 0x0 [0219.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.158] SetErrorMode (uMode=0x0) returned 0x1 [0219.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x0) returned 0x4b [0219.159] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png")) returned 0 [0219.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x0) returned 0x4b [0219.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x0) returned 0x4b [0219.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x0) returned 0x4b [0219.168] SetErrorMode (uMode=0x1) returned 0x0 [0219.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0219.169] GetFileType (hFile=0x18c) returned 0x1 [0219.169] SetErrorMode (uMode=0x0) returned 0x1 [0219.169] GetFileType (hFile=0x18c) returned 0x1 [0219.169] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0219.169] ReadFile (in: hFile=0x18c, lpBuffer=0x2903358, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2903358*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0219.171] CloseHandle (hObject=0x18c) returned 1 [0219.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x0) returned 0x4b [0219.172] SetErrorMode (uMode=0x1) returned 0x0 [0219.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0219.172] SetErrorMode (uMode=0x0) returned 0x1 [0219.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x0) returned 0x4b [0219.310] SetErrorMode (uMode=0x1) returned 0x0 [0219.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.315] SetErrorMode (uMode=0x0) returned 0x1 [0219.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x0) returned 0x4b [0219.317] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png")) returned 0 [0219.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x0) returned 0x4b [0219.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x0) returned 0x4b [0219.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x0) returned 0x4b [0219.322] SetErrorMode (uMode=0x1) returned 0x0 [0219.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0219.323] GetFileType (hFile=0x18c) returned 0x1 [0219.323] SetErrorMode (uMode=0x0) returned 0x1 [0219.323] GetFileType (hFile=0x18c) returned 0x1 [0219.323] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x16df [0219.323] ReadFile (in: hFile=0x18c, lpBuffer=0x276a4f0, nNumberOfBytesToRead=0x16df, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276a4f0*, lpNumberOfBytesRead=0x27e6e8*=0x16df, lpOverlapped=0x0) returned 1 [0219.325] CloseHandle (hObject=0x18c) returned 1 [0219.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x0) returned 0x4b [0219.326] SetErrorMode (uMode=0x1) returned 0x0 [0219.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df)) returned 1 [0219.326] SetErrorMode (uMode=0x0) returned 0x1 [0219.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x0) returned 0x4b [0219.490] SetErrorMode (uMode=0x1) returned 0x0 [0219.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.495] SetErrorMode (uMode=0x0) returned 0x1 [0219.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x0) returned 0x4b [0219.496] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png")) returned 0 [0219.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x0) returned 0x4b [0219.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x0) returned 0x4b [0219.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x0) returned 0x4b [0219.505] SetErrorMode (uMode=0x1) returned 0x0 [0219.505] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0219.505] GetFileType (hFile=0x18c) returned 0x1 [0219.505] SetErrorMode (uMode=0x0) returned 0x1 [0219.505] GetFileType (hFile=0x18c) returned 0x1 [0219.505] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0219.505] ReadFile (in: hFile=0x18c, lpBuffer=0x27d1d00, nNumberOfBytesToRead=0x1456, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d1d00*, lpNumberOfBytesRead=0x27e6e8*=0x1456, lpOverlapped=0x0) returned 1 [0219.513] CloseHandle (hObject=0x18c) returned 1 [0219.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x0) returned 0x4b [0219.514] SetErrorMode (uMode=0x1) returned 0x0 [0219.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0219.514] SetErrorMode (uMode=0x0) returned 0x1 [0219.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x0) returned 0x4b [0219.645] SetErrorMode (uMode=0x1) returned 0x0 [0219.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.650] SetErrorMode (uMode=0x0) returned 0x1 [0219.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x0) returned 0x4b [0219.651] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png")) returned 0 [0219.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x0) returned 0x4b [0219.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x0) returned 0x4b [0219.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x0) returned 0x4b [0219.660] SetErrorMode (uMode=0x1) returned 0x0 [0219.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0219.661] GetFileType (hFile=0x18c) returned 0x1 [0219.661] SetErrorMode (uMode=0x0) returned 0x1 [0219.661] GetFileType (hFile=0x18c) returned 0x1 [0219.661] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0219.661] ReadFile (in: hFile=0x18c, lpBuffer=0x2818b98, nNumberOfBytesToRead=0x1456, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2818b98*, lpNumberOfBytesRead=0x27e6e8*=0x1456, lpOverlapped=0x0) returned 1 [0219.663] CloseHandle (hObject=0x18c) returned 1 [0219.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x0) returned 0x4b [0219.664] SetErrorMode (uMode=0x1) returned 0x0 [0219.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0219.664] SetErrorMode (uMode=0x0) returned 0x1 [0219.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x0) returned 0x4b [0219.809] SetErrorMode (uMode=0x1) returned 0x0 [0219.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.821] SetErrorMode (uMode=0x0) returned 0x1 [0219.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x0) returned 0x4b [0219.824] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png")) returned 0 [0219.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x0) returned 0x4b [0219.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x0) returned 0x4b [0219.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x0) returned 0x4b [0219.834] SetErrorMode (uMode=0x1) returned 0x0 [0219.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0219.834] GetFileType (hFile=0x18c) returned 0x1 [0219.834] SetErrorMode (uMode=0x0) returned 0x1 [0219.834] GetFileType (hFile=0x18c) returned 0x1 [0219.834] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0219.834] ReadFile (in: hFile=0x18c, lpBuffer=0x2883bf8, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2883bf8*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0219.836] CloseHandle (hObject=0x18c) returned 1 [0219.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x0) returned 0x4b [0219.837] SetErrorMode (uMode=0x1) returned 0x0 [0219.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0219.837] SetErrorMode (uMode=0x0) returned 0x1 [0219.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x0) returned 0x4b [0219.991] SetErrorMode (uMode=0x1) returned 0x0 [0219.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.996] SetErrorMode (uMode=0x0) returned 0x1 [0219.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x0) returned 0x4b [0219.998] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png")) returned 0 [0220.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x0) returned 0x4a [0220.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x0) returned 0x4a [0220.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x0) returned 0x4a [0220.005] SetErrorMode (uMode=0x1) returned 0x0 [0220.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.005] GetFileType (hFile=0x18c) returned 0x1 [0220.005] SetErrorMode (uMode=0x0) returned 0x1 [0220.006] GetFileType (hFile=0x18c) returned 0x1 [0220.006] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0220.006] ReadFile (in: hFile=0x18c, lpBuffer=0x28ef478, nNumberOfBytesToRead=0x1456, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ef478*, lpNumberOfBytesRead=0x27e6e8*=0x1456, lpOverlapped=0x0) returned 1 [0220.008] CloseHandle (hObject=0x18c) returned 1 [0220.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x0) returned 0x4a [0220.009] SetErrorMode (uMode=0x1) returned 0x0 [0220.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0220.009] SetErrorMode (uMode=0x0) returned 0x1 [0220.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x0) returned 0x4a [0220.115] SetErrorMode (uMode=0x1) returned 0x0 [0220.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.119] SetErrorMode (uMode=0x0) returned 0x1 [0220.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x0) returned 0x4a [0220.120] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png")) returned 0 [0220.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x0) returned 0x4b [0220.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x0) returned 0x4b [0220.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x0) returned 0x4b [0220.126] SetErrorMode (uMode=0x1) returned 0x0 [0220.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.128] GetFileType (hFile=0x18c) returned 0x1 [0220.128] SetErrorMode (uMode=0x0) returned 0x1 [0220.128] GetFileType (hFile=0x18c) returned 0x1 [0220.128] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1874 [0220.128] ReadFile (in: hFile=0x18c, lpBuffer=0x275a810, nNumberOfBytesToRead=0x1874, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275a810*, lpNumberOfBytesRead=0x27e6e8*=0x1874, lpOverlapped=0x0) returned 1 [0220.129] CloseHandle (hObject=0x18c) returned 1 [0220.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x0) returned 0x4b [0220.130] SetErrorMode (uMode=0x1) returned 0x0 [0220.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874)) returned 1 [0220.131] SetErrorMode (uMode=0x0) returned 0x1 [0220.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x0) returned 0x4b [0220.258] SetErrorMode (uMode=0x1) returned 0x0 [0220.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.263] SetErrorMode (uMode=0x0) returned 0x1 [0220.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x0) returned 0x4b [0220.264] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png")) returned 0 [0220.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x0) returned 0x4b [0220.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x0) returned 0x4b [0220.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x0) returned 0x4b [0220.274] SetErrorMode (uMode=0x1) returned 0x0 [0220.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.274] GetFileType (hFile=0x18c) returned 0x1 [0220.274] SetErrorMode (uMode=0x0) returned 0x1 [0220.274] GetFileType (hFile=0x18c) returned 0x1 [0220.274] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfe2 [0220.274] ReadFile (in: hFile=0x18c, lpBuffer=0x27c8a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c8a28*, lpNumberOfBytesRead=0x27e6e8*=0xfe2, lpOverlapped=0x0) returned 1 [0220.276] CloseHandle (hObject=0x18c) returned 1 [0220.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x0) returned 0x4b [0220.277] SetErrorMode (uMode=0x1) returned 0x0 [0220.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0220.277] SetErrorMode (uMode=0x0) returned 0x1 [0220.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x0) returned 0x4b [0220.436] SetErrorMode (uMode=0x1) returned 0x0 [0220.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.444] SetErrorMode (uMode=0x0) returned 0x1 [0220.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x0) returned 0x4b [0220.446] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png")) returned 0 [0220.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x0) returned 0x4b [0220.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x0) returned 0x4b [0220.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x0) returned 0x4b [0220.455] SetErrorMode (uMode=0x1) returned 0x0 [0220.456] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.457] GetFileType (hFile=0x18c) returned 0x1 [0220.457] SetErrorMode (uMode=0x0) returned 0x1 [0220.457] GetFileType (hFile=0x18c) returned 0x1 [0220.457] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1135 [0220.457] ReadFile (in: hFile=0x18c, lpBuffer=0x2831c48, nNumberOfBytesToRead=0x1135, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2831c48*, lpNumberOfBytesRead=0x27e6e8*=0x1135, lpOverlapped=0x0) returned 1 [0220.459] CloseHandle (hObject=0x18c) returned 1 [0220.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x0) returned 0x4b [0220.461] SetErrorMode (uMode=0x1) returned 0x0 [0220.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0220.461] SetErrorMode (uMode=0x0) returned 0x1 [0220.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x0) returned 0x4b [0220.574] SetErrorMode (uMode=0x1) returned 0x0 [0220.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.580] SetErrorMode (uMode=0x0) returned 0x1 [0220.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x0) returned 0x4b [0220.581] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png")) returned 0 [0220.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x0) returned 0x4b [0220.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x0) returned 0x4b [0220.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x0) returned 0x4b [0220.586] SetErrorMode (uMode=0x1) returned 0x0 [0220.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.587] GetFileType (hFile=0x18c) returned 0x1 [0220.587] SetErrorMode (uMode=0x0) returned 0x1 [0220.587] GetFileType (hFile=0x18c) returned 0x1 [0220.587] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1135 [0220.587] ReadFile (in: hFile=0x18c, lpBuffer=0x2896c68, nNumberOfBytesToRead=0x1135, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2896c68*, lpNumberOfBytesRead=0x27e6e8*=0x1135, lpOverlapped=0x0) returned 1 [0220.589] CloseHandle (hObject=0x18c) returned 1 [0220.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x0) returned 0x4b [0220.589] SetErrorMode (uMode=0x1) returned 0x0 [0220.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0220.590] SetErrorMode (uMode=0x0) returned 0x1 [0220.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x0) returned 0x4b [0220.727] SetErrorMode (uMode=0x1) returned 0x0 [0220.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.733] SetErrorMode (uMode=0x0) returned 0x1 [0220.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x0) returned 0x4b [0220.735] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png")) returned 0 [0220.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x0) returned 0x4b [0220.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x0) returned 0x4b [0220.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x0) returned 0x4b [0220.742] SetErrorMode (uMode=0x1) returned 0x0 [0220.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.746] GetFileType (hFile=0x18c) returned 0x1 [0220.746] SetErrorMode (uMode=0x0) returned 0x1 [0220.746] GetFileType (hFile=0x18c) returned 0x1 [0220.746] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xb1e [0220.746] ReadFile (in: hFile=0x18c, lpBuffer=0x28fc700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28fc700*, lpNumberOfBytesRead=0x27e6e8*=0xb1e, lpOverlapped=0x0) returned 1 [0220.748] CloseHandle (hObject=0x18c) returned 1 [0220.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x0) returned 0x4b [0220.772] SetErrorMode (uMode=0x1) returned 0x0 [0220.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e)) returned 1 [0220.772] SetErrorMode (uMode=0x0) returned 0x1 [0220.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x0) returned 0x4b [0220.896] SetErrorMode (uMode=0x1) returned 0x0 [0220.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.901] SetErrorMode (uMode=0x0) returned 0x1 [0220.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x0) returned 0x4b [0220.903] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png")) returned 0 [0220.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x0) returned 0x4b [0220.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x0) returned 0x4b [0220.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x0) returned 0x4b [0220.910] SetErrorMode (uMode=0x1) returned 0x0 [0220.910] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0220.910] GetFileType (hFile=0x18c) returned 0x1 [0220.911] SetErrorMode (uMode=0x0) returned 0x1 [0220.911] GetFileType (hFile=0x18c) returned 0x1 [0220.911] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0220.911] ReadFile (in: hFile=0x18c, lpBuffer=0x275ea28, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275ea28*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0220.912] CloseHandle (hObject=0x18c) returned 1 [0220.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x0) returned 0x4b [0220.913] SetErrorMode (uMode=0x1) returned 0x0 [0220.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0220.914] SetErrorMode (uMode=0x0) returned 0x1 [0221.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x0) returned 0x4b [0221.034] SetErrorMode (uMode=0x1) returned 0x0 [0221.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.040] SetErrorMode (uMode=0x0) returned 0x1 [0221.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x0) returned 0x4b [0221.041] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png")) returned 0 [0221.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x0) returned 0x4b [0221.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x0) returned 0x4b [0221.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x0) returned 0x4b [0221.047] SetErrorMode (uMode=0x1) returned 0x0 [0221.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.048] GetFileType (hFile=0x18c) returned 0x1 [0221.048] SetErrorMode (uMode=0x0) returned 0x1 [0221.048] GetFileType (hFile=0x18c) returned 0x1 [0221.048] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xfe2 [0221.048] ReadFile (in: hFile=0x18c, lpBuffer=0x27c7098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c7098*, lpNumberOfBytesRead=0x27e6e8*=0xfe2, lpOverlapped=0x0) returned 1 [0221.050] CloseHandle (hObject=0x18c) returned 1 [0221.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x0) returned 0x4b [0221.051] SetErrorMode (uMode=0x1) returned 0x0 [0221.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0221.051] SetErrorMode (uMode=0x0) returned 0x1 [0221.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x0) returned 0x4b [0221.201] SetErrorMode (uMode=0x1) returned 0x0 [0221.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.206] SetErrorMode (uMode=0x0) returned 0x1 [0221.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x0) returned 0x4b [0221.208] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png")) returned 0 [0221.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x0) returned 0x4b [0221.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x0) returned 0x4b [0221.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x0) returned 0x4b [0221.215] SetErrorMode (uMode=0x1) returned 0x0 [0221.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.215] GetFileType (hFile=0x18c) returned 0x1 [0221.215] SetErrorMode (uMode=0x0) returned 0x1 [0221.215] GetFileType (hFile=0x18c) returned 0x1 [0221.215] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1456 [0221.216] ReadFile (in: hFile=0x18c, lpBuffer=0x282b168, nNumberOfBytesToRead=0x1456, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x282b168*, lpNumberOfBytesRead=0x27e6e8*=0x1456, lpOverlapped=0x0) returned 1 [0221.217] CloseHandle (hObject=0x18c) returned 1 [0221.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x0) returned 0x4b [0221.219] SetErrorMode (uMode=0x1) returned 0x0 [0221.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1 [0221.219] SetErrorMode (uMode=0x0) returned 0x1 [0221.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x0) returned 0x4b [0221.354] SetErrorMode (uMode=0x1) returned 0x0 [0221.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.358] SetErrorMode (uMode=0x0) returned 0x1 [0221.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x0) returned 0x4b [0221.360] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png")) returned 0 [0221.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x0) returned 0x4a [0221.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x0) returned 0x4a [0221.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x0) returned 0x4a [0221.365] SetErrorMode (uMode=0x1) returned 0x0 [0221.365] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.367] GetFileType (hFile=0x18c) returned 0x1 [0221.367] SetErrorMode (uMode=0x0) returned 0x1 [0221.367] GetFileType (hFile=0x18c) returned 0x1 [0221.367] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1701 [0221.367] ReadFile (in: hFile=0x18c, lpBuffer=0x2891b08, nNumberOfBytesToRead=0x1701, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2891b08*, lpNumberOfBytesRead=0x27e6e8*=0x1701, lpOverlapped=0x0) returned 1 [0221.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x0) returned 0x4a [0221.370] SetErrorMode (uMode=0x1) returned 0x0 [0221.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701)) returned 1 [0221.371] SetErrorMode (uMode=0x0) returned 0x1 [0221.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x0) returned 0x4a [0221.433] SetErrorMode (uMode=0x1) returned 0x0 [0221.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.437] SetErrorMode (uMode=0x0) returned 0x1 [0221.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x0) returned 0x4a [0221.439] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png")) returned 0 [0221.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x0) returned 0x4a [0221.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x0) returned 0x4a [0221.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x0) returned 0x4a [0221.445] SetErrorMode (uMode=0x1) returned 0x0 [0221.445] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.445] GetFileType (hFile=0x18c) returned 0x1 [0221.445] SetErrorMode (uMode=0x0) returned 0x1 [0221.445] GetFileType (hFile=0x18c) returned 0x1 [0221.445] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1701 [0221.445] ReadFile (in: hFile=0x18c, lpBuffer=0x28f9568, nNumberOfBytesToRead=0x1701, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f9568*, lpNumberOfBytesRead=0x27e6e8*=0x1701, lpOverlapped=0x0) returned 1 [0221.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x0) returned 0x4a [0221.448] SetErrorMode (uMode=0x1) returned 0x0 [0221.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701)) returned 1 [0221.448] SetErrorMode (uMode=0x0) returned 0x1 [0221.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x0) returned 0x4a [0221.513] SetErrorMode (uMode=0x1) returned 0x0 [0221.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.517] SetErrorMode (uMode=0x0) returned 0x1 [0221.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x0) returned 0x4a [0221.519] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png")) returned 0 [0221.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x0) returned 0x4a [0221.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x0) returned 0x4a [0221.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x0) returned 0x4a [0221.525] SetErrorMode (uMode=0x1) returned 0x0 [0221.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.525] GetFileType (hFile=0x18c) returned 0x1 [0221.525] SetErrorMode (uMode=0x0) returned 0x1 [0221.525] GetFileType (hFile=0x18c) returned 0x1 [0221.525] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1701 [0221.525] ReadFile (in: hFile=0x18c, lpBuffer=0x2760d78, nNumberOfBytesToRead=0x1701, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2760d78*, lpNumberOfBytesRead=0x27e6e8*=0x1701, lpOverlapped=0x0) returned 1 [0221.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x0) returned 0x4a [0221.530] SetErrorMode (uMode=0x1) returned 0x0 [0221.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701)) returned 1 [0221.530] SetErrorMode (uMode=0x0) returned 0x1 [0221.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x0) returned 0x4a [0221.631] SetErrorMode (uMode=0x1) returned 0x0 [0221.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.636] SetErrorMode (uMode=0x0) returned 0x1 [0221.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x0) returned 0x4a [0221.638] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png")) returned 0 [0221.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x0) returned 0x4a [0221.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x0) returned 0x4a [0221.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x0) returned 0x4a [0221.645] SetErrorMode (uMode=0x1) returned 0x0 [0221.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.646] GetFileType (hFile=0x18c) returned 0x1 [0221.646] SetErrorMode (uMode=0x0) returned 0x1 [0221.646] GetFileType (hFile=0x18c) returned 0x1 [0221.646] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0221.646] ReadFile (in: hFile=0x18c, lpBuffer=0x27c8538, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c8538*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0221.648] CloseHandle (hObject=0x18c) returned 1 [0221.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x0) returned 0x4a [0221.649] SetErrorMode (uMode=0x1) returned 0x0 [0221.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0221.649] SetErrorMode (uMode=0x0) returned 0x1 [0221.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x0) returned 0x4a [0221.822] SetErrorMode (uMode=0x1) returned 0x0 [0221.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.827] SetErrorMode (uMode=0x0) returned 0x1 [0221.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x0) returned 0x4a [0221.829] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png")) returned 0 [0221.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x0) returned 0x4a [0221.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x0) returned 0x4a [0221.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x0) returned 0x4a [0221.836] SetErrorMode (uMode=0x1) returned 0x0 [0221.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.847] GetFileType (hFile=0x18c) returned 0x1 [0221.847] SetErrorMode (uMode=0x0) returned 0x1 [0221.847] GetFileType (hFile=0x18c) returned 0x1 [0221.847] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1551 [0221.847] ReadFile (in: hFile=0x18c, lpBuffer=0x282efb8, nNumberOfBytesToRead=0x1551, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x282efb8*, lpNumberOfBytesRead=0x27e6e8*=0x1551, lpOverlapped=0x0) returned 1 [0221.848] CloseHandle (hObject=0x18c) returned 1 [0221.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x0) returned 0x4a [0221.850] SetErrorMode (uMode=0x1) returned 0x0 [0221.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1 [0221.850] SetErrorMode (uMode=0x0) returned 0x1 [0221.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x0) returned 0x4a [0221.957] SetErrorMode (uMode=0x1) returned 0x0 [0221.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0221.962] SetErrorMode (uMode=0x0) returned 0x1 [0221.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x0) returned 0x4a [0221.966] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png")) returned 0 [0221.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x54 [0221.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x54 [0221.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x54 [0221.976] SetErrorMode (uMode=0x1) returned 0x0 [0221.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0221.977] GetFileType (hFile=0x18c) returned 0x1 [0221.977] SetErrorMode (uMode=0x0) returned 0x1 [0221.977] GetFileType (hFile=0x18c) returned 0x1 [0221.977] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3032 [0221.977] ReadFile (in: hFile=0x18c, lpBuffer=0x2895c10, nNumberOfBytesToRead=0x3032, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2895c10*, lpNumberOfBytesRead=0x27e6e8*=0x3032, lpOverlapped=0x0) returned 1 [0221.979] CloseHandle (hObject=0x18c) returned 1 [0221.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x54 [0221.980] SetErrorMode (uMode=0x1) returned 0x0 [0221.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032)) returned 1 [0221.980] SetErrorMode (uMode=0x0) returned 0x1 [0222.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x54 [0222.081] SetErrorMode (uMode=0x1) returned 0x0 [0222.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0222.085] SetErrorMode (uMode=0x0) returned 0x1 [0222.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png", lpFilePart=0x0) returned 0x54 [0222.087] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png")) returned 0 [0222.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", lpFilePart=0x0) returned 0x52 [0222.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", lpFilePart=0x0) returned 0x52 [0222.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", lpFilePart=0x0) returned 0x52 [0222.096] SetErrorMode (uMode=0x1) returned 0x0 [0222.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0222.096] GetFileType (hFile=0x18c) returned 0x1 [0222.096] SetErrorMode (uMode=0x0) returned 0x1 [0222.096] GetFileType (hFile=0x18c) returned 0x1 [0222.096] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1aa [0222.096] ReadFile (in: hFile=0x18c, lpBuffer=0x290a268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x290a268*, lpNumberOfBytesRead=0x27e6e8*=0x1aa, lpOverlapped=0x0) returned 1 [0222.097] CloseHandle (hObject=0x18c) returned 1 [0222.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", lpFilePart=0x0) returned 0x52 [0222.098] SetErrorMode (uMode=0x1) returned 0x0 [0222.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0222.098] SetErrorMode (uMode=0x0) returned 0x1 [0222.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", lpFilePart=0x0) returned 0x52 [0222.321] SetErrorMode (uMode=0x1) returned 0x0 [0222.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0222.330] SetErrorMode (uMode=0x0) returned 0x1 [0222.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png", lpFilePart=0x0) returned 0x52 [0222.332] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png")) returned 0 [0222.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", lpFilePart=0x0) returned 0x57 [0222.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", lpFilePart=0x0) returned 0x57 [0222.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", lpFilePart=0x0) returned 0x57 [0222.339] SetErrorMode (uMode=0x1) returned 0x0 [0222.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0222.343] GetFileType (hFile=0x18c) returned 0x1 [0222.343] SetErrorMode (uMode=0x0) returned 0x1 [0222.343] GetFileType (hFile=0x18c) returned 0x1 [0222.343] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcde [0222.343] ReadFile (in: hFile=0x18c, lpBuffer=0x27672e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27672e8*, lpNumberOfBytesRead=0x27e6e8*=0xcde, lpOverlapped=0x0) returned 1 [0222.345] CloseHandle (hObject=0x18c) returned 1 [0222.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", lpFilePart=0x0) returned 0x57 [0222.346] SetErrorMode (uMode=0x1) returned 0x0 [0222.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde)) returned 1 [0222.346] SetErrorMode (uMode=0x0) returned 0x1 [0222.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", lpFilePart=0x0) returned 0x57 [0222.485] SetErrorMode (uMode=0x1) returned 0x0 [0222.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0222.490] SetErrorMode (uMode=0x0) returned 0x1 [0222.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png", lpFilePart=0x0) returned 0x57 [0222.492] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png")) returned 0 [0222.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", lpFilePart=0x0) returned 0x5c [0222.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", lpFilePart=0x0) returned 0x5c [0222.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", lpFilePart=0x0) returned 0x5c [0222.502] SetErrorMode (uMode=0x1) returned 0x0 [0222.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0222.503] GetFileType (hFile=0x18c) returned 0x1 [0222.503] SetErrorMode (uMode=0x0) returned 0x1 [0222.504] GetFileType (hFile=0x18c) returned 0x1 [0222.504] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcdf [0222.504] ReadFile (in: hFile=0x18c, lpBuffer=0x27cc0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cc0c0*, lpNumberOfBytesRead=0x27e6e8*=0xcdf, lpOverlapped=0x0) returned 1 [0222.505] CloseHandle (hObject=0x18c) returned 1 [0222.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", lpFilePart=0x0) returned 0x5c [0222.506] SetErrorMode (uMode=0x1) returned 0x0 [0222.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf)) returned 1 [0222.506] SetErrorMode (uMode=0x0) returned 0x1 [0222.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", lpFilePart=0x0) returned 0x5c [0222.681] SetErrorMode (uMode=0x1) returned 0x0 [0222.681] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0222.686] SetErrorMode (uMode=0x0) returned 0x1 [0222.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png", lpFilePart=0x0) returned 0x5c [0222.688] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png")) returned 0 [0222.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", lpFilePart=0x0) returned 0x57 [0222.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", lpFilePart=0x0) returned 0x57 [0222.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", lpFilePart=0x0) returned 0x57 [0222.694] SetErrorMode (uMode=0x1) returned 0x0 [0222.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0222.695] GetFileType (hFile=0x18c) returned 0x1 [0222.695] SetErrorMode (uMode=0x0) returned 0x1 [0222.695] GetFileType (hFile=0x18c) returned 0x1 [0222.695] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xcdb [0222.695] ReadFile (in: hFile=0x18c, lpBuffer=0x28303d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28303d8*, lpNumberOfBytesRead=0x27e6e8*=0xcdb, lpOverlapped=0x0) returned 1 [0222.708] CloseHandle (hObject=0x18c) returned 1 [0222.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", lpFilePart=0x0) returned 0x57 [0222.709] SetErrorMode (uMode=0x1) returned 0x0 [0222.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb)) returned 1 [0222.709] SetErrorMode (uMode=0x0) returned 0x1 [0222.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", lpFilePart=0x0) returned 0x57 [0222.863] SetErrorMode (uMode=0x1) returned 0x0 [0222.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0222.868] SetErrorMode (uMode=0x0) returned 0x1 [0222.870] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png", lpFilePart=0x0) returned 0x57 [0222.870] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png")) returned 0 [0222.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", lpFilePart=0x0) returned 0x55 [0222.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", lpFilePart=0x0) returned 0x55 [0222.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", lpFilePart=0x0) returned 0x55 [0222.878] SetErrorMode (uMode=0x1) returned 0x0 [0222.878] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0222.879] GetFileType (hFile=0x18c) returned 0x1 [0222.879] SetErrorMode (uMode=0x0) returned 0x1 [0222.879] GetFileType (hFile=0x18c) returned 0x1 [0222.879] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xca8 [0222.879] ReadFile (in: hFile=0x18c, lpBuffer=0x28945d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28945d8*, lpNumberOfBytesRead=0x27e6e8*=0xca8, lpOverlapped=0x0) returned 1 [0222.881] CloseHandle (hObject=0x18c) returned 1 [0222.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", lpFilePart=0x0) returned 0x55 [0222.882] SetErrorMode (uMode=0x1) returned 0x0 [0222.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8)) returned 1 [0222.882] SetErrorMode (uMode=0x0) returned 0x1 [0223.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", lpFilePart=0x0) returned 0x55 [0223.055] SetErrorMode (uMode=0x1) returned 0x0 [0223.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.060] SetErrorMode (uMode=0x0) returned 0x1 [0223.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png", lpFilePart=0x0) returned 0x55 [0223.062] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png")) returned 0 [0223.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", lpFilePart=0x0) returned 0x58 [0223.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", lpFilePart=0x0) returned 0x58 [0223.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", lpFilePart=0x0) returned 0x58 [0223.070] SetErrorMode (uMode=0x1) returned 0x0 [0223.070] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0223.072] GetFileType (hFile=0x18c) returned 0x1 [0223.072] SetErrorMode (uMode=0x0) returned 0x1 [0223.072] GetFileType (hFile=0x18c) returned 0x1 [0223.072] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xdf5 [0223.072] ReadFile (in: hFile=0x18c, lpBuffer=0x28f87e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f87e0*, lpNumberOfBytesRead=0x27e6e8*=0xdf5, lpOverlapped=0x0) returned 1 [0223.073] CloseHandle (hObject=0x18c) returned 1 [0223.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", lpFilePart=0x0) returned 0x58 [0223.074] SetErrorMode (uMode=0x1) returned 0x0 [0223.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5)) returned 1 [0223.074] SetErrorMode (uMode=0x0) returned 0x1 [0223.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", lpFilePart=0x0) returned 0x58 [0223.202] SetErrorMode (uMode=0x1) returned 0x0 [0223.202] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.206] SetErrorMode (uMode=0x0) returned 0x1 [0223.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png", lpFilePart=0x0) returned 0x58 [0223.208] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png")) returned 0 [0223.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.214] SetErrorMode (uMode=0x1) returned 0x0 [0223.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0223.215] GetFileType (hFile=0x18c) returned 0x1 [0223.215] SetErrorMode (uMode=0x0) returned 0x1 [0223.215] GetFileType (hFile=0x18c) returned 0x1 [0223.215] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xdfd [0223.215] ReadFile (in: hFile=0x18c, lpBuffer=0x275d408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275d408*, lpNumberOfBytesRead=0x27e6e8*=0xdfd, lpOverlapped=0x0) returned 1 [0223.216] CloseHandle (hObject=0x18c) returned 1 [0223.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.217] SetErrorMode (uMode=0x1) returned 0x0 [0223.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd)) returned 1 [0223.217] SetErrorMode (uMode=0x0) returned 0x1 [0223.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.372] SetErrorMode (uMode=0x1) returned 0x0 [0223.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.377] SetErrorMode (uMode=0x0) returned 0x1 [0223.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.379] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png")) returned 0 [0223.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", lpFilePart=0x0) returned 0x58 [0223.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", lpFilePart=0x0) returned 0x58 [0223.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", lpFilePart=0x0) returned 0x58 [0223.385] SetErrorMode (uMode=0x1) returned 0x0 [0223.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0223.386] GetFileType (hFile=0x18c) returned 0x1 [0223.386] SetErrorMode (uMode=0x0) returned 0x1 [0223.386] GetFileType (hFile=0x18c) returned 0x1 [0223.386] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xde7 [0223.387] ReadFile (in: hFile=0x18c, lpBuffer=0x27c1ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27c1ee0*, lpNumberOfBytesRead=0x27e6e8*=0xde7, lpOverlapped=0x0) returned 1 [0223.388] CloseHandle (hObject=0x18c) returned 1 [0223.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", lpFilePart=0x0) returned 0x58 [0223.389] SetErrorMode (uMode=0x1) returned 0x0 [0223.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7)) returned 1 [0223.389] SetErrorMode (uMode=0x0) returned 0x1 [0223.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", lpFilePart=0x0) returned 0x58 [0223.488] SetErrorMode (uMode=0x1) returned 0x0 [0223.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.494] SetErrorMode (uMode=0x0) returned 0x1 [0223.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png", lpFilePart=0x0) returned 0x58 [0223.495] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png")) returned 0 [0223.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.502] SetErrorMode (uMode=0x1) returned 0x0 [0223.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0223.503] GetFileType (hFile=0x18c) returned 0x1 [0223.503] SetErrorMode (uMode=0x0) returned 0x1 [0223.503] GetFileType (hFile=0x18c) returned 0x1 [0223.503] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xdfe [0223.503] ReadFile (in: hFile=0x18c, lpBuffer=0x2826928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2826928*, lpNumberOfBytesRead=0x27e6e8*=0xdfe, lpOverlapped=0x0) returned 1 [0223.504] CloseHandle (hObject=0x18c) returned 1 [0223.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.505] SetErrorMode (uMode=0x1) returned 0x0 [0223.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe)) returned 1 [0223.506] SetErrorMode (uMode=0x0) returned 0x1 [0223.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.626] SetErrorMode (uMode=0x1) returned 0x0 [0223.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.631] SetErrorMode (uMode=0x0) returned 0x1 [0223.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png", lpFilePart=0x0) returned 0x5d [0223.633] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png")) returned 0 [0223.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", lpFilePart=0x0) returned 0x56 [0223.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", lpFilePart=0x0) returned 0x56 [0223.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", lpFilePart=0x0) returned 0x56 [0223.644] SetErrorMode (uMode=0x1) returned 0x0 [0223.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0223.645] GetFileType (hFile=0x18c) returned 0x1 [0223.645] SetErrorMode (uMode=0x0) returned 0x1 [0223.645] GetFileType (hFile=0x18c) returned 0x1 [0223.645] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd68 [0223.645] ReadFile (in: hFile=0x18c, lpBuffer=0x288b398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x288b398*, lpNumberOfBytesRead=0x27e6e8*=0xd68, lpOverlapped=0x0) returned 1 [0223.647] CloseHandle (hObject=0x18c) returned 1 [0223.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", lpFilePart=0x0) returned 0x56 [0223.648] SetErrorMode (uMode=0x1) returned 0x0 [0223.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68)) returned 1 [0223.648] SetErrorMode (uMode=0x0) returned 0x1 [0223.847] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", lpFilePart=0x0) returned 0x56 [0223.847] SetErrorMode (uMode=0x1) returned 0x0 [0223.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.853] SetErrorMode (uMode=0x0) returned 0x1 [0223.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png", lpFilePart=0x0) returned 0x56 [0223.855] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png")) returned 0 [0223.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", lpFilePart=0x0) returned 0x5b [0223.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", lpFilePart=0x0) returned 0x5b [0223.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", lpFilePart=0x0) returned 0x5b [0223.861] SetErrorMode (uMode=0x1) returned 0x0 [0223.861] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0223.861] GetFileType (hFile=0x18c) returned 0x1 [0223.861] SetErrorMode (uMode=0x0) returned 0x1 [0223.861] GetFileType (hFile=0x18c) returned 0x1 [0223.861] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xd80 [0223.862] ReadFile (in: hFile=0x18c, lpBuffer=0x28ef948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ef948*, lpNumberOfBytesRead=0x27e6e8*=0xd80, lpOverlapped=0x0) returned 1 [0223.863] CloseHandle (hObject=0x18c) returned 1 [0223.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", lpFilePart=0x0) returned 0x5b [0223.864] SetErrorMode (uMode=0x1) returned 0x0 [0223.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0223.865] SetErrorMode (uMode=0x0) returned 0x1 [0223.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", lpFilePart=0x0) returned 0x5b [0223.989] SetErrorMode (uMode=0x1) returned 0x0 [0223.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0223.997] SetErrorMode (uMode=0x0) returned 0x1 [0223.998] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png", lpFilePart=0x0) returned 0x5b [0223.998] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png")) returned 0 [0224.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", lpFilePart=0x0) returned 0x5b [0224.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", lpFilePart=0x0) returned 0x5b [0224.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", lpFilePart=0x0) returned 0x5b [0224.005] SetErrorMode (uMode=0x1) returned 0x0 [0224.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0224.006] GetFileType (hFile=0x18c) returned 0x1 [0224.006] SetErrorMode (uMode=0x0) returned 0x1 [0224.006] GetFileType (hFile=0x18c) returned 0x1 [0224.006] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xafe [0224.007] ReadFile (in: hFile=0x18c, lpBuffer=0x2753ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2753ea8*, lpNumberOfBytesRead=0x27e6e8*=0xafe, lpOverlapped=0x0) returned 1 [0224.008] CloseHandle (hObject=0x18c) returned 1 [0224.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", lpFilePart=0x0) returned 0x5b [0224.010] SetErrorMode (uMode=0x1) returned 0x0 [0224.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe)) returned 1 [0224.010] SetErrorMode (uMode=0x0) returned 0x1 [0224.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", lpFilePart=0x0) returned 0x5b [0224.118] SetErrorMode (uMode=0x1) returned 0x0 [0224.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0224.124] SetErrorMode (uMode=0x0) returned 0x1 [0224.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png", lpFilePart=0x0) returned 0x5b [0224.126] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png")) returned 0 [0224.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", lpFilePart=0x0) returned 0x59 [0224.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", lpFilePart=0x0) returned 0x59 [0224.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", lpFilePart=0x0) returned 0x59 [0224.136] SetErrorMode (uMode=0x1) returned 0x0 [0224.136] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0224.136] GetFileType (hFile=0x18c) returned 0x1 [0224.136] SetErrorMode (uMode=0x0) returned 0x1 [0224.136] GetFileType (hFile=0x18c) returned 0x1 [0224.136] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xafd [0224.136] ReadFile (in: hFile=0x18c, lpBuffer=0x27b71d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27b71d0*, lpNumberOfBytesRead=0x27e6e8*=0xafd, lpOverlapped=0x0) returned 1 [0224.138] CloseHandle (hObject=0x18c) returned 1 [0224.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", lpFilePart=0x0) returned 0x59 [0224.139] SetErrorMode (uMode=0x1) returned 0x0 [0224.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd)) returned 1 [0224.139] SetErrorMode (uMode=0x0) returned 0x1 [0224.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", lpFilePart=0x0) returned 0x59 [0224.309] SetErrorMode (uMode=0x1) returned 0x0 [0224.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0224.316] SetErrorMode (uMode=0x0) returned 0x1 [0224.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png", lpFilePart=0x0) returned 0x59 [0224.318] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png")) returned 0 [0224.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", lpFilePart=0x0) returned 0x57 [0224.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", lpFilePart=0x0) returned 0x57 [0224.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", lpFilePart=0x0) returned 0x57 [0224.325] SetErrorMode (uMode=0x1) returned 0x0 [0224.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0224.329] GetFileType (hFile=0x18c) returned 0x1 [0224.329] SetErrorMode (uMode=0x0) returned 0x1 [0224.329] GetFileType (hFile=0x18c) returned 0x1 [0224.329] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2261 [0224.329] ReadFile (in: hFile=0x18c, lpBuffer=0x2819c28, nNumberOfBytesToRead=0x2261, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2819c28*, lpNumberOfBytesRead=0x27e6e8*=0x2261, lpOverlapped=0x0) returned 1 [0224.331] CloseHandle (hObject=0x18c) returned 1 [0224.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", lpFilePart=0x0) returned 0x57 [0224.332] SetErrorMode (uMode=0x1) returned 0x0 [0224.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261)) returned 1 [0224.333] SetErrorMode (uMode=0x0) returned 0x1 [0224.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", lpFilePart=0x0) returned 0x57 [0224.451] SetErrorMode (uMode=0x1) returned 0x0 [0224.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0224.456] SetErrorMode (uMode=0x0) returned 0x1 [0224.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png", lpFilePart=0x0) returned 0x57 [0224.458] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png")) returned 0 [0224.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", lpFilePart=0x0) returned 0x5c [0224.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", lpFilePart=0x0) returned 0x5c [0224.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", lpFilePart=0x0) returned 0x5c [0224.469] SetErrorMode (uMode=0x1) returned 0x0 [0224.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0224.469] GetFileType (hFile=0x18c) returned 0x1 [0224.469] SetErrorMode (uMode=0x0) returned 0x1 [0224.469] GetFileType (hFile=0x18c) returned 0x1 [0224.469] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x274e [0224.469] ReadFile (in: hFile=0x18c, lpBuffer=0x2887d40, nNumberOfBytesToRead=0x274e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2887d40*, lpNumberOfBytesRead=0x27e6e8*=0x274e, lpOverlapped=0x0) returned 1 [0224.702] CloseHandle (hObject=0x18c) returned 1 [0224.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", lpFilePart=0x0) returned 0x5c [0224.703] SetErrorMode (uMode=0x1) returned 0x0 [0224.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e)) returned 1 [0224.703] SetErrorMode (uMode=0x0) returned 0x1 [0224.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", lpFilePart=0x0) returned 0x5c [0224.884] SetErrorMode (uMode=0x1) returned 0x0 [0224.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0224.889] SetErrorMode (uMode=0x0) returned 0x1 [0224.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png", lpFilePart=0x0) returned 0x5c [0224.891] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png")) returned 0 [0224.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", lpFilePart=0x0) returned 0x61 [0224.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", lpFilePart=0x0) returned 0x61 [0224.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", lpFilePart=0x0) returned 0x61 [0224.897] SetErrorMode (uMode=0x1) returned 0x0 [0224.897] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0224.899] GetFileType (hFile=0x18c) returned 0x1 [0224.899] SetErrorMode (uMode=0x0) returned 0x1 [0224.899] GetFileType (hFile=0x18c) returned 0x1 [0224.899] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2685 [0224.899] ReadFile (in: hFile=0x18c, lpBuffer=0x28f6e80, nNumberOfBytesToRead=0x2685, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f6e80*, lpNumberOfBytesRead=0x27e6e8*=0x2685, lpOverlapped=0x0) returned 1 [0224.901] CloseHandle (hObject=0x18c) returned 1 [0224.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", lpFilePart=0x0) returned 0x61 [0224.902] SetErrorMode (uMode=0x1) returned 0x0 [0224.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685)) returned 1 [0224.902] SetErrorMode (uMode=0x0) returned 0x1 [0225.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", lpFilePart=0x0) returned 0x61 [0225.013] SetErrorMode (uMode=0x1) returned 0x0 [0225.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.018] SetErrorMode (uMode=0x0) returned 0x1 [0225.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png", lpFilePart=0x0) returned 0x61 [0225.020] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png")) returned 0 [0225.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", lpFilePart=0x0) returned 0x5b [0225.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", lpFilePart=0x0) returned 0x5b [0225.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", lpFilePart=0x0) returned 0x5b [0225.028] SetErrorMode (uMode=0x1) returned 0x0 [0225.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.029] GetFileType (hFile=0x18c) returned 0x1 [0225.029] SetErrorMode (uMode=0x0) returned 0x1 [0225.029] GetFileType (hFile=0x18c) returned 0x1 [0225.029] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2930 [0225.029] ReadFile (in: hFile=0x18c, lpBuffer=0x2765540, nNumberOfBytesToRead=0x2930, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2765540*, lpNumberOfBytesRead=0x27e6e8*=0x2930, lpOverlapped=0x0) returned 1 [0225.030] CloseHandle (hObject=0x18c) returned 1 [0225.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", lpFilePart=0x0) returned 0x5b [0225.031] SetErrorMode (uMode=0x1) returned 0x0 [0225.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930)) returned 1 [0225.032] SetErrorMode (uMode=0x0) returned 0x1 [0225.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", lpFilePart=0x0) returned 0x5b [0225.150] SetErrorMode (uMode=0x1) returned 0x0 [0225.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.155] SetErrorMode (uMode=0x0) returned 0x1 [0225.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png", lpFilePart=0x0) returned 0x5b [0225.157] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png")) returned 0 [0225.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", lpFilePart=0x0) returned 0x5a [0225.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", lpFilePart=0x0) returned 0x5a [0225.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", lpFilePart=0x0) returned 0x5a [0225.164] SetErrorMode (uMode=0x1) returned 0x0 [0225.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.167] GetFileType (hFile=0x18c) returned 0x1 [0225.167] SetErrorMode (uMode=0x0) returned 0x1 [0225.167] GetFileType (hFile=0x18c) returned 0x1 [0225.167] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2e6a [0225.167] ReadFile (in: hFile=0x18c, lpBuffer=0x27d5108, nNumberOfBytesToRead=0x2e6a, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d5108*, lpNumberOfBytesRead=0x27e6e8*=0x2e6a, lpOverlapped=0x0) returned 1 [0225.170] CloseHandle (hObject=0x18c) returned 1 [0225.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", lpFilePart=0x0) returned 0x5a [0225.171] SetErrorMode (uMode=0x1) returned 0x0 [0225.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a)) returned 1 [0225.172] SetErrorMode (uMode=0x0) returned 0x1 [0225.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", lpFilePart=0x0) returned 0x5a [0225.311] SetErrorMode (uMode=0x1) returned 0x0 [0225.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.316] SetErrorMode (uMode=0x0) returned 0x1 [0225.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png", lpFilePart=0x0) returned 0x5a [0225.318] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png")) returned 0 [0225.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x68 [0225.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x68 [0225.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x68 [0225.325] SetErrorMode (uMode=0x1) returned 0x0 [0225.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.325] GetFileType (hFile=0x18c) returned 0x1 [0225.325] SetErrorMode (uMode=0x0) returned 0x1 [0225.325] GetFileType (hFile=0x18c) returned 0x1 [0225.325] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2174 [0225.325] ReadFile (in: hFile=0x18c, lpBuffer=0x28474a0, nNumberOfBytesToRead=0x2174, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28474a0*, lpNumberOfBytesRead=0x27e6e8*=0x2174, lpOverlapped=0x0) returned 1 [0225.327] CloseHandle (hObject=0x18c) returned 1 [0225.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x68 [0225.328] SetErrorMode (uMode=0x1) returned 0x0 [0225.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1 [0225.328] SetErrorMode (uMode=0x0) returned 0x1 [0225.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x68 [0225.442] SetErrorMode (uMode=0x1) returned 0x0 [0225.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.446] SetErrorMode (uMode=0x0) returned 0x1 [0225.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x68 [0225.448] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png")) returned 0 [0225.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x76 [0225.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x76 [0225.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x76 [0225.454] SetErrorMode (uMode=0x1) returned 0x0 [0225.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.455] GetFileType (hFile=0x18c) returned 0x1 [0225.455] SetErrorMode (uMode=0x0) returned 0x1 [0225.455] GetFileType (hFile=0x18c) returned 0x1 [0225.455] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2ace [0225.455] ReadFile (in: hFile=0x18c, lpBuffer=0x28b2d98, nNumberOfBytesToRead=0x2ace, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b2d98*, lpNumberOfBytesRead=0x27e6e8*=0x2ace, lpOverlapped=0x0) returned 1 [0225.457] CloseHandle (hObject=0x18c) returned 1 [0225.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x76 [0225.457] SetErrorMode (uMode=0x1) returned 0x0 [0225.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace)) returned 1 [0225.457] SetErrorMode (uMode=0x0) returned 0x1 [0225.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x76 [0225.574] SetErrorMode (uMode=0x1) returned 0x0 [0225.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.579] SetErrorMode (uMode=0x0) returned 0x1 [0225.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x76 [0225.581] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png")) returned 0 [0225.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", lpFilePart=0x0) returned 0x5f [0225.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", lpFilePart=0x0) returned 0x5f [0225.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", lpFilePart=0x0) returned 0x5f [0225.589] SetErrorMode (uMode=0x1) returned 0x0 [0225.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.589] GetFileType (hFile=0x18c) returned 0x1 [0225.589] SetErrorMode (uMode=0x0) returned 0x1 [0225.589] GetFileType (hFile=0x18c) returned 0x1 [0225.589] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2264 [0225.589] ReadFile (in: hFile=0x18c, lpBuffer=0x2725f90, nNumberOfBytesToRead=0x2264, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2725f90*, lpNumberOfBytesRead=0x27e6e8*=0x2264, lpOverlapped=0x0) returned 1 [0225.591] CloseHandle (hObject=0x18c) returned 1 [0225.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", lpFilePart=0x0) returned 0x5f [0225.592] SetErrorMode (uMode=0x1) returned 0x0 [0225.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264)) returned 1 [0225.592] SetErrorMode (uMode=0x0) returned 0x1 [0225.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", lpFilePart=0x0) returned 0x5f [0225.782] SetErrorMode (uMode=0x1) returned 0x0 [0225.782] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.790] SetErrorMode (uMode=0x0) returned 0x1 [0225.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png", lpFilePart=0x0) returned 0x5f [0225.792] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png")) returned 0 [0225.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6d [0225.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6d [0225.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6d [0225.800] SetErrorMode (uMode=0x1) returned 0x0 [0225.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.803] GetFileType (hFile=0x18c) returned 0x1 [0225.803] SetErrorMode (uMode=0x0) returned 0x1 [0225.803] GetFileType (hFile=0x18c) returned 0x1 [0225.803] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b2d [0225.804] ReadFile (in: hFile=0x18c, lpBuffer=0x278f4c0, nNumberOfBytesToRead=0x2b2d, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x278f4c0*, lpNumberOfBytesRead=0x27e6e8*=0x2b2d, lpOverlapped=0x0) returned 1 [0225.806] CloseHandle (hObject=0x18c) returned 1 [0225.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6d [0225.807] SetErrorMode (uMode=0x1) returned 0x0 [0225.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d)) returned 1 [0225.807] SetErrorMode (uMode=0x0) returned 0x1 [0225.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6d [0225.933] SetErrorMode (uMode=0x1) returned 0x0 [0225.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0225.939] SetErrorMode (uMode=0x0) returned 0x1 [0225.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6d [0225.942] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png")) returned 0 [0225.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x67 [0225.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x67 [0225.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x67 [0225.950] SetErrorMode (uMode=0x1) returned 0x0 [0225.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0225.951] GetFileType (hFile=0x18c) returned 0x1 [0225.951] SetErrorMode (uMode=0x0) returned 0x1 [0225.951] GetFileType (hFile=0x18c) returned 0x1 [0225.951] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x21ad [0225.951] ReadFile (in: hFile=0x18c, lpBuffer=0x2800680, nNumberOfBytesToRead=0x21ad, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2800680*, lpNumberOfBytesRead=0x27e6e8*=0x21ad, lpOverlapped=0x0) returned 1 [0225.953] CloseHandle (hObject=0x18c) returned 1 [0225.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x67 [0225.954] SetErrorMode (uMode=0x1) returned 0x0 [0225.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad)) returned 1 [0225.954] SetErrorMode (uMode=0x0) returned 0x1 [0226.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x67 [0226.106] SetErrorMode (uMode=0x1) returned 0x0 [0226.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0226.112] SetErrorMode (uMode=0x0) returned 0x1 [0226.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x67 [0226.114] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png")) returned 0 [0226.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x75 [0226.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x75 [0226.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x75 [0226.122] SetErrorMode (uMode=0x1) returned 0x0 [0226.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0226.124] GetFileType (hFile=0x18c) returned 0x1 [0226.124] SetErrorMode (uMode=0x0) returned 0x1 [0226.124] GetFileType (hFile=0x18c) returned 0x1 [0226.124] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b86 [0226.124] ReadFile (in: hFile=0x18c, lpBuffer=0x286c448, nNumberOfBytesToRead=0x2b86, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x286c448*, lpNumberOfBytesRead=0x27e6e8*=0x2b86, lpOverlapped=0x0) returned 1 [0226.126] CloseHandle (hObject=0x18c) returned 1 [0226.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x75 [0226.127] SetErrorMode (uMode=0x1) returned 0x0 [0226.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86)) returned 1 [0226.127] SetErrorMode (uMode=0x0) returned 0x1 [0226.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x75 [0226.285] SetErrorMode (uMode=0x1) returned 0x0 [0226.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0226.291] SetErrorMode (uMode=0x0) returned 0x1 [0226.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x75 [0226.292] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png")) returned 0 [0226.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", lpFilePart=0x0) returned 0x5e [0226.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", lpFilePart=0x0) returned 0x5e [0226.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", lpFilePart=0x0) returned 0x5e [0226.301] SetErrorMode (uMode=0x1) returned 0x0 [0226.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0226.301] GetFileType (hFile=0x18c) returned 0x1 [0226.301] SetErrorMode (uMode=0x0) returned 0x1 [0226.301] GetFileType (hFile=0x18c) returned 0x1 [0226.301] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x251a [0226.302] ReadFile (in: hFile=0x18c, lpBuffer=0x28dda50, nNumberOfBytesToRead=0x251a, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28dda50*, lpNumberOfBytesRead=0x27e6e8*=0x251a, lpOverlapped=0x0) returned 1 [0226.304] CloseHandle (hObject=0x18c) returned 1 [0226.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", lpFilePart=0x0) returned 0x5e [0226.305] SetErrorMode (uMode=0x1) returned 0x0 [0226.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a)) returned 1 [0226.305] SetErrorMode (uMode=0x0) returned 0x1 [0226.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", lpFilePart=0x0) returned 0x5e [0226.494] SetErrorMode (uMode=0x1) returned 0x0 [0226.494] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0226.498] SetErrorMode (uMode=0x0) returned 0x1 [0226.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png", lpFilePart=0x0) returned 0x5e [0226.500] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png")) returned 0 [0226.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6c [0226.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6c [0226.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6c [0226.508] SetErrorMode (uMode=0x1) returned 0x0 [0226.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0226.509] GetFileType (hFile=0x18c) returned 0x1 [0226.509] SetErrorMode (uMode=0x0) returned 0x1 [0226.510] GetFileType (hFile=0x18c) returned 0x1 [0226.510] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2d6f [0226.510] ReadFile (in: hFile=0x18c, lpBuffer=0x274b180, nNumberOfBytesToRead=0x2d6f, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x274b180*, lpNumberOfBytesRead=0x27e6e8*=0x2d6f, lpOverlapped=0x0) returned 1 [0226.511] CloseHandle (hObject=0x18c) returned 1 [0226.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6c [0226.512] SetErrorMode (uMode=0x1) returned 0x0 [0226.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f)) returned 1 [0226.512] SetErrorMode (uMode=0x0) returned 0x1 [0226.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6c [0226.624] SetErrorMode (uMode=0x1) returned 0x0 [0226.624] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0226.630] SetErrorMode (uMode=0x0) returned 0x1 [0226.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6c [0226.633] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png")) returned 0 [0226.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6a [0226.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6a [0226.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6a [0226.641] SetErrorMode (uMode=0x1) returned 0x0 [0226.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0226.642] GetFileType (hFile=0x18c) returned 0x1 [0226.642] SetErrorMode (uMode=0x0) returned 0x1 [0226.642] GetFileType (hFile=0x18c) returned 0x1 [0226.642] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2334 [0226.642] ReadFile (in: hFile=0x18c, lpBuffer=0x27bd2d0, nNumberOfBytesToRead=0x2334, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27bd2d0*, lpNumberOfBytesRead=0x27e6e8*=0x2334, lpOverlapped=0x0) returned 1 [0226.646] CloseHandle (hObject=0x18c) returned 1 [0226.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6a [0226.647] SetErrorMode (uMode=0x1) returned 0x0 [0226.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334)) returned 1 [0226.647] SetErrorMode (uMode=0x0) returned 0x1 [0226.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6a [0226.798] SetErrorMode (uMode=0x1) returned 0x0 [0226.798] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0226.804] SetErrorMode (uMode=0x0) returned 0x1 [0226.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6a [0226.806] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png")) returned 0 [0226.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0226.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0226.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0226.816] SetErrorMode (uMode=0x1) returned 0x0 [0226.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0226.817] GetFileType (hFile=0x18c) returned 0x1 [0226.817] SetErrorMode (uMode=0x0) returned 0x1 [0226.817] GetFileType (hFile=0x18c) returned 0x1 [0226.818] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2c73 [0226.818] ReadFile (in: hFile=0x18c, lpBuffer=0x2829b08, nNumberOfBytesToRead=0x2c73, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2829b08*, lpNumberOfBytesRead=0x27e6e8*=0x2c73, lpOverlapped=0x0) returned 1 [0226.819] CloseHandle (hObject=0x18c) returned 1 [0226.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0226.820] SetErrorMode (uMode=0x1) returned 0x0 [0226.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73)) returned 1 [0226.820] SetErrorMode (uMode=0x0) returned 0x1 [0226.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0226.981] SetErrorMode (uMode=0x1) returned 0x0 [0226.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0226.986] SetErrorMode (uMode=0x0) returned 0x1 [0226.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0226.988] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png")) returned 0 [0226.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x69 [0226.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x69 [0226.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x69 [0226.993] SetErrorMode (uMode=0x1) returned 0x0 [0226.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0226.994] GetFileType (hFile=0x18c) returned 0x1 [0226.994] SetErrorMode (uMode=0x0) returned 0x1 [0226.994] GetFileType (hFile=0x18c) returned 0x1 [0226.994] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x21bc [0226.994] ReadFile (in: hFile=0x18c, lpBuffer=0x289b818, nNumberOfBytesToRead=0x21bc, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x289b818*, lpNumberOfBytesRead=0x27e6e8*=0x21bc, lpOverlapped=0x0) returned 1 [0226.996] CloseHandle (hObject=0x18c) returned 1 [0226.996] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x69 [0226.996] SetErrorMode (uMode=0x1) returned 0x0 [0226.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc)) returned 1 [0226.997] SetErrorMode (uMode=0x0) returned 0x1 [0227.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.113] SetErrorMode (uMode=0x1) returned 0x0 [0227.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0227.118] SetErrorMode (uMode=0x0) returned 0x1 [0227.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.120] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png")) returned 0 [0227.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.128] SetErrorMode (uMode=0x1) returned 0x0 [0227.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0227.131] GetFileType (hFile=0x18c) returned 0x1 [0227.131] SetErrorMode (uMode=0x0) returned 0x1 [0227.131] GetFileType (hFile=0x18c) returned 0x1 [0227.131] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b35 [0227.131] ReadFile (in: hFile=0x18c, lpBuffer=0x29074a0, nNumberOfBytesToRead=0x2b35, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x29074a0*, lpNumberOfBytesRead=0x27e6e8*=0x2b35, lpOverlapped=0x0) returned 1 [0227.133] CloseHandle (hObject=0x18c) returned 1 [0227.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.134] SetErrorMode (uMode=0x1) returned 0x0 [0227.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35)) returned 1 [0227.134] SetErrorMode (uMode=0x0) returned 0x1 [0227.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.267] SetErrorMode (uMode=0x1) returned 0x0 [0227.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0227.273] SetErrorMode (uMode=0x0) returned 0x1 [0227.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.275] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0 [0227.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6a [0227.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6a [0227.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6a [0227.283] SetErrorMode (uMode=0x1) returned 0x0 [0227.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0227.284] GetFileType (hFile=0x18c) returned 0x1 [0227.284] SetErrorMode (uMode=0x0) returned 0x1 [0227.284] GetFileType (hFile=0x18c) returned 0x1 [0227.284] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x22a6 [0227.284] ReadFile (in: hFile=0x18c, lpBuffer=0x27788c8, nNumberOfBytesToRead=0x22a6, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27788c8*, lpNumberOfBytesRead=0x27e6e8*=0x22a6, lpOverlapped=0x0) returned 1 [0227.286] CloseHandle (hObject=0x18c) returned 1 [0227.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6a [0227.287] SetErrorMode (uMode=0x1) returned 0x0 [0227.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6)) returned 1 [0227.287] SetErrorMode (uMode=0x0) returned 0x1 [0227.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6a [0227.395] SetErrorMode (uMode=0x1) returned 0x0 [0227.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0227.400] SetErrorMode (uMode=0x0) returned 0x1 [0227.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6a [0227.402] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png")) returned 0 [0227.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0227.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0227.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0227.408] SetErrorMode (uMode=0x1) returned 0x0 [0227.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0227.409] GetFileType (hFile=0x18c) returned 0x1 [0227.409] SetErrorMode (uMode=0x0) returned 0x1 [0227.409] GetFileType (hFile=0x18c) returned 0x1 [0227.409] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b1e [0227.410] ReadFile (in: hFile=0x18c, lpBuffer=0x27e4e90, nNumberOfBytesToRead=0x2b1e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e4e90*, lpNumberOfBytesRead=0x27e6e8*=0x2b1e, lpOverlapped=0x0) returned 1 [0227.412] CloseHandle (hObject=0x18c) returned 1 [0227.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0227.412] SetErrorMode (uMode=0x1) returned 0x0 [0227.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e)) returned 1 [0227.413] SetErrorMode (uMode=0x0) returned 0x1 [0227.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0227.522] SetErrorMode (uMode=0x1) returned 0x0 [0227.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0227.527] SetErrorMode (uMode=0x0) returned 0x1 [0227.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0227.529] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0 [0227.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.535] SetErrorMode (uMode=0x1) returned 0x0 [0227.535] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0227.535] GetFileType (hFile=0x18c) returned 0x1 [0227.535] SetErrorMode (uMode=0x0) returned 0x1 [0227.535] GetFileType (hFile=0x18c) returned 0x1 [0227.535] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2203 [0227.535] ReadFile (in: hFile=0x18c, lpBuffer=0x2856118, nNumberOfBytesToRead=0x2203, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2856118*, lpNumberOfBytesRead=0x27e6e8*=0x2203, lpOverlapped=0x0) returned 1 [0227.537] CloseHandle (hObject=0x18c) returned 1 [0227.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.538] SetErrorMode (uMode=0x1) returned 0x0 [0227.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203)) returned 1 [0227.538] SetErrorMode (uMode=0x0) returned 0x1 [0227.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.688] SetErrorMode (uMode=0x1) returned 0x0 [0227.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0227.695] SetErrorMode (uMode=0x0) returned 0x1 [0227.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x69 [0227.697] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png")) returned 0 [0227.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.704] SetErrorMode (uMode=0x1) returned 0x0 [0227.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0227.705] GetFileType (hFile=0x18c) returned 0x1 [0227.705] SetErrorMode (uMode=0x0) returned 0x1 [0227.705] GetFileType (hFile=0x18c) returned 0x1 [0227.705] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b5d [0227.705] ReadFile (in: hFile=0x18c, lpBuffer=0x28c21c0, nNumberOfBytesToRead=0x2b5d, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c21c0*, lpNumberOfBytesRead=0x27e6e8*=0x2b5d, lpOverlapped=0x0) returned 1 [0227.707] CloseHandle (hObject=0x18c) returned 1 [0227.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.709] SetErrorMode (uMode=0x1) returned 0x0 [0227.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d)) returned 1 [0227.709] SetErrorMode (uMode=0x0) returned 0x1 [0227.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.871] SetErrorMode (uMode=0x1) returned 0x0 [0227.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0227.876] SetErrorMode (uMode=0x0) returned 0x1 [0227.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0227.879] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0 [0227.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", lpFilePart=0x0) returned 0x5b [0227.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", lpFilePart=0x0) returned 0x5b [0227.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", lpFilePart=0x0) returned 0x5b [0227.887] SetErrorMode (uMode=0x1) returned 0x0 [0227.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0227.888] GetFileType (hFile=0x18c) returned 0x1 [0227.888] SetErrorMode (uMode=0x0) returned 0x1 [0227.888] GetFileType (hFile=0x18c) returned 0x1 [0227.888] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3173 [0227.888] ReadFile (in: hFile=0x18c, lpBuffer=0x27335b8, nNumberOfBytesToRead=0x3173, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27335b8*, lpNumberOfBytesRead=0x27e6e8*=0x3173, lpOverlapped=0x0) returned 1 [0227.889] CloseHandle (hObject=0x18c) returned 1 [0227.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", lpFilePart=0x0) returned 0x5b [0227.890] SetErrorMode (uMode=0x1) returned 0x0 [0227.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173)) returned 1 [0227.891] SetErrorMode (uMode=0x0) returned 0x1 [0228.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", lpFilePart=0x0) returned 0x5b [0228.023] SetErrorMode (uMode=0x1) returned 0x0 [0228.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0228.031] SetErrorMode (uMode=0x0) returned 0x1 [0228.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png", lpFilePart=0x0) returned 0x5b [0228.032] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png")) returned 0 [0228.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", lpFilePart=0x0) returned 0x5a [0228.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", lpFilePart=0x0) returned 0x5a [0228.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", lpFilePart=0x0) returned 0x5a [0228.040] SetErrorMode (uMode=0x1) returned 0x0 [0228.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0228.042] GetFileType (hFile=0x18c) returned 0x1 [0228.042] SetErrorMode (uMode=0x0) returned 0x1 [0228.042] GetFileType (hFile=0x18c) returned 0x1 [0228.042] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3369 [0228.042] ReadFile (in: hFile=0x18c, lpBuffer=0x27a6ec8, nNumberOfBytesToRead=0x3369, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a6ec8*, lpNumberOfBytesRead=0x27e6e8*=0x3369, lpOverlapped=0x0) returned 1 [0228.043] CloseHandle (hObject=0x18c) returned 1 [0228.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", lpFilePart=0x0) returned 0x5a [0228.045] SetErrorMode (uMode=0x1) returned 0x0 [0228.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369)) returned 1 [0228.045] SetErrorMode (uMode=0x0) returned 0x1 [0228.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", lpFilePart=0x0) returned 0x5a [0228.221] SetErrorMode (uMode=0x1) returned 0x0 [0228.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0228.227] SetErrorMode (uMode=0x0) returned 0x1 [0228.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png", lpFilePart=0x0) returned 0x5a [0228.228] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png")) returned 0 [0228.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", lpFilePart=0x0) returned 0x62 [0228.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", lpFilePart=0x0) returned 0x62 [0228.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", lpFilePart=0x0) returned 0x62 [0228.235] SetErrorMode (uMode=0x1) returned 0x0 [0228.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0228.235] GetFileType (hFile=0x18c) returned 0x1 [0228.235] SetErrorMode (uMode=0x0) returned 0x1 [0228.235] GetFileType (hFile=0x18c) returned 0x1 [0228.235] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2fcf [0228.236] ReadFile (in: hFile=0x18c, lpBuffer=0x281b158, nNumberOfBytesToRead=0x2fcf, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x281b158*, lpNumberOfBytesRead=0x27e6e8*=0x2fcf, lpOverlapped=0x0) returned 1 [0228.237] CloseHandle (hObject=0x18c) returned 1 [0228.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", lpFilePart=0x0) returned 0x62 [0228.238] SetErrorMode (uMode=0x1) returned 0x0 [0228.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf)) returned 1 [0228.238] SetErrorMode (uMode=0x0) returned 0x1 [0228.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", lpFilePart=0x0) returned 0x62 [0228.356] SetErrorMode (uMode=0x1) returned 0x0 [0228.356] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0228.363] SetErrorMode (uMode=0x0) returned 0x1 [0228.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png", lpFilePart=0x0) returned 0x62 [0228.367] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png")) returned 0 [0228.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", lpFilePart=0x0) returned 0x5b [0228.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", lpFilePart=0x0) returned 0x5b [0228.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", lpFilePart=0x0) returned 0x5b [0228.377] SetErrorMode (uMode=0x1) returned 0x0 [0228.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0228.378] GetFileType (hFile=0x18c) returned 0x1 [0228.378] SetErrorMode (uMode=0x0) returned 0x1 [0228.378] GetFileType (hFile=0x18c) returned 0x1 [0228.379] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3229 [0228.379] ReadFile (in: hFile=0x18c, lpBuffer=0x288d608, nNumberOfBytesToRead=0x3229, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x288d608*, lpNumberOfBytesRead=0x27e6e8*=0x3229, lpOverlapped=0x0) returned 1 [0228.380] CloseHandle (hObject=0x18c) returned 1 [0228.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", lpFilePart=0x0) returned 0x5b [0228.381] SetErrorMode (uMode=0x1) returned 0x0 [0228.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229)) returned 1 [0228.381] SetErrorMode (uMode=0x0) returned 0x1 [0228.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", lpFilePart=0x0) returned 0x5b [0228.540] SetErrorMode (uMode=0x1) returned 0x0 [0228.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0228.545] SetErrorMode (uMode=0x0) returned 0x1 [0228.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png", lpFilePart=0x0) returned 0x5b [0228.547] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png")) returned 0 [0228.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x62 [0228.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x62 [0228.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x62 [0228.554] SetErrorMode (uMode=0x1) returned 0x0 [0228.554] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0228.555] GetFileType (hFile=0x18c) returned 0x1 [0228.555] SetErrorMode (uMode=0x0) returned 0x1 [0228.555] GetFileType (hFile=0x18c) returned 0x1 [0228.555] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x21a1 [0228.555] ReadFile (in: hFile=0x18c, lpBuffer=0x29010b8, nNumberOfBytesToRead=0x21a1, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x29010b8*, lpNumberOfBytesRead=0x27e6e8*=0x21a1, lpOverlapped=0x0) returned 1 [0228.557] CloseHandle (hObject=0x18c) returned 1 [0228.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x62 [0228.558] SetErrorMode (uMode=0x1) returned 0x0 [0228.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1)) returned 1 [0228.558] SetErrorMode (uMode=0x0) returned 0x1 [0228.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x62 [0228.668] SetErrorMode (uMode=0x1) returned 0x0 [0228.668] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0228.673] SetErrorMode (uMode=0x0) returned 0x1 [0228.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x62 [0228.675] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png")) returned 0 [0228.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", lpFilePart=0x0) returned 0x59 [0228.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", lpFilePart=0x0) returned 0x59 [0228.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", lpFilePart=0x0) returned 0x59 [0228.680] SetErrorMode (uMode=0x1) returned 0x0 [0228.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0228.681] GetFileType (hFile=0x18c) returned 0x1 [0228.681] SetErrorMode (uMode=0x0) returned 0x1 [0228.681] GetFileType (hFile=0x18c) returned 0x1 [0228.682] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2ea3 [0228.682] ReadFile (in: hFile=0x18c, lpBuffer=0x276c558, nNumberOfBytesToRead=0x2ea3, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x276c558*, lpNumberOfBytesRead=0x27e6e8*=0x2ea3, lpOverlapped=0x0) returned 1 [0228.683] CloseHandle (hObject=0x18c) returned 1 [0228.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", lpFilePart=0x0) returned 0x59 [0228.684] SetErrorMode (uMode=0x1) returned 0x0 [0228.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3)) returned 1 [0228.684] SetErrorMode (uMode=0x0) returned 0x1 [0228.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", lpFilePart=0x0) returned 0x59 [0228.839] SetErrorMode (uMode=0x1) returned 0x0 [0228.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0228.852] SetErrorMode (uMode=0x0) returned 0x1 [0228.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png", lpFilePart=0x0) returned 0x59 [0228.855] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png")) returned 0 [0228.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", lpFilePart=0x0) returned 0x58 [0228.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", lpFilePart=0x0) returned 0x58 [0228.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", lpFilePart=0x0) returned 0x58 [0228.864] SetErrorMode (uMode=0x1) returned 0x0 [0228.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0228.864] GetFileType (hFile=0x18c) returned 0x1 [0228.864] SetErrorMode (uMode=0x0) returned 0x1 [0228.864] GetFileType (hFile=0x18c) returned 0x1 [0228.864] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2ce5 [0228.864] ReadFile (in: hFile=0x18c, lpBuffer=0x27df170, nNumberOfBytesToRead=0x2ce5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27df170*, lpNumberOfBytesRead=0x27e6e8*=0x2ce5, lpOverlapped=0x0) returned 1 [0228.867] CloseHandle (hObject=0x18c) returned 1 [0228.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", lpFilePart=0x0) returned 0x58 [0228.868] SetErrorMode (uMode=0x1) returned 0x0 [0228.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5)) returned 1 [0228.868] SetErrorMode (uMode=0x0) returned 0x1 [0229.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", lpFilePart=0x0) returned 0x58 [0229.023] SetErrorMode (uMode=0x1) returned 0x0 [0229.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0229.029] SetErrorMode (uMode=0x0) returned 0x1 [0229.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png", lpFilePart=0x0) returned 0x58 [0229.030] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png")) returned 0 [0229.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", lpFilePart=0x0) returned 0x5a [0229.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", lpFilePart=0x0) returned 0x5a [0229.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", lpFilePart=0x0) returned 0x5a [0229.038] SetErrorMode (uMode=0x1) returned 0x0 [0229.038] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0229.039] GetFileType (hFile=0x18c) returned 0x1 [0229.039] SetErrorMode (uMode=0x0) returned 0x1 [0229.039] GetFileType (hFile=0x18c) returned 0x1 [0229.039] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x32c6 [0229.039] ReadFile (in: hFile=0x18c, lpBuffer=0x28502d0, nNumberOfBytesToRead=0x32c6, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28502d0*, lpNumberOfBytesRead=0x27e6e8*=0x32c6, lpOverlapped=0x0) returned 1 [0229.041] CloseHandle (hObject=0x18c) returned 1 [0229.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", lpFilePart=0x0) returned 0x5a [0229.042] SetErrorMode (uMode=0x1) returned 0x0 [0229.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcff8567, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcff8567, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32c6)) returned 1 [0229.042] SetErrorMode (uMode=0x0) returned 0x1 [0229.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", lpFilePart=0x0) returned 0x5a [0229.152] SetErrorMode (uMode=0x1) returned 0x0 [0229.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0229.158] SetErrorMode (uMode=0x0) returned 0x1 [0229.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png", lpFilePart=0x0) returned 0x5a [0229.159] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png")) returned 0 [0229.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", lpFilePart=0x0) returned 0x5b [0229.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", lpFilePart=0x0) returned 0x5b [0229.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", lpFilePart=0x0) returned 0x5b [0229.170] SetErrorMode (uMode=0x1) returned 0x0 [0229.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0229.170] GetFileType (hFile=0x18c) returned 0x1 [0229.170] SetErrorMode (uMode=0x0) returned 0x1 [0229.170] GetFileType (hFile=0x18c) returned 0x1 [0229.170] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2929 [0229.170] ReadFile (in: hFile=0x18c, lpBuffer=0x28c4500, nNumberOfBytesToRead=0x2929, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c4500*, lpNumberOfBytesRead=0x27e6e8*=0x2929, lpOverlapped=0x0) returned 1 [0229.172] CloseHandle (hObject=0x18c) returned 1 [0229.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", lpFilePart=0x0) returned 0x5b [0229.173] SetErrorMode (uMode=0x1) returned 0x0 [0229.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd01e6c6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd01e6c6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2929)) returned 1 [0229.173] SetErrorMode (uMode=0x0) returned 0x1 [0229.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", lpFilePart=0x0) returned 0x5b [0229.339] SetErrorMode (uMode=0x1) returned 0x0 [0229.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0229.344] SetErrorMode (uMode=0x0) returned 0x1 [0229.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png", lpFilePart=0x0) returned 0x5b [0229.346] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png")) returned 0 [0229.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", lpFilePart=0x0) returned 0x60 [0229.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", lpFilePart=0x0) returned 0x60 [0229.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", lpFilePart=0x0) returned 0x60 [0229.355] SetErrorMode (uMode=0x1) returned 0x0 [0229.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0229.368] GetFileType (hFile=0x18c) returned 0x1 [0229.368] SetErrorMode (uMode=0x0) returned 0x1 [0229.368] GetFileType (hFile=0x18c) returned 0x1 [0229.368] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x29d0 [0229.368] ReadFile (in: hFile=0x18c, lpBuffer=0x27334d0, nNumberOfBytesToRead=0x29d0, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27334d0*, lpNumberOfBytesRead=0x27e6e8*=0x29d0, lpOverlapped=0x0) returned 1 [0229.371] CloseHandle (hObject=0x18c) returned 1 [0229.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", lpFilePart=0x0) returned 0x60 [0229.372] SetErrorMode (uMode=0x1) returned 0x0 [0229.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd044825, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd044825, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x29d0)) returned 1 [0229.372] SetErrorMode (uMode=0x0) returned 0x1 [0229.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", lpFilePart=0x0) returned 0x60 [0229.486] SetErrorMode (uMode=0x1) returned 0x0 [0229.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0229.492] SetErrorMode (uMode=0x0) returned 0x1 [0229.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png", lpFilePart=0x0) returned 0x60 [0229.494] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png")) returned 0 [0229.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", lpFilePart=0x0) returned 0x5a [0229.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", lpFilePart=0x0) returned 0x5a [0229.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", lpFilePart=0x0) returned 0x5a [0229.500] SetErrorMode (uMode=0x1) returned 0x0 [0229.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0229.501] GetFileType (hFile=0x18c) returned 0x1 [0229.501] SetErrorMode (uMode=0x0) returned 0x1 [0229.501] GetFileType (hFile=0x18c) returned 0x1 [0229.501] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x273c [0229.501] ReadFile (in: hFile=0x18c, lpBuffer=0x27a33b0, nNumberOfBytesToRead=0x273c, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a33b0*, lpNumberOfBytesRead=0x27e6e8*=0x273c, lpOverlapped=0x0) returned 1 [0229.636] CloseHandle (hObject=0x18c) returned 1 [0229.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", lpFilePart=0x0) returned 0x5a [0229.638] SetErrorMode (uMode=0x1) returned 0x0 [0229.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06a984, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd06a984, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x273c)) returned 1 [0229.638] SetErrorMode (uMode=0x0) returned 0x1 [0229.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", lpFilePart=0x0) returned 0x5a [0229.796] SetErrorMode (uMode=0x1) returned 0x0 [0229.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0229.808] SetErrorMode (uMode=0x0) returned 0x1 [0229.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png", lpFilePart=0x0) returned 0x5a [0229.810] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png")) returned 0 [0229.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", lpFilePart=0x0) returned 0x59 [0229.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", lpFilePart=0x0) returned 0x59 [0229.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", lpFilePart=0x0) returned 0x59 [0229.818] SetErrorMode (uMode=0x1) returned 0x0 [0229.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0229.820] GetFileType (hFile=0x18c) returned 0x1 [0229.820] SetErrorMode (uMode=0x0) returned 0x1 [0229.820] GetFileType (hFile=0x18c) returned 0x1 [0229.820] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3071 [0229.821] ReadFile (in: hFile=0x18c, lpBuffer=0x27f94d0, nNumberOfBytesToRead=0x3071, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27f94d0*, lpNumberOfBytesRead=0x27e6e8*=0x3071, lpOverlapped=0x0) returned 1 [0229.831] CloseHandle (hObject=0x18c) returned 1 [0229.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", lpFilePart=0x0) returned 0x59 [0229.833] SetErrorMode (uMode=0x1) returned 0x0 [0229.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3071)) returned 1 [0229.833] SetErrorMode (uMode=0x0) returned 0x1 [0230.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", lpFilePart=0x0) returned 0x59 [0230.011] SetErrorMode (uMode=0x1) returned 0x0 [0230.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0230.016] SetErrorMode (uMode=0x0) returned 0x1 [0230.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png", lpFilePart=0x0) returned 0x59 [0230.018] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png")) returned 0 [0230.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", lpFilePart=0x0) returned 0x5a [0230.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", lpFilePart=0x0) returned 0x5a [0230.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", lpFilePart=0x0) returned 0x5a [0230.024] SetErrorMode (uMode=0x1) returned 0x0 [0230.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0230.025] GetFileType (hFile=0x18c) returned 0x1 [0230.025] SetErrorMode (uMode=0x0) returned 0x1 [0230.025] GetFileType (hFile=0x18c) returned 0x1 [0230.025] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x3253 [0230.025] ReadFile (in: hFile=0x18c, lpBuffer=0x2874f08, nNumberOfBytesToRead=0x3253, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2874f08*, lpNumberOfBytesRead=0x27e6e8*=0x3253, lpOverlapped=0x0) returned 1 [0230.040] CloseHandle (hObject=0x18c) returned 1 [0230.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", lpFilePart=0x0) returned 0x5a [0230.041] SetErrorMode (uMode=0x1) returned 0x0 [0230.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3253)) returned 1 [0230.041] SetErrorMode (uMode=0x0) returned 0x1 [0230.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", lpFilePart=0x0) returned 0x5a [0230.176] SetErrorMode (uMode=0x1) returned 0x0 [0230.176] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0230.182] SetErrorMode (uMode=0x0) returned 0x1 [0230.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png", lpFilePart=0x0) returned 0x5a [0230.183] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png")) returned 0 [0230.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", lpFilePart=0x0) returned 0x59 [0230.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", lpFilePart=0x0) returned 0x59 [0230.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", lpFilePart=0x0) returned 0x59 [0230.196] SetErrorMode (uMode=0x1) returned 0x0 [0230.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0230.197] GetFileType (hFile=0x18c) returned 0x1 [0230.197] SetErrorMode (uMode=0x0) returned 0x1 [0230.197] GetFileType (hFile=0x18c) returned 0x1 [0230.197] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x32ae [0230.198] ReadFile (in: hFile=0x18c, lpBuffer=0x28f2ac0, nNumberOfBytesToRead=0x32ae, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f2ac0*, lpNumberOfBytesRead=0x27e6e8*=0x32ae, lpOverlapped=0x0) returned 1 [0230.200] CloseHandle (hObject=0x18c) returned 1 [0230.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", lpFilePart=0x0) returned 0x59 [0230.201] SetErrorMode (uMode=0x1) returned 0x0 [0230.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32ae)) returned 1 [0230.201] SetErrorMode (uMode=0x0) returned 0x1 [0230.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", lpFilePart=0x0) returned 0x59 [0230.375] SetErrorMode (uMode=0x1) returned 0x0 [0230.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0230.380] SetErrorMode (uMode=0x0) returned 0x1 [0230.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png", lpFilePart=0x0) returned 0x59 [0230.381] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png")) returned 0 [0230.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x61 [0230.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x61 [0230.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x61 [0230.389] SetErrorMode (uMode=0x1) returned 0x0 [0230.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0230.390] GetFileType (hFile=0x18c) returned 0x1 [0230.390] SetErrorMode (uMode=0x0) returned 0x1 [0230.390] GetFileType (hFile=0x18c) returned 0x1 [0230.390] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x31d5 [0230.390] ReadFile (in: hFile=0x18c, lpBuffer=0x27709e8, nNumberOfBytesToRead=0x31d5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27709e8*, lpNumberOfBytesRead=0x27e6e8*=0x31d5, lpOverlapped=0x0) returned 1 [0230.391] CloseHandle (hObject=0x18c) returned 1 [0230.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x61 [0230.392] SetErrorMode (uMode=0x1) returned 0x0 [0230.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x31d5)) returned 1 [0230.392] SetErrorMode (uMode=0x0) returned 0x1 [0230.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x61 [0230.506] SetErrorMode (uMode=0x1) returned 0x0 [0230.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0230.511] SetErrorMode (uMode=0x0) returned 0x1 [0230.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x61 [0230.513] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png")) returned 0 [0230.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", lpFilePart=0x0) returned 0x56 [0230.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", lpFilePart=0x0) returned 0x56 [0230.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", lpFilePart=0x0) returned 0x56 [0230.518] SetErrorMode (uMode=0x1) returned 0x0 [0230.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0230.525] GetFileType (hFile=0x18c) returned 0x1 [0230.525] SetErrorMode (uMode=0x0) returned 0x1 [0230.525] GetFileType (hFile=0x18c) returned 0x1 [0230.526] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x145 [0230.526] ReadFile (in: hFile=0x18c, lpBuffer=0x27e40a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27e40a0*, lpNumberOfBytesRead=0x27e6e8*=0x145, lpOverlapped=0x0) returned 1 [0230.527] CloseHandle (hObject=0x18c) returned 1 [0230.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", lpFilePart=0x0) returned 0x56 [0230.527] SetErrorMode (uMode=0x1) returned 0x0 [0230.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x145)) returned 1 [0230.528] SetErrorMode (uMode=0x0) returned 0x1 [0230.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", lpFilePart=0x0) returned 0x56 [0230.673] SetErrorMode (uMode=0x1) returned 0x0 [0230.674] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0230.679] SetErrorMode (uMode=0x0) returned 0x1 [0230.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png", lpFilePart=0x0) returned 0x56 [0230.680] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png")) returned 0 [0230.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", lpFilePart=0x0) returned 0x57 [0230.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", lpFilePart=0x0) returned 0x57 [0230.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", lpFilePart=0x0) returned 0x57 [0230.687] SetErrorMode (uMode=0x1) returned 0x0 [0230.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0230.687] GetFileType (hFile=0x18c) returned 0x1 [0230.687] SetErrorMode (uMode=0x0) returned 0x1 [0230.687] GetFileType (hFile=0x18c) returned 0x1 [0230.687] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x175 [0230.687] ReadFile (in: hFile=0x18c, lpBuffer=0x2840198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2840198*, lpNumberOfBytesRead=0x27e6e8*=0x175, lpOverlapped=0x0) returned 1 [0230.688] CloseHandle (hObject=0x18c) returned 1 [0230.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", lpFilePart=0x0) returned 0x57 [0230.689] SetErrorMode (uMode=0x1) returned 0x0 [0230.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0230.689] SetErrorMode (uMode=0x0) returned 0x1 [0230.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", lpFilePart=0x0) returned 0x57 [0230.859] SetErrorMode (uMode=0x1) returned 0x0 [0230.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0230.865] SetErrorMode (uMode=0x0) returned 0x1 [0230.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png", lpFilePart=0x0) returned 0x57 [0230.866] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png")) returned 0 [0230.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4d [0230.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4d [0230.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4d [0230.874] SetErrorMode (uMode=0x1) returned 0x0 [0230.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0230.875] GetFileType (hFile=0x18c) returned 0x1 [0230.875] SetErrorMode (uMode=0x0) returned 0x1 [0230.875] GetFileType (hFile=0x18c) returned 0x1 [0230.875] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2d9 [0230.875] ReadFile (in: hFile=0x18c, lpBuffer=0x289f528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x289f528*, lpNumberOfBytesRead=0x27e6e8*=0x2d9, lpOverlapped=0x0) returned 1 [0230.879] CloseHandle (hObject=0x18c) returned 1 [0230.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4d [0230.880] SetErrorMode (uMode=0x1) returned 0x0 [0230.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9)) returned 1 [0230.881] SetErrorMode (uMode=0x0) returned 0x1 [0231.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4d [0231.019] SetErrorMode (uMode=0x1) returned 0x0 [0231.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.025] SetErrorMode (uMode=0x0) returned 0x1 [0231.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x0) returned 0x4d [0231.027] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png")) returned 0 [0231.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", lpFilePart=0x0) returned 0x5e [0231.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", lpFilePart=0x0) returned 0x5e [0231.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", lpFilePart=0x0) returned 0x5e [0231.037] SetErrorMode (uMode=0x1) returned 0x0 [0231.037] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.039] GetFileType (hFile=0x18c) returned 0x1 [0231.039] SetErrorMode (uMode=0x0) returned 0x1 [0231.039] GetFileType (hFile=0x18c) returned 0x1 [0231.039] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x18f [0231.039] ReadFile (in: hFile=0x18c, lpBuffer=0x28ff138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28ff138*, lpNumberOfBytesRead=0x27e6e8*=0x18f, lpOverlapped=0x0) returned 1 [0231.040] CloseHandle (hObject=0x18c) returned 1 [0231.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", lpFilePart=0x0) returned 0x5e [0231.041] SetErrorMode (uMode=0x1) returned 0x0 [0231.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f)) returned 1 [0231.041] SetErrorMode (uMode=0x0) returned 0x1 [0231.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", lpFilePart=0x0) returned 0x5e [0231.195] SetErrorMode (uMode=0x1) returned 0x0 [0231.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.200] SetErrorMode (uMode=0x0) returned 0x1 [0231.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png", lpFilePart=0x0) returned 0x5e [0231.202] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png")) returned 0 [0231.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", lpFilePart=0x0) returned 0x55 [0231.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", lpFilePart=0x0) returned 0x55 [0231.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", lpFilePart=0x0) returned 0x55 [0231.209] SetErrorMode (uMode=0x1) returned 0x0 [0231.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.210] GetFileType (hFile=0x18c) returned 0x1 [0231.210] SetErrorMode (uMode=0x0) returned 0x1 [0231.210] GetFileType (hFile=0x18c) returned 0x1 [0231.210] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x18f [0231.210] ReadFile (in: hFile=0x18c, lpBuffer=0x275e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275e3f0*, lpNumberOfBytesRead=0x27e6e8*=0x18f, lpOverlapped=0x0) returned 1 [0231.211] CloseHandle (hObject=0x18c) returned 1 [0231.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", lpFilePart=0x0) returned 0x55 [0231.212] SetErrorMode (uMode=0x1) returned 0x0 [0231.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f)) returned 1 [0231.212] SetErrorMode (uMode=0x0) returned 0x1 [0231.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", lpFilePart=0x0) returned 0x55 [0231.338] SetErrorMode (uMode=0x1) returned 0x0 [0231.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.346] SetErrorMode (uMode=0x0) returned 0x1 [0231.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png", lpFilePart=0x0) returned 0x55 [0231.348] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png")) returned 0 [0231.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", lpFilePart=0x0) returned 0x5a [0231.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", lpFilePart=0x0) returned 0x5a [0231.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", lpFilePart=0x0) returned 0x5a [0231.355] SetErrorMode (uMode=0x1) returned 0x0 [0231.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.356] GetFileType (hFile=0x18c) returned 0x1 [0231.356] SetErrorMode (uMode=0x0) returned 0x1 [0231.356] GetFileType (hFile=0x18c) returned 0x1 [0231.356] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1e2 [0231.356] ReadFile (in: hFile=0x18c, lpBuffer=0x27bd790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27bd790*, lpNumberOfBytesRead=0x27e6e8*=0x1e2, lpOverlapped=0x0) returned 1 [0231.358] CloseHandle (hObject=0x18c) returned 1 [0231.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", lpFilePart=0x0) returned 0x5a [0231.360] SetErrorMode (uMode=0x1) returned 0x0 [0231.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1e2)) returned 1 [0231.360] SetErrorMode (uMode=0x0) returned 0x1 [0231.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", lpFilePart=0x0) returned 0x5a [0231.476] SetErrorMode (uMode=0x1) returned 0x0 [0231.476] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.483] SetErrorMode (uMode=0x0) returned 0x1 [0231.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png", lpFilePart=0x0) returned 0x5a [0231.485] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png")) returned 0 [0231.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", lpFilePart=0x0) returned 0x59 [0231.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", lpFilePart=0x0) returned 0x59 [0231.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", lpFilePart=0x0) returned 0x59 [0231.495] SetErrorMode (uMode=0x1) returned 0x0 [0231.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.495] GetFileType (hFile=0x18c) returned 0x1 [0231.495] SetErrorMode (uMode=0x0) returned 0x1 [0231.496] GetFileType (hFile=0x18c) returned 0x1 [0231.496] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x758e [0231.496] ReadFile (in: hFile=0x18c, lpBuffer=0x281cc20, nNumberOfBytesToRead=0x758e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x281cc20*, lpNumberOfBytesRead=0x27e6e8*=0x758e, lpOverlapped=0x0) returned 1 [0231.498] CloseHandle (hObject=0x18c) returned 1 [0231.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", lpFilePart=0x0) returned 0x59 [0231.499] SetErrorMode (uMode=0x1) returned 0x0 [0231.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2339f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2339f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x758e)) returned 1 [0231.499] SetErrorMode (uMode=0x0) returned 0x1 [0231.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", lpFilePart=0x0) returned 0x59 [0231.643] SetErrorMode (uMode=0x1) returned 0x0 [0231.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.648] SetErrorMode (uMode=0x0) returned 0x1 [0231.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png", lpFilePart=0x0) returned 0x59 [0231.650] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png")) returned 0 [0231.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", lpFilePart=0x0) returned 0x5e [0231.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", lpFilePart=0x0) returned 0x5e [0231.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", lpFilePart=0x0) returned 0x5e [0231.657] SetErrorMode (uMode=0x1) returned 0x0 [0231.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.658] GetFileType (hFile=0x18c) returned 0x1 [0231.658] SetErrorMode (uMode=0x0) returned 0x1 [0231.658] GetFileType (hFile=0x18c) returned 0x1 [0231.658] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6ddb [0231.658] ReadFile (in: hFile=0x18c, lpBuffer=0x28b4f58, nNumberOfBytesToRead=0x6ddb, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b4f58*, lpNumberOfBytesRead=0x27e6e8*=0x6ddb, lpOverlapped=0x0) returned 1 [0231.660] CloseHandle (hObject=0x18c) returned 1 [0231.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", lpFilePart=0x0) returned 0x5e [0231.661] SetErrorMode (uMode=0x1) returned 0x0 [0231.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb)) returned 1 [0231.661] SetErrorMode (uMode=0x0) returned 0x1 [0231.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", lpFilePart=0x0) returned 0x5e [0231.821] SetErrorMode (uMode=0x1) returned 0x0 [0231.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.827] SetErrorMode (uMode=0x0) returned 0x1 [0231.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png", lpFilePart=0x0) returned 0x5e [0231.831] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png")) returned 0 [0231.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", lpFilePart=0x0) returned 0x63 [0231.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", lpFilePart=0x0) returned 0x63 [0231.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", lpFilePart=0x0) returned 0x63 [0231.839] SetErrorMode (uMode=0x1) returned 0x0 [0231.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.839] GetFileType (hFile=0x18c) returned 0x1 [0231.839] SetErrorMode (uMode=0x0) returned 0x1 [0231.840] GetFileType (hFile=0x18c) returned 0x1 [0231.840] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6d83 [0231.840] ReadFile (in: hFile=0x18c, lpBuffer=0x2745ce0, nNumberOfBytesToRead=0x6d83, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2745ce0*, lpNumberOfBytesRead=0x27e6e8*=0x6d83, lpOverlapped=0x0) returned 1 [0231.842] CloseHandle (hObject=0x18c) returned 1 [0231.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", lpFilePart=0x0) returned 0x63 [0231.842] SetErrorMode (uMode=0x1) returned 0x0 [0231.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5b46cc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5b46cc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6d83)) returned 1 [0231.842] SetErrorMode (uMode=0x0) returned 0x1 [0231.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", lpFilePart=0x0) returned 0x63 [0231.975] SetErrorMode (uMode=0x1) returned 0x0 [0231.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.979] SetErrorMode (uMode=0x0) returned 0x1 [0231.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png", lpFilePart=0x0) returned 0x63 [0231.981] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png")) returned 0 [0231.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", lpFilePart=0x0) returned 0x5d [0231.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", lpFilePart=0x0) returned 0x5d [0231.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", lpFilePart=0x0) returned 0x5d [0231.989] SetErrorMode (uMode=0x1) returned 0x0 [0231.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0231.999] GetFileType (hFile=0x18c) returned 0x1 [0231.999] SetErrorMode (uMode=0x0) returned 0x1 [0231.999] GetFileType (hFile=0x18c) returned 0x1 [0231.999] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7ee0 [0231.999] ReadFile (in: hFile=0x18c, lpBuffer=0x27cc4d8, nNumberOfBytesToRead=0x7ee0, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27cc4d8*, lpNumberOfBytesRead=0x27e6e8*=0x7ee0, lpOverlapped=0x0) returned 1 [0232.000] CloseHandle (hObject=0x18c) returned 1 [0232.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", lpFilePart=0x0) returned 0x5d [0232.001] SetErrorMode (uMode=0x1) returned 0x0 [0232.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc60098a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc60098a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0232.002] SetErrorMode (uMode=0x0) returned 0x1 [0232.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", lpFilePart=0x0) returned 0x5d [0232.170] SetErrorMode (uMode=0x1) returned 0x0 [0232.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.177] SetErrorMode (uMode=0x0) returned 0x1 [0232.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png", lpFilePart=0x0) returned 0x5d [0232.178] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png")) returned 0 [0232.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", lpFilePart=0x0) returned 0x5c [0232.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", lpFilePart=0x0) returned 0x5c [0232.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", lpFilePart=0x0) returned 0x5c [0232.186] SetErrorMode (uMode=0x1) returned 0x0 [0232.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0232.187] GetFileType (hFile=0x18c) returned 0x1 [0232.187] SetErrorMode (uMode=0x0) returned 0x1 [0232.187] GetFileType (hFile=0x18c) returned 0x1 [0232.187] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7aae [0232.187] ReadFile (in: hFile=0x18c, lpBuffer=0x28627a0, nNumberOfBytesToRead=0x7aae, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28627a0*, lpNumberOfBytesRead=0x27e6e8*=0x7aae, lpOverlapped=0x0) returned 1 [0232.190] CloseHandle (hObject=0x18c) returned 1 [0232.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", lpFilePart=0x0) returned 0x5c [0232.191] SetErrorMode (uMode=0x1) returned 0x0 [0232.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6e51c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc6e51c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7aae)) returned 1 [0232.191] SetErrorMode (uMode=0x0) returned 0x1 [0232.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", lpFilePart=0x0) returned 0x5c [0232.304] SetErrorMode (uMode=0x1) returned 0x0 [0232.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.310] SetErrorMode (uMode=0x0) returned 0x1 [0232.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png", lpFilePart=0x0) returned 0x5c [0232.313] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png")) returned 0 [0232.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x6a [0232.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x6a [0232.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x6a [0232.324] SetErrorMode (uMode=0x1) returned 0x0 [0232.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0232.325] GetFileType (hFile=0x18c) returned 0x1 [0232.325] SetErrorMode (uMode=0x0) returned 0x1 [0232.325] GetFileType (hFile=0x18c) returned 0x1 [0232.325] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4bfb [0232.325] ReadFile (in: hFile=0x18c, lpBuffer=0x28f5798, nNumberOfBytesToRead=0x4bfb, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28f5798*, lpNumberOfBytesRead=0x27e6e8*=0x4bfb, lpOverlapped=0x0) returned 1 [0232.327] CloseHandle (hObject=0x18c) returned 1 [0232.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x6a [0232.328] SetErrorMode (uMode=0x1) returned 0x0 [0232.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc70b323, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc70b323, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0232.328] SetErrorMode (uMode=0x0) returned 0x1 [0232.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x6a [0232.485] SetErrorMode (uMode=0x1) returned 0x0 [0232.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.491] SetErrorMode (uMode=0x0) returned 0x1 [0232.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png", lpFilePart=0x0) returned 0x6a [0232.492] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png")) returned 0 [0232.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0232.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0232.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0232.499] SetErrorMode (uMode=0x1) returned 0x0 [0232.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0232.500] GetFileType (hFile=0x18c) returned 0x1 [0232.500] SetErrorMode (uMode=0x0) returned 0x1 [0232.500] GetFileType (hFile=0x18c) returned 0x1 [0232.500] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x60f5 [0232.500] ReadFile (in: hFile=0x18c, lpBuffer=0x27718d8, nNumberOfBytesToRead=0x60f5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27718d8*, lpNumberOfBytesRead=0x27e6e8*=0x60f5, lpOverlapped=0x0) returned 1 [0232.514] CloseHandle (hObject=0x18c) returned 1 [0232.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0232.515] SetErrorMode (uMode=0x1) returned 0x0 [0232.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x60f5)) returned 1 [0232.517] SetErrorMode (uMode=0x0) returned 0x1 [0232.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0232.621] SetErrorMode (uMode=0x1) returned 0x0 [0232.621] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.631] SetErrorMode (uMode=0x0) returned 0x1 [0232.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x78 [0232.634] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png")) returned 0 [0232.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", lpFilePart=0x0) returned 0x61 [0232.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", lpFilePart=0x0) returned 0x61 [0232.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", lpFilePart=0x0) returned 0x61 [0232.645] SetErrorMode (uMode=0x1) returned 0x0 [0232.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0232.657] GetFileType (hFile=0x18c) returned 0x1 [0232.657] SetErrorMode (uMode=0x0) returned 0x1 [0232.657] GetFileType (hFile=0x18c) returned 0x1 [0232.657] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4ee2 [0232.657] ReadFile (in: hFile=0x18c, lpBuffer=0x27fb128, nNumberOfBytesToRead=0x4ee2, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27fb128*, lpNumberOfBytesRead=0x27e6e8*=0x4ee2, lpOverlapped=0x0) returned 1 [0232.661] CloseHandle (hObject=0x18c) returned 1 [0232.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", lpFilePart=0x0) returned 0x61 [0232.662] SetErrorMode (uMode=0x1) returned 0x0 [0232.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2)) returned 1 [0232.662] SetErrorMode (uMode=0x0) returned 0x1 [0232.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", lpFilePart=0x0) returned 0x61 [0232.835] SetErrorMode (uMode=0x1) returned 0x0 [0232.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.841] SetErrorMode (uMode=0x0) returned 0x1 [0232.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png", lpFilePart=0x0) returned 0x61 [0232.843] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png")) returned 0 [0232.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6f [0232.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6f [0232.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6f [0232.855] SetErrorMode (uMode=0x1) returned 0x0 [0232.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0232.855] GetFileType (hFile=0x18c) returned 0x1 [0232.855] SetErrorMode (uMode=0x0) returned 0x1 [0232.855] GetFileType (hFile=0x18c) returned 0x1 [0232.855] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x65e9 [0232.855] ReadFile (in: hFile=0x18c, lpBuffer=0x287a1d0, nNumberOfBytesToRead=0x65e9, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x287a1d0*, lpNumberOfBytesRead=0x27e6e8*=0x65e9, lpOverlapped=0x0) returned 1 [0232.857] CloseHandle (hObject=0x18c) returned 1 [0232.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6f [0232.858] SetErrorMode (uMode=0x1) returned 0x0 [0232.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc77d740, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc77d740, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x65e9)) returned 1 [0232.858] SetErrorMode (uMode=0x0) returned 0x1 [0232.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6f [0232.999] SetErrorMode (uMode=0x1) returned 0x0 [0232.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.009] SetErrorMode (uMode=0x0) returned 0x1 [0233.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png", lpFilePart=0x0) returned 0x6f [0233.013] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png")) returned 0 [0233.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x69 [0233.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x69 [0233.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x69 [0233.022] SetErrorMode (uMode=0x1) returned 0x0 [0233.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0233.034] GetFileType (hFile=0x18c) returned 0x1 [0233.034] SetErrorMode (uMode=0x0) returned 0x1 [0233.034] GetFileType (hFile=0x18c) returned 0x1 [0233.034] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4a10 [0233.034] ReadFile (in: hFile=0x18c, lpBuffer=0x2905d68, nNumberOfBytesToRead=0x4a10, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2905d68*, lpNumberOfBytesRead=0x27e6e8*=0x4a10, lpOverlapped=0x0) returned 1 [0233.036] CloseHandle (hObject=0x18c) returned 1 [0233.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x69 [0233.037] SetErrorMode (uMode=0x1) returned 0x0 [0233.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4a10)) returned 1 [0233.037] SetErrorMode (uMode=0x0) returned 0x1 [0233.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x69 [0233.221] SetErrorMode (uMode=0x1) returned 0x0 [0233.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.226] SetErrorMode (uMode=0x0) returned 0x1 [0233.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png", lpFilePart=0x0) returned 0x69 [0233.228] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png")) returned 0 [0233.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0233.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0233.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0233.235] SetErrorMode (uMode=0x1) returned 0x0 [0233.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0233.236] GetFileType (hFile=0x18c) returned 0x1 [0233.236] SetErrorMode (uMode=0x0) returned 0x1 [0233.236] GetFileType (hFile=0x18c) returned 0x1 [0233.236] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x61ae [0233.236] ReadFile (in: hFile=0x18c, lpBuffer=0x2782410, nNumberOfBytesToRead=0x61ae, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2782410*, lpNumberOfBytesRead=0x27e6e8*=0x61ae, lpOverlapped=0x0) returned 1 [0233.239] CloseHandle (hObject=0x18c) returned 1 [0233.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0233.240] SetErrorMode (uMode=0x1) returned 0x0 [0233.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61ae)) returned 1 [0233.240] SetErrorMode (uMode=0x0) returned 0x1 [0233.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0233.350] SetErrorMode (uMode=0x1) returned 0x0 [0233.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.356] SetErrorMode (uMode=0x0) returned 0x1 [0233.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png", lpFilePart=0x0) returned 0x77 [0233.357] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png")) returned 0 [0233.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", lpFilePart=0x0) returned 0x60 [0233.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", lpFilePart=0x0) returned 0x60 [0233.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", lpFilePart=0x0) returned 0x60 [0233.366] SetErrorMode (uMode=0x1) returned 0x0 [0233.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0233.367] GetFileType (hFile=0x18c) returned 0x1 [0233.367] SetErrorMode (uMode=0x0) returned 0x1 [0233.367] GetFileType (hFile=0x18c) returned 0x1 [0233.367] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x558a [0233.367] ReadFile (in: hFile=0x18c, lpBuffer=0x280c2e0, nNumberOfBytesToRead=0x558a, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x280c2e0*, lpNumberOfBytesRead=0x27e6e8*=0x558a, lpOverlapped=0x0) returned 1 [0233.369] CloseHandle (hObject=0x18c) returned 1 [0233.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", lpFilePart=0x0) returned 0x60 [0233.370] SetErrorMode (uMode=0x1) returned 0x0 [0233.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7c99fe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7c99fe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x558a)) returned 1 [0233.370] SetErrorMode (uMode=0x0) returned 0x1 [0233.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", lpFilePart=0x0) returned 0x60 [0233.518] SetErrorMode (uMode=0x1) returned 0x0 [0233.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.523] SetErrorMode (uMode=0x0) returned 0x1 [0233.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png", lpFilePart=0x0) returned 0x60 [0233.525] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png")) returned 0 [0233.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6e [0233.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6e [0233.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6e [0233.533] SetErrorMode (uMode=0x1) returned 0x0 [0233.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0233.534] GetFileType (hFile=0x18c) returned 0x1 [0233.534] SetErrorMode (uMode=0x0) returned 0x1 [0233.534] GetFileType (hFile=0x18c) returned 0x1 [0233.534] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6ae6 [0233.534] ReadFile (in: hFile=0x18c, lpBuffer=0x288e808, nNumberOfBytesToRead=0x6ae6, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x288e808*, lpNumberOfBytesRead=0x27e6e8*=0x6ae6, lpOverlapped=0x0) returned 1 [0233.536] CloseHandle (hObject=0x18c) returned 1 [0233.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6e [0233.537] SetErrorMode (uMode=0x1) returned 0x0 [0233.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7efb5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7efb5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6)) returned 1 [0233.537] SetErrorMode (uMode=0x0) returned 0x1 [0233.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6e [0233.648] SetErrorMode (uMode=0x1) returned 0x0 [0233.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.654] SetErrorMode (uMode=0x0) returned 0x1 [0233.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png", lpFilePart=0x0) returned 0x6e [0233.656] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png")) returned 0 [0233.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6c [0233.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6c [0233.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6c [0233.663] SetErrorMode (uMode=0x1) returned 0x0 [0233.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0233.665] GetFileType (hFile=0x18c) returned 0x1 [0233.665] SetErrorMode (uMode=0x0) returned 0x1 [0233.665] GetFileType (hFile=0x18c) returned 0x1 [0233.665] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4d81 [0233.665] ReadFile (in: hFile=0x18c, lpBuffer=0x291c4e0, nNumberOfBytesToRead=0x4d81, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x291c4e0*, lpNumberOfBytesRead=0x27e6e8*=0x4d81, lpOverlapped=0x0) returned 1 [0233.667] CloseHandle (hObject=0x18c) returned 1 [0233.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6c [0233.670] SetErrorMode (uMode=0x1) returned 0x0 [0233.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83be1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc83be1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d81)) returned 1 [0233.670] SetErrorMode (uMode=0x0) returned 0x1 [0233.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6c [0233.833] SetErrorMode (uMode=0x1) returned 0x0 [0233.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.849] SetErrorMode (uMode=0x0) returned 0x1 [0233.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png", lpFilePart=0x0) returned 0x6c [0233.853] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png")) returned 0 [0233.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0233.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0233.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0233.865] SetErrorMode (uMode=0x1) returned 0x0 [0233.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0233.866] GetFileType (hFile=0x18c) returned 0x1 [0233.866] SetErrorMode (uMode=0x0) returned 0x1 [0233.866] GetFileType (hFile=0x18c) returned 0x1 [0233.866] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6469 [0233.866] ReadFile (in: hFile=0x18c, lpBuffer=0x2798d80, nNumberOfBytesToRead=0x6469, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2798d80*, lpNumberOfBytesRead=0x27e6e8*=0x6469, lpOverlapped=0x0) returned 1 [0233.868] CloseHandle (hObject=0x18c) returned 1 [0233.870] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0233.870] SetErrorMode (uMode=0x1) returned 0x0 [0233.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6469)) returned 1 [0233.870] SetErrorMode (uMode=0x0) returned 0x1 [0233.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0233.992] SetErrorMode (uMode=0x1) returned 0x0 [0233.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.998] SetErrorMode (uMode=0x0) returned 0x1 [0234.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.000] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png")) returned 0 [0234.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.008] SetErrorMode (uMode=0x1) returned 0x0 [0234.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.009] GetFileType (hFile=0x18c) returned 0x1 [0234.009] SetErrorMode (uMode=0x0) returned 0x1 [0234.009] GetFileType (hFile=0x18c) returned 0x1 [0234.009] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4b87 [0234.009] ReadFile (in: hFile=0x18c, lpBuffer=0x2823fa0, nNumberOfBytesToRead=0x4b87, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2823fa0*, lpNumberOfBytesRead=0x27e6e8*=0x4b87, lpOverlapped=0x0) returned 1 [0234.013] CloseHandle (hObject=0x18c) returned 1 [0234.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.014] SetErrorMode (uMode=0x1) returned 0x0 [0234.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4b87)) returned 1 [0234.014] SetErrorMode (uMode=0x0) returned 0x1 [0234.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.130] SetErrorMode (uMode=0x1) returned 0x0 [0234.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0234.135] SetErrorMode (uMode=0x0) returned 0x1 [0234.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.137] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png")) returned 0 [0234.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.144] SetErrorMode (uMode=0x1) returned 0x0 [0234.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.144] GetFileType (hFile=0x18c) returned 0x1 [0234.144] SetErrorMode (uMode=0x0) returned 0x1 [0234.144] GetFileType (hFile=0x18c) returned 0x1 [0234.144] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x62fb [0234.144] ReadFile (in: hFile=0x18c, lpBuffer=0x28a1338, nNumberOfBytesToRead=0x62fb, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a1338*, lpNumberOfBytesRead=0x27e6e8*=0x62fb, lpOverlapped=0x0) returned 1 [0234.148] CloseHandle (hObject=0x18c) returned 1 [0234.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.149] SetErrorMode (uMode=0x1) returned 0x0 [0234.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8880d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8880d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x62fb)) returned 1 [0234.158] SetErrorMode (uMode=0x0) returned 0x1 [0234.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.329] SetErrorMode (uMode=0x1) returned 0x0 [0234.329] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0234.335] SetErrorMode (uMode=0x0) returned 0x1 [0234.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.337] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0 [0234.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6c [0234.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6c [0234.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6c [0234.344] SetErrorMode (uMode=0x1) returned 0x0 [0234.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.345] GetFileType (hFile=0x18c) returned 0x1 [0234.345] SetErrorMode (uMode=0x0) returned 0x1 [0234.345] GetFileType (hFile=0x18c) returned 0x1 [0234.345] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4dd3 [0234.345] ReadFile (in: hFile=0x18c, lpBuffer=0x2735220, nNumberOfBytesToRead=0x4dd3, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2735220*, lpNumberOfBytesRead=0x27e6e8*=0x4dd3, lpOverlapped=0x0) returned 1 [0234.347] CloseHandle (hObject=0x18c) returned 1 [0234.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6c [0234.348] SetErrorMode (uMode=0x1) returned 0x0 [0234.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1 [0234.349] SetErrorMode (uMode=0x0) returned 0x1 [0234.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6c [0234.481] SetErrorMode (uMode=0x1) returned 0x0 [0234.482] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0234.488] SetErrorMode (uMode=0x0) returned 0x1 [0234.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png", lpFilePart=0x0) returned 0x6c [0234.490] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png")) returned 0 [0234.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.498] SetErrorMode (uMode=0x1) returned 0x0 [0234.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.499] GetFileType (hFile=0x18c) returned 0x1 [0234.499] SetErrorMode (uMode=0x0) returned 0x1 [0234.499] GetFileType (hFile=0x18c) returned 0x1 [0234.499] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6455 [0234.499] ReadFile (in: hFile=0x18c, lpBuffer=0x27a74d8, nNumberOfBytesToRead=0x6455, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27a74d8*, lpNumberOfBytesRead=0x27e6e8*=0x6455, lpOverlapped=0x0) returned 1 [0234.501] CloseHandle (hObject=0x18c) returned 1 [0234.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.502] SetErrorMode (uMode=0x1) returned 0x0 [0234.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6455)) returned 1 [0234.502] SetErrorMode (uMode=0x0) returned 0x1 [0234.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.645] SetErrorMode (uMode=0x1) returned 0x0 [0234.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0234.650] SetErrorMode (uMode=0x0) returned 0x1 [0234.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png", lpFilePart=0x0) returned 0x7a [0234.652] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0 [0234.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.658] SetErrorMode (uMode=0x1) returned 0x0 [0234.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.660] GetFileType (hFile=0x18c) returned 0x1 [0234.660] SetErrorMode (uMode=0x0) returned 0x1 [0234.660] GetFileType (hFile=0x18c) returned 0x1 [0234.660] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x4c50 [0234.660] ReadFile (in: hFile=0x18c, lpBuffer=0x2832670, nNumberOfBytesToRead=0x4c50, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2832670*, lpNumberOfBytesRead=0x27e6e8*=0x4c50, lpOverlapped=0x0) returned 1 [0234.662] CloseHandle (hObject=0x18c) returned 1 [0234.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.663] SetErrorMode (uMode=0x1) returned 0x0 [0234.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8d4397, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8d4397, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c50)) returned 1 [0234.663] SetErrorMode (uMode=0x0) returned 0x1 [0234.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.787] SetErrorMode (uMode=0x1) returned 0x0 [0234.787] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0234.795] SetErrorMode (uMode=0x0) returned 0x1 [0234.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png", lpFilePart=0x0) returned 0x6b [0234.801] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png")) returned 0 [0234.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.811] SetErrorMode (uMode=0x1) returned 0x0 [0234.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.812] GetFileType (hFile=0x18c) returned 0x1 [0234.812] SetErrorMode (uMode=0x0) returned 0x1 [0234.812] GetFileType (hFile=0x18c) returned 0x1 [0234.812] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6222 [0234.812] ReadFile (in: hFile=0x18c, lpBuffer=0x28b0010, nNumberOfBytesToRead=0x6222, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28b0010*, lpNumberOfBytesRead=0x27e6e8*=0x6222, lpOverlapped=0x0) returned 1 [0234.814] CloseHandle (hObject=0x18c) returned 1 [0234.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.815] SetErrorMode (uMode=0x1) returned 0x0 [0234.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8fa4f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8fa4f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6222)) returned 1 [0234.815] SetErrorMode (uMode=0x0) returned 0x1 [0234.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.934] SetErrorMode (uMode=0x1) returned 0x0 [0234.934] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0234.940] SetErrorMode (uMode=0x0) returned 0x1 [0234.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png", lpFilePart=0x0) returned 0x79 [0234.943] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0 [0234.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", lpFilePart=0x0) returned 0x5d [0234.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", lpFilePart=0x0) returned 0x5d [0234.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", lpFilePart=0x0) returned 0x5d [0234.953] SetErrorMode (uMode=0x1) returned 0x0 [0234.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0234.954] GetFileType (hFile=0x18c) returned 0x1 [0234.954] SetErrorMode (uMode=0x0) returned 0x1 [0234.954] GetFileType (hFile=0x18c) returned 0x1 [0234.954] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x94ed [0234.954] ReadFile (in: hFile=0x18c, lpBuffer=0x2741930, nNumberOfBytesToRead=0x94ed, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2741930*, lpNumberOfBytesRead=0x27e6e8*=0x94ed, lpOverlapped=0x0) returned 1 [0234.956] CloseHandle (hObject=0x18c) returned 1 [0234.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", lpFilePart=0x0) returned 0x5d [0234.957] SetErrorMode (uMode=0x1) returned 0x0 [0234.957] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc920655, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc920655, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe103b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x94ed)) returned 1 [0234.957] SetErrorMode (uMode=0x0) returned 0x1 [0235.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", lpFilePart=0x0) returned 0x5d [0235.071] SetErrorMode (uMode=0x1) returned 0x0 [0235.071] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0235.077] SetErrorMode (uMode=0x0) returned 0x1 [0235.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png", lpFilePart=0x0) returned 0x5d [0235.081] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png")) returned 0 [0235.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", lpFilePart=0x0) returned 0x5c [0235.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", lpFilePart=0x0) returned 0x5c [0235.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", lpFilePart=0x0) returned 0x5c [0235.090] SetErrorMode (uMode=0x1) returned 0x0 [0235.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0235.090] GetFileType (hFile=0x18c) returned 0x1 [0235.090] SetErrorMode (uMode=0x0) returned 0x1 [0235.090] GetFileType (hFile=0x18c) returned 0x1 [0235.090] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x918c [0235.090] ReadFile (in: hFile=0x18c, lpBuffer=0x27dd2b0, nNumberOfBytesToRead=0x918c, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27dd2b0*, lpNumberOfBytesRead=0x27e6e8*=0x918c, lpOverlapped=0x0) returned 1 [0235.092] CloseHandle (hObject=0x18c) returned 1 [0235.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", lpFilePart=0x0) returned 0x5c [0235.094] SetErrorMode (uMode=0x1) returned 0x0 [0235.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9467b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9467b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1 [0235.094] SetErrorMode (uMode=0x0) returned 0x1 [0235.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", lpFilePart=0x0) returned 0x5c [0235.270] SetErrorMode (uMode=0x1) returned 0x0 [0235.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0235.279] SetErrorMode (uMode=0x0) returned 0x1 [0235.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png", lpFilePart=0x0) returned 0x5c [0235.281] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png")) returned 0 [0235.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", lpFilePart=0x0) returned 0x64 [0235.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", lpFilePart=0x0) returned 0x64 [0235.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", lpFilePart=0x0) returned 0x64 [0235.290] SetErrorMode (uMode=0x1) returned 0x0 [0235.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0235.293] GetFileType (hFile=0x18c) returned 0x1 [0235.293] SetErrorMode (uMode=0x0) returned 0x1 [0235.293] GetFileType (hFile=0x18c) returned 0x1 [0235.293] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x7a40 [0235.293] ReadFile (in: hFile=0x18c, lpBuffer=0x287a340, nNumberOfBytesToRead=0x7a40, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x287a340*, lpNumberOfBytesRead=0x27e6e8*=0x7a40, lpOverlapped=0x0) returned 1 [0235.296] CloseHandle (hObject=0x18c) returned 1 [0235.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", lpFilePart=0x0) returned 0x64 [0235.297] SetErrorMode (uMode=0x1) returned 0x0 [0235.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc96c913, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc96c913, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1 [0235.297] SetErrorMode (uMode=0x0) returned 0x1 [0235.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", lpFilePart=0x0) returned 0x64 [0235.414] SetErrorMode (uMode=0x1) returned 0x0 [0235.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0235.421] SetErrorMode (uMode=0x0) returned 0x1 [0235.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png", lpFilePart=0x0) returned 0x64 [0235.423] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png")) returned 0 [0235.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", lpFilePart=0x0) returned 0x5d [0235.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", lpFilePart=0x0) returned 0x5d [0235.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", lpFilePart=0x0) returned 0x5d [0235.428] SetErrorMode (uMode=0x1) returned 0x0 [0235.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0235.428] GetFileType (hFile=0x18c) returned 0x1 [0235.429] SetErrorMode (uMode=0x0) returned 0x1 [0235.429] GetFileType (hFile=0x18c) returned 0x1 [0235.429] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x9c38 [0235.429] ReadFile (in: hFile=0x18c, lpBuffer=0x290bdb0, nNumberOfBytesToRead=0x9c38, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x290bdb0*, lpNumberOfBytesRead=0x27e6e8*=0x9c38, lpOverlapped=0x0) returned 1 [0235.431] CloseHandle (hObject=0x18c) returned 1 [0235.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", lpFilePart=0x0) returned 0x5d [0235.432] SetErrorMode (uMode=0x1) returned 0x0 [0235.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9c38)) returned 1 [0235.432] SetErrorMode (uMode=0x0) returned 0x1 [0235.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", lpFilePart=0x0) returned 0x5d [0235.616] SetErrorMode (uMode=0x1) returned 0x0 [0235.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0235.622] SetErrorMode (uMode=0x0) returned 0x1 [0235.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png", lpFilePart=0x0) returned 0x5d [0235.624] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png")) returned 0 [0235.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x64 [0235.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x64 [0235.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x64 [0235.632] SetErrorMode (uMode=0x1) returned 0x0 [0235.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0235.634] GetFileType (hFile=0x18c) returned 0x1 [0235.634] SetErrorMode (uMode=0x0) returned 0x1 [0235.634] GetFileType (hFile=0x18c) returned 0x1 [0235.634] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x6add [0235.634] ReadFile (in: hFile=0x18c, lpBuffer=0x27afc48, nNumberOfBytesToRead=0x6add, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27afc48*, lpNumberOfBytesRead=0x27e6e8*=0x6add, lpOverlapped=0x0) returned 1 [0235.636] CloseHandle (hObject=0x18c) returned 1 [0235.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x64 [0235.637] SetErrorMode (uMode=0x1) returned 0x0 [0235.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6add)) returned 1 [0235.637] SetErrorMode (uMode=0x0) returned 0x1 [0235.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x64 [0235.824] SetErrorMode (uMode=0x1) returned 0x0 [0235.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0235.830] SetErrorMode (uMode=0x0) returned 0x1 [0235.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png", lpFilePart=0x0) returned 0x64 [0235.832] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png")) returned 0 [0235.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", lpFilePart=0x0) returned 0x5b [0235.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", lpFilePart=0x0) returned 0x5b [0235.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", lpFilePart=0x0) returned 0x5b [0235.842] SetErrorMode (uMode=0x1) returned 0x0 [0235.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0235.843] GetFileType (hFile=0x18c) returned 0x1 [0235.843] SetErrorMode (uMode=0x0) returned 0x1 [0235.843] GetFileType (hFile=0x18c) returned 0x1 [0235.843] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa3cc [0235.843] ReadFile (in: hFile=0x18c, lpBuffer=0x28390a8, nNumberOfBytesToRead=0xa3cc, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28390a8*, lpNumberOfBytesRead=0x27e6e8*=0xa3cc, lpOverlapped=0x0) returned 1 [0235.845] CloseHandle (hObject=0x18c) returned 1 [0235.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", lpFilePart=0x0) returned 0x5b [0235.847] SetErrorMode (uMode=0x1) returned 0x0 [0235.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9b8bd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9b8bd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc)) returned 1 [0235.847] SetErrorMode (uMode=0x0) returned 0x1 [0235.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", lpFilePart=0x0) returned 0x5b [0235.980] SetErrorMode (uMode=0x1) returned 0x0 [0235.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0235.985] SetErrorMode (uMode=0x0) returned 0x1 [0235.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png", lpFilePart=0x0) returned 0x5b [0235.986] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png")) returned 0 [0235.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", lpFilePart=0x0) returned 0x5a [0235.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", lpFilePart=0x0) returned 0x5a [0235.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", lpFilePart=0x0) returned 0x5a [0235.994] SetErrorMode (uMode=0x1) returned 0x0 [0235.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0236.001] GetFileType (hFile=0x18c) returned 0x1 [0236.001] SetErrorMode (uMode=0x0) returned 0x1 [0236.001] GetFileType (hFile=0x18c) returned 0x1 [0236.001] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8f5e [0236.001] ReadFile (in: hFile=0x18c, lpBuffer=0x28e1ca0, nNumberOfBytesToRead=0x8f5e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28e1ca0*, lpNumberOfBytesRead=0x27e6e8*=0x8f5e, lpOverlapped=0x0) returned 1 [0236.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", lpFilePart=0x0) returned 0x5a [0236.005] SetErrorMode (uMode=0x1) returned 0x0 [0236.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9ded30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9ded30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e)) returned 1 [0236.005] SetErrorMode (uMode=0x0) returned 0x1 [0236.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", lpFilePart=0x0) returned 0x5a [0236.140] SetErrorMode (uMode=0x1) returned 0x0 [0236.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0236.147] SetErrorMode (uMode=0x0) returned 0x1 [0236.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png", lpFilePart=0x0) returned 0x5a [0236.149] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png")) returned 0 [0236.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", lpFilePart=0x0) returned 0x5c [0236.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", lpFilePart=0x0) returned 0x5c [0236.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", lpFilePart=0x0) returned 0x5c [0236.158] SetErrorMode (uMode=0x1) returned 0x0 [0236.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0236.158] GetFileType (hFile=0x18c) returned 0x1 [0236.158] SetErrorMode (uMode=0x0) returned 0x1 [0236.158] GetFileType (hFile=0x18c) returned 0x1 [0236.158] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xbc54 [0236.158] ReadFile (in: hFile=0x18c, lpBuffer=0x277ccd0, nNumberOfBytesToRead=0xbc54, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x277ccd0*, lpNumberOfBytesRead=0x27e6e8*=0xbc54, lpOverlapped=0x0) returned 1 [0236.161] CloseHandle (hObject=0x18c) returned 1 [0236.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", lpFilePart=0x0) returned 0x5c [0236.162] SetErrorMode (uMode=0x1) returned 0x0 [0236.162] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca04e8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca04e8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc54)) returned 1 [0236.162] SetErrorMode (uMode=0x0) returned 0x1 [0236.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", lpFilePart=0x0) returned 0x5c [0236.318] SetErrorMode (uMode=0x1) returned 0x0 [0236.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0236.324] SetErrorMode (uMode=0x0) returned 0x1 [0236.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png", lpFilePart=0x0) returned 0x5c [0236.326] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png")) returned 0 [0236.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", lpFilePart=0x0) returned 0x5d [0236.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", lpFilePart=0x0) returned 0x5d [0236.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", lpFilePart=0x0) returned 0x5d [0236.335] SetErrorMode (uMode=0x1) returned 0x0 [0236.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0236.336] GetFileType (hFile=0x18c) returned 0x1 [0236.336] SetErrorMode (uMode=0x0) returned 0x1 [0236.336] GetFileType (hFile=0x18c) returned 0x1 [0236.336] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8184 [0236.336] ReadFile (in: hFile=0x18c, lpBuffer=0x2817eb8, nNumberOfBytesToRead=0x8184, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2817eb8*, lpNumberOfBytesRead=0x27e6e8*=0x8184, lpOverlapped=0x0) returned 1 [0236.338] CloseHandle (hObject=0x18c) returned 1 [0236.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", lpFilePart=0x0) returned 0x5d [0236.339] SetErrorMode (uMode=0x1) returned 0x0 [0236.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca2afee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca2afee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8184)) returned 1 [0236.339] SetErrorMode (uMode=0x0) returned 0x1 [0236.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", lpFilePart=0x0) returned 0x5d [0236.490] SetErrorMode (uMode=0x1) returned 0x0 [0236.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0236.495] SetErrorMode (uMode=0x0) returned 0x1 [0236.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png", lpFilePart=0x0) returned 0x5d [0236.497] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png")) returned 0 [0236.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", lpFilePart=0x0) returned 0x62 [0236.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", lpFilePart=0x0) returned 0x62 [0236.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", lpFilePart=0x0) returned 0x62 [0236.502] SetErrorMode (uMode=0x1) returned 0x0 [0236.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0236.503] GetFileType (hFile=0x18c) returned 0x1 [0236.503] SetErrorMode (uMode=0x0) returned 0x1 [0236.503] GetFileType (hFile=0x18c) returned 0x1 [0236.503] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x8450 [0236.503] ReadFile (in: hFile=0x18c, lpBuffer=0x28aa808, nNumberOfBytesToRead=0x8450, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28aa808*, lpNumberOfBytesRead=0x27e6e8*=0x8450, lpOverlapped=0x0) returned 1 [0236.512] CloseHandle (hObject=0x18c) returned 1 [0236.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", lpFilePart=0x0) returned 0x62 [0236.517] SetErrorMode (uMode=0x1) returned 0x0 [0236.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8450)) returned 1 [0236.517] SetErrorMode (uMode=0x0) returned 0x1 [0236.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", lpFilePart=0x0) returned 0x62 [0236.632] SetErrorMode (uMode=0x1) returned 0x0 [0236.633] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0236.641] SetErrorMode (uMode=0x0) returned 0x1 [0236.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png", lpFilePart=0x0) returned 0x62 [0236.643] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png")) returned 0 [0236.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", lpFilePart=0x0) returned 0x5c [0236.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", lpFilePart=0x0) returned 0x5c [0236.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", lpFilePart=0x0) returned 0x5c [0236.652] SetErrorMode (uMode=0x1) returned 0x0 [0236.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0236.653] GetFileType (hFile=0x18c) returned 0x1 [0236.653] SetErrorMode (uMode=0x0) returned 0x1 [0236.653] GetFileType (hFile=0x18c) returned 0x1 [0236.653] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x893d [0236.653] ReadFile (in: hFile=0x18c, lpBuffer=0x2745e50, nNumberOfBytesToRead=0x893d, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2745e50*, lpNumberOfBytesRead=0x27e6e8*=0x893d, lpOverlapped=0x0) returned 1 [0236.695] CloseHandle (hObject=0x18c) returned 1 [0236.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", lpFilePart=0x0) returned 0x5c [0236.696] SetErrorMode (uMode=0x1) returned 0x0 [0236.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x893d)) returned 1 [0236.696] SetErrorMode (uMode=0x0) returned 0x1 [0236.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", lpFilePart=0x0) returned 0x5c [0236.851] SetErrorMode (uMode=0x1) returned 0x0 [0236.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0236.858] SetErrorMode (uMode=0x0) returned 0x1 [0236.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png", lpFilePart=0x0) returned 0x5c [0236.860] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png")) returned 0 [0236.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", lpFilePart=0x0) returned 0x5b [0236.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", lpFilePart=0x0) returned 0x5b [0236.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", lpFilePart=0x0) returned 0x5b [0236.868] SetErrorMode (uMode=0x1) returned 0x0 [0236.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0236.868] GetFileType (hFile=0x18c) returned 0x1 [0236.868] SetErrorMode (uMode=0x0) returned 0x1 [0236.868] GetFileType (hFile=0x18c) returned 0x1 [0236.868] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x9508 [0236.868] ReadFile (in: hFile=0x18c, lpBuffer=0x27d75e0, nNumberOfBytesToRead=0x9508, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27d75e0*, lpNumberOfBytesRead=0x27e6e8*=0x9508, lpOverlapped=0x0) returned 1 [0236.871] CloseHandle (hObject=0x18c) returned 1 [0236.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", lpFilePart=0x0) returned 0x5b [0236.872] SetErrorMode (uMode=0x1) returned 0x0 [0236.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac356a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcac356a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9508)) returned 1 [0236.872] SetErrorMode (uMode=0x0) returned 0x1 [0237.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", lpFilePart=0x0) returned 0x5b [0237.041] SetErrorMode (uMode=0x1) returned 0x0 [0237.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.047] SetErrorMode (uMode=0x0) returned 0x1 [0237.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png", lpFilePart=0x0) returned 0x5b [0237.049] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png")) returned 0 [0237.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", lpFilePart=0x0) returned 0x5c [0237.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", lpFilePart=0x0) returned 0x5c [0237.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", lpFilePart=0x0) returned 0x5c [0237.056] SetErrorMode (uMode=0x1) returned 0x0 [0237.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0237.057] GetFileType (hFile=0x18c) returned 0x1 [0237.057] SetErrorMode (uMode=0x0) returned 0x1 [0237.057] GetFileType (hFile=0x18c) returned 0x1 [0237.057] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa742 [0237.057] ReadFile (in: hFile=0x18c, lpBuffer=0x2876d90, nNumberOfBytesToRead=0xa742, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2876d90*, lpNumberOfBytesRead=0x27e6e8*=0xa742, lpOverlapped=0x0) returned 1 [0237.059] CloseHandle (hObject=0x18c) returned 1 [0237.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", lpFilePart=0x0) returned 0x5c [0237.061] SetErrorMode (uMode=0x1) returned 0x0 [0237.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcae96c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcae96c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa742)) returned 1 [0237.061] SetErrorMode (uMode=0x0) returned 0x1 [0237.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", lpFilePart=0x0) returned 0x5c [0237.210] SetErrorMode (uMode=0x1) returned 0x0 [0237.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.215] SetErrorMode (uMode=0x0) returned 0x1 [0237.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png", lpFilePart=0x0) returned 0x5c [0237.217] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png")) returned 0 [0237.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", lpFilePart=0x0) returned 0x5b [0237.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", lpFilePart=0x0) returned 0x5b [0237.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", lpFilePart=0x0) returned 0x5b [0237.221] SetErrorMode (uMode=0x1) returned 0x0 [0237.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0237.222] GetFileType (hFile=0x18c) returned 0x1 [0237.222] SetErrorMode (uMode=0x0) returned 0x1 [0237.222] GetFileType (hFile=0x18c) returned 0x1 [0237.222] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xa0df [0237.222] ReadFile (in: hFile=0x18c, lpBuffer=0x2909b08, nNumberOfBytesToRead=0xa0df, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2909b08*, lpNumberOfBytesRead=0x27e6e8*=0xa0df, lpOverlapped=0x0) returned 1 [0237.232] CloseHandle (hObject=0x18c) returned 1 [0237.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", lpFilePart=0x0) returned 0x5b [0237.233] SetErrorMode (uMode=0x1) returned 0x0 [0237.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa0df)) returned 1 [0237.233] SetErrorMode (uMode=0x0) returned 0x1 [0237.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", lpFilePart=0x0) returned 0x5b [0237.379] SetErrorMode (uMode=0x1) returned 0x0 [0237.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.384] SetErrorMode (uMode=0x0) returned 0x1 [0237.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png", lpFilePart=0x0) returned 0x5b [0237.386] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png")) returned 0 [0237.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x63 [0237.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x63 [0237.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x63 [0237.393] SetErrorMode (uMode=0x1) returned 0x0 [0237.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0237.394] GetFileType (hFile=0x18c) returned 0x1 [0237.394] SetErrorMode (uMode=0x0) returned 0x1 [0237.395] GetFileType (hFile=0x18c) returned 0x1 [0237.395] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x92d0 [0237.395] ReadFile (in: hFile=0x18c, lpBuffer=0x27ad3e0, nNumberOfBytesToRead=0x92d0, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27ad3e0*, lpNumberOfBytesRead=0x27e6e8*=0x92d0, lpOverlapped=0x0) returned 1 [0237.397] CloseHandle (hObject=0x18c) returned 1 [0237.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x63 [0237.398] SetErrorMode (uMode=0x1) returned 0x0 [0237.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0)) returned 1 [0237.398] SetErrorMode (uMode=0x0) returned 0x1 [0237.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x63 [0237.539] SetErrorMode (uMode=0x1) returned 0x0 [0237.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.547] SetErrorMode (uMode=0x0) returned 0x1 [0237.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", nBufferLength=0x105, lpBuffer=0x27bd80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png", lpFilePart=0x0) returned 0x63 [0237.548] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png")) returned 0 [0237.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", lpFilePart=0x0) returned 0x4b [0237.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", lpFilePart=0x0) returned 0x4b [0237.556] SetErrorMode (uMode=0x1) returned 0x0 [0237.557] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe19c11c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe19c11c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf02919, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf02919, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0237.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0237.562] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0237.563] SetErrorMode (uMode=0x0) returned 0x1 [0237.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", lpFilePart=0x0) returned 0x4b [0237.563] SetErrorMode (uMode=0x1) returned 0x0 [0237.563] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe19c11c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe19c11c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf02919, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf02919, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0237.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0237.564] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0237.565] SetErrorMode (uMode=0x0) returned 0x1 [0237.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0237.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0237.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0237.566] SetErrorMode (uMode=0x1) returned 0x0 [0237.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0237.567] GetFileType (hFile=0x18c) returned 0x1 [0237.567] SetErrorMode (uMode=0x0) returned 0x1 [0237.567] GetFileType (hFile=0x18c) returned 0x1 [0237.567] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x28c [0237.567] ReadFile (in: hFile=0x18c, lpBuffer=0x284d838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x284d838*, lpNumberOfBytesRead=0x27e648*=0x28c, lpOverlapped=0x0) returned 1 [0237.569] CloseHandle (hObject=0x18c) returned 1 [0237.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0237.570] SetErrorMode (uMode=0x1) returned 0x0 [0237.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe19c11c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe19c11c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x28c)) returned 1 [0237.570] SetErrorMode (uMode=0x0) returned 0x1 [0237.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0237.688] SetErrorMode (uMode=0x1) returned 0x0 [0237.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.694] SetErrorMode (uMode=0x0) returned 0x1 [0237.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0237.695] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png")) returned 0 [0237.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0237.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0237.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0237.702] SetErrorMode (uMode=0x1) returned 0x0 [0237.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0237.703] GetFileType (hFile=0x18c) returned 0x1 [0237.703] SetErrorMode (uMode=0x0) returned 0x1 [0237.703] GetFileType (hFile=0x18c) returned 0x1 [0237.703] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x1ad [0237.703] ReadFile (in: hFile=0x18c, lpBuffer=0x28a55c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28a55c0*, lpNumberOfBytesRead=0x27e648*=0x1ad, lpOverlapped=0x0) returned 1 [0237.704] CloseHandle (hObject=0x18c) returned 1 [0237.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0237.705] SetErrorMode (uMode=0x1) returned 0x0 [0237.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf02919, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf02919, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ad)) returned 1 [0237.705] SetErrorMode (uMode=0x0) returned 0x1 [0237.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0237.887] SetErrorMode (uMode=0x1) returned 0x0 [0237.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0237.893] SetErrorMode (uMode=0x0) returned 0x1 [0237.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0237.895] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png")) returned 0 [0237.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0237.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0237.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0237.901] SetErrorMode (uMode=0x1) returned 0x0 [0237.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0237.901] GetFileType (hFile=0x18c) returned 0x1 [0237.901] SetErrorMode (uMode=0x0) returned 0x1 [0237.902] GetFileType (hFile=0x18c) returned 0x1 [0237.902] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x22f [0237.902] ReadFile (in: hFile=0x18c, lpBuffer=0x2904b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2904b40*, lpNumberOfBytesRead=0x27e648*=0x22f, lpOverlapped=0x0) returned 1 [0237.903] CloseHandle (hObject=0x18c) returned 1 [0237.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0237.904] SetErrorMode (uMode=0x1) returned 0x0 [0237.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22f)) returned 1 [0237.904] SetErrorMode (uMode=0x0) returned 0x1 [0238.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.020] SetErrorMode (uMode=0x1) returned 0x0 [0238.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.033] SetErrorMode (uMode=0x0) returned 0x1 [0238.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.036] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png")) returned 0 [0238.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.044] SetErrorMode (uMode=0x1) returned 0x0 [0238.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0238.045] GetFileType (hFile=0x18c) returned 0x1 [0238.045] SetErrorMode (uMode=0x0) returned 0x1 [0238.045] GetFileType (hFile=0x18c) returned 0x1 [0238.046] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2a8 [0238.046] ReadFile (in: hFile=0x18c, lpBuffer=0x2764618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x2764618*, lpNumberOfBytesRead=0x27e648*=0x2a8, lpOverlapped=0x0) returned 1 [0238.047] CloseHandle (hObject=0x18c) returned 1 [0238.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.048] SetErrorMode (uMode=0x1) returned 0x0 [0238.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8)) returned 1 [0238.048] SetErrorMode (uMode=0x0) returned 0x1 [0238.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.167] SetErrorMode (uMode=0x1) returned 0x0 [0238.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.173] SetErrorMode (uMode=0x0) returned 0x1 [0238.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.176] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png")) returned 0 [0238.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0238.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0238.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0238.184] SetErrorMode (uMode=0x1) returned 0x0 [0238.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0238.184] GetFileType (hFile=0x18c) returned 0x1 [0238.184] SetErrorMode (uMode=0x0) returned 0x1 [0238.184] GetFileType (hFile=0x18c) returned 0x1 [0238.184] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2a8 [0238.185] ReadFile (in: hFile=0x18c, lpBuffer=0x27c4408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27c4408*, lpNumberOfBytesRead=0x27e648*=0x2a8, lpOverlapped=0x0) returned 1 [0238.186] CloseHandle (hObject=0x18c) returned 1 [0238.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0238.187] SetErrorMode (uMode=0x1) returned 0x0 [0238.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8)) returned 1 [0238.187] SetErrorMode (uMode=0x0) returned 0x1 [0238.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0238.295] SetErrorMode (uMode=0x1) returned 0x0 [0238.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.301] SetErrorMode (uMode=0x0) returned 0x1 [0238.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0238.303] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png")) returned 0 [0238.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0238.312] SetErrorMode (uMode=0x1) returned 0x0 [0238.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0238.316] GetFileType (hFile=0x18c) returned 0x1 [0238.316] SetErrorMode (uMode=0x0) returned 0x1 [0238.316] GetFileType (hFile=0x18c) returned 0x1 [0238.317] WriteFile (in: hFile=0x18c, lpBuffer=0x2834b58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2834b58*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0238.319] WriteFile (in: hFile=0x18c, lpBuffer=0x2834b58*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2834b58*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0238.319] CloseHandle (hObject=0x18c) returned 1 [0238.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", lpFilePart=0x0) returned 0x4b [0238.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", lpFilePart=0x0) returned 0x4b [0238.321] SetErrorMode (uMode=0x1) returned 0x0 [0238.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0238.334] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe38b2fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe38b2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe38b2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0238.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3b145c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0238.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3d75bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0238.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0238.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0238.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0238.335] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0238.337] SetErrorMode (uMode=0x0) returned 0x1 [0238.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", lpFilePart=0x0) returned 0x4b [0238.337] SetErrorMode (uMode=0x1) returned 0x0 [0238.337] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0238.338] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe38b2fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe38b2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe38b2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0238.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3b145c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0238.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3d75bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0238.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0238.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0238.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0238.339] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0238.340] SetErrorMode (uMode=0x0) returned 0x1 [0238.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0238.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0238.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0238.340] SetErrorMode (uMode=0x1) returned 0x0 [0238.341] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0238.343] GetFileType (hFile=0x18c) returned 0x1 [0238.343] SetErrorMode (uMode=0x0) returned 0x1 [0238.343] GetFileType (hFile=0x18c) returned 0x1 [0238.343] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3e1 [0238.343] ReadFile (in: hFile=0x18c, lpBuffer=0x283d530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x283d530*, lpNumberOfBytesRead=0x27e648*=0x3e1, lpOverlapped=0x0) returned 1 [0238.346] CloseHandle (hObject=0x18c) returned 1 [0238.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0238.346] SetErrorMode (uMode=0x1) returned 0x0 [0238.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe38b2fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe38b2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe38b2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3e1)) returned 1 [0238.347] SetErrorMode (uMode=0x0) returned 0x1 [0238.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0238.522] SetErrorMode (uMode=0x1) returned 0x0 [0238.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.529] SetErrorMode (uMode=0x0) returned 0x1 [0238.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png", lpFilePart=0x0) returned 0x61 [0238.531] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png")) returned 0 [0238.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0238.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0238.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0238.541] SetErrorMode (uMode=0x1) returned 0x0 [0238.541] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0238.541] GetFileType (hFile=0x18c) returned 0x1 [0238.541] SetErrorMode (uMode=0x0) returned 0x1 [0238.541] GetFileType (hFile=0x18c) returned 0x1 [0238.541] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x242 [0238.541] ReadFile (in: hFile=0x18c, lpBuffer=0x289da28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x289da28*, lpNumberOfBytesRead=0x27e648*=0x242, lpOverlapped=0x0) returned 1 [0238.543] CloseHandle (hObject=0x18c) returned 1 [0238.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0238.544] SetErrorMode (uMode=0x1) returned 0x0 [0238.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3b145c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242)) returned 1 [0238.544] SetErrorMode (uMode=0x0) returned 0x1 [0238.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0238.656] SetErrorMode (uMode=0x1) returned 0x0 [0238.656] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.662] SetErrorMode (uMode=0x0) returned 0x1 [0238.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png", lpFilePart=0x0) returned 0x65 [0238.663] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png")) returned 0 [0238.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.672] SetErrorMode (uMode=0x1) returned 0x0 [0238.672] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0238.673] GetFileType (hFile=0x18c) returned 0x1 [0238.673] SetErrorMode (uMode=0x0) returned 0x1 [0238.673] GetFileType (hFile=0x18c) returned 0x1 [0238.673] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x2f0 [0238.673] ReadFile (in: hFile=0x18c, lpBuffer=0x28fd328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x28fd328*, lpNumberOfBytesRead=0x27e648*=0x2f0, lpOverlapped=0x0) returned 1 [0238.675] CloseHandle (hObject=0x18c) returned 1 [0238.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.676] SetErrorMode (uMode=0x1) returned 0x0 [0238.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3d75bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0238.676] SetErrorMode (uMode=0x0) returned 0x1 [0238.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.834] SetErrorMode (uMode=0x1) returned 0x0 [0238.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.840] SetErrorMode (uMode=0x0) returned 0x1 [0238.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png", lpFilePart=0x0) returned 0x66 [0238.844] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png")) returned 0 [0238.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.853] SetErrorMode (uMode=0x1) returned 0x0 [0238.853] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0238.854] GetFileType (hFile=0x18c) returned 0x1 [0238.854] SetErrorMode (uMode=0x0) returned 0x1 [0238.854] GetFileType (hFile=0x18c) returned 0x1 [0238.854] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3c3 [0238.854] ReadFile (in: hFile=0x18c, lpBuffer=0x275d3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x275d3f8*, lpNumberOfBytesRead=0x27e648*=0x3c3, lpOverlapped=0x0) returned 1 [0238.856] CloseHandle (hObject=0x18c) returned 1 [0238.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0238.857] SetErrorMode (uMode=0x1) returned 0x0 [0238.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3)) returned 1 [0238.857] SetErrorMode (uMode=0x0) returned 0x1 [0239.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0239.026] SetErrorMode (uMode=0x1) returned 0x0 [0239.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0239.032] SetErrorMode (uMode=0x0) returned 0x1 [0239.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png", lpFilePart=0x0) returned 0x6d [0239.033] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png")) returned 0 [0239.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0239.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0239.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0239.041] SetErrorMode (uMode=0x1) returned 0x0 [0239.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0239.042] GetFileType (hFile=0x18c) returned 0x1 [0239.042] SetErrorMode (uMode=0x0) returned 0x1 [0239.042] GetFileType (hFile=0x18c) returned 0x1 [0239.042] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e768 | out: lpFileSizeHigh=0x27e768*=0x0) returned 0x3c3 [0239.042] ReadFile (in: hFile=0x18c, lpBuffer=0x27bda78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e648, lpOverlapped=0x0 | out: lpBuffer=0x27bda78*, lpNumberOfBytesRead=0x27e648*=0x3c3, lpOverlapped=0x0) returned 1 [0239.046] CloseHandle (hObject=0x18c) returned 1 [0239.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0239.047] SetErrorMode (uMode=0x1) returned 0x0 [0239.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), fInfoLevelId=0x0, lpFileInformation=0x27e650 | out: lpFileInformation=0x27e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3)) returned 1 [0239.047] SetErrorMode (uMode=0x0) returned 0x1 [0239.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27e110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0239.196] SetErrorMode (uMode=0x1) returned 0x0 [0239.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0239.201] SetErrorMode (uMode=0x0) returned 0x1 [0239.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", nBufferLength=0x105, lpBuffer=0x27bce0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png", lpFilePart=0x0) returned 0x64 [0239.202] DeleteFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png")) returned 0 [0239.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0239.210] SetErrorMode (uMode=0x1) returned 0x0 [0239.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.212] GetFileType (hFile=0x18c) returned 0x1 [0239.212] SetErrorMode (uMode=0x0) returned 0x1 [0239.212] GetFileType (hFile=0x18c) returned 0x1 [0239.214] WriteFile (in: hFile=0x18c, lpBuffer=0x282e888*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x282e888*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0239.215] WriteFile (in: hFile=0x18c, lpBuffer=0x282e888*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x282e888*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0239.216] CloseHandle (hObject=0x18c) returned 1 [0239.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0239.217] SetErrorMode (uMode=0x1) returned 0x0 [0239.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.218] GetFileType (hFile=0x18c) returned 0x1 [0239.218] SetErrorMode (uMode=0x0) returned 0x1 [0239.218] GetFileType (hFile=0x18c) returned 0x1 [0239.220] WriteFile (in: hFile=0x18c, lpBuffer=0x28449b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28449b8*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0239.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x57 [0239.224] SetErrorMode (uMode=0x1) returned 0x0 [0239.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.233] GetFileType (hFile=0x18c) returned 0x1 [0239.233] SetErrorMode (uMode=0x0) returned 0x1 [0239.233] GetFileType (hFile=0x18c) returned 0x1 [0239.234] WriteFile (in: hFile=0x18c, lpBuffer=0x285aac8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x285aac8*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0239.235] WriteFile (in: hFile=0x18c, lpBuffer=0x285aac8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x285aac8*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0239.236] CloseHandle (hObject=0x18c) returned 1 [0239.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x48 [0239.236] SetErrorMode (uMode=0x1) returned 0x0 [0239.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.237] GetFileType (hFile=0x18c) returned 0x1 [0239.237] SetErrorMode (uMode=0x0) returned 0x1 [0239.237] GetFileType (hFile=0x18c) returned 0x1 [0239.238] WriteFile (in: hFile=0x18c, lpBuffer=0x2870ba8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2870ba8*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0239.239] WriteFile (in: hFile=0x18c, lpBuffer=0x2870ba8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2870ba8*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0239.239] CloseHandle (hObject=0x18c) returned 1 [0239.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x35 [0239.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x35 [0239.240] SetErrorMode (uMode=0x1) returned 0x0 [0239.240] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.241] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.241] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0239.241] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.241] SetErrorMode (uMode=0x0) returned 0x1 [0239.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x35 [0239.241] SetErrorMode (uMode=0x1) returned 0x0 [0239.241] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.242] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.242] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0239.242] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.242] SetErrorMode (uMode=0x0) returned 0x1 [0239.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4f [0239.242] SetErrorMode (uMode=0x1) returned 0x0 [0239.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\shared gadgets\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.243] GetFileType (hFile=0x18c) returned 0x1 [0239.243] SetErrorMode (uMode=0x0) returned 0x1 [0239.243] GetFileType (hFile=0x18c) returned 0x1 [0239.243] WriteFile (in: hFile=0x18c, lpBuffer=0x2889000*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2889000*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0239.245] WriteFile (in: hFile=0x18c, lpBuffer=0x2889000*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2889000*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0239.245] CloseHandle (hObject=0x18c) returned 1 [0239.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x40 [0239.246] SetErrorMode (uMode=0x1) returned 0x0 [0239.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\windows sidebar\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.246] GetFileType (hFile=0x18c) returned 0x1 [0239.246] SetErrorMode (uMode=0x0) returned 0x1 [0239.246] GetFileType (hFile=0x18c) returned 0x1 [0239.247] WriteFile (in: hFile=0x18c, lpBuffer=0x289f0c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x289f0c0*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.248] WriteFile (in: hFile=0x18c, lpBuffer=0x289f0c0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x289f0c0*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0239.248] CloseHandle (hObject=0x18c) returned 1 [0239.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x30 [0239.249] SetErrorMode (uMode=0x1) returned 0x0 [0239.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\program files (x86)\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.250] GetFileType (hFile=0x18c) returned 0x1 [0239.250] SetErrorMode (uMode=0x0) returned 0x1 [0239.250] GetFileType (hFile=0x18c) returned 0x1 [0239.250] WriteFile (in: hFile=0x18c, lpBuffer=0x28b5140*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e928, lpOverlapped=0x0 | out: lpBuffer=0x28b5140*, lpNumberOfBytesWritten=0x27e928*=0x1000, lpOverlapped=0x0) returned 1 [0239.251] WriteFile (in: hFile=0x18c, lpBuffer=0x28b5140*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e988, lpOverlapped=0x0 | out: lpBuffer=0x28b5140*, lpNumberOfBytesWritten=0x27e988*=0xb14, lpOverlapped=0x0) returned 1 [0239.252] CloseHandle (hObject=0x18c) returned 1 [0239.252] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0239.252] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0239.252] SetErrorMode (uMode=0x1) returned 0x0 [0239.252] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0239.253] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0239.254] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0239.254] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.254] SetErrorMode (uMode=0x0) returned 0x1 [0239.255] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0239.255] SetErrorMode (uMode=0x1) returned 0x0 [0239.255] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0239.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0239.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0239.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0239.255] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0239.256] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0239.257] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.257] SetErrorMode (uMode=0x0) returned 0x1 [0239.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0239.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0239.257] SetErrorMode (uMode=0x1) returned 0x0 [0239.257] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0239.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0239.258] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0239.258] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.258] SetErrorMode (uMode=0x0) returned 0x1 [0239.258] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0239.259] SetErrorMode (uMode=0x1) returned 0x0 [0239.259] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0239.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0239.259] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0239.259] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.259] SetErrorMode (uMode=0x0) returned 0x1 [0239.260] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0239.260] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0239.260] SetErrorMode (uMode=0x1) returned 0x0 [0239.260] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.260] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.260] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0239.260] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0239.261] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.261] SetErrorMode (uMode=0x0) returned 0x1 [0239.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0239.261] SetErrorMode (uMode=0x1) returned 0x0 [0239.261] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0239.261] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0239.261] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.262] SetErrorMode (uMode=0x0) returned 0x1 [0239.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0239.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0239.262] SetErrorMode (uMode=0x1) returned 0x0 [0239.262] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.262] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0239.263] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0239.263] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.264] SetErrorMode (uMode=0x0) returned 0x1 [0239.264] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0239.264] SetErrorMode (uMode=0x1) returned 0x0 [0239.264] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0239.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0239.265] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.266] SetErrorMode (uMode=0x0) returned 0x1 [0239.266] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0239.266] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0239.266] SetErrorMode (uMode=0x1) returned 0x0 [0239.266] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0239.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0239.269] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.269] SetErrorMode (uMode=0x0) returned 0x1 [0239.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0239.269] SetErrorMode (uMode=0x1) returned 0x0 [0239.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.270] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0239.270] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0239.271] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.271] SetErrorMode (uMode=0x0) returned 0x1 [0239.271] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0239.271] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0239.271] SetErrorMode (uMode=0x1) returned 0x0 [0239.271] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0239.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0239.273] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.273] SetErrorMode (uMode=0x0) returned 0x1 [0239.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0239.273] SetErrorMode (uMode=0x1) returned 0x0 [0239.273] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0239.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0239.275] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.275] SetErrorMode (uMode=0x0) returned 0x1 [0239.275] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", lpFilePart=0x0) returned 0x49 [0239.275] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", lpFilePart=0x0) returned 0x49 [0239.276] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.276] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.276] CoTaskMemFree (pv=0xfe030) [0239.276] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.277] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0239.277] SetErrorMode (uMode=0x1) returned 0x0 [0239.277] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.278] GetFileType (hFile=0x18c) returned 0x1 [0239.278] SetErrorMode (uMode=0x0) returned 0x1 [0239.278] GetFileType (hFile=0x18c) returned 0x1 [0239.278] WriteFile (in: hFile=0x18c, lpBuffer=0x28dacc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x28dacc0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0239.279] WriteFile (in: hFile=0x18c, lpBuffer=0x28dacc0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x28dacc0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0239.280] CloseHandle (hObject=0x18c) returned 1 [0239.281] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x45 [0239.281] SetErrorMode (uMode=0x1) returned 0x0 [0239.281] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.282] GetFileType (hFile=0x18c) returned 0x1 [0239.282] SetErrorMode (uMode=0x0) returned 0x1 [0239.282] GetFileType (hFile=0x18c) returned 0x1 [0239.283] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0d90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28f0d90*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0239.284] WriteFile (in: hFile=0x18c, lpBuffer=0x28f0d90*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x28f0d90*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0239.284] CloseHandle (hObject=0x18c) returned 1 [0239.285] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3b [0239.286] SetErrorMode (uMode=0x1) returned 0x0 [0239.286] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.286] GetFileType (hFile=0x18c) returned 0x1 [0239.286] SetErrorMode (uMode=0x0) returned 0x1 [0239.286] GetFileType (hFile=0x18c) returned 0x1 [0239.287] WriteFile (in: hFile=0x18c, lpBuffer=0x2906e30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x2906e30*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0239.288] WriteFile (in: hFile=0x18c, lpBuffer=0x2906e30*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2906e30*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0239.288] CloseHandle (hObject=0x18c) returned 1 [0239.290] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x36 [0239.290] SetErrorMode (uMode=0x1) returned 0x0 [0239.290] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.291] GetFileType (hFile=0x18c) returned 0x1 [0239.291] SetErrorMode (uMode=0x0) returned 0x1 [0239.291] GetFileType (hFile=0x18c) returned 0x1 [0239.299] WriteFile (in: hFile=0x18c, lpBuffer=0x2721fd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2721fd0*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0239.301] WriteFile (in: hFile=0x18c, lpBuffer=0x2721fd0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2721fd0*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0239.301] CloseHandle (hObject=0x18c) returned 1 [0239.301] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0239.302] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0239.302] SetErrorMode (uMode=0x1) returned 0x0 [0239.302] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0239.304] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0 [0239.304] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.304] SetErrorMode (uMode=0x0) returned 0x1 [0239.305] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0239.305] SetErrorMode (uMode=0x1) returned 0x0 [0239.305] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.305] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0239.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0 [0239.307] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.307] SetErrorMode (uMode=0x0) returned 0x1 [0239.307] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0239.307] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0239.308] SetErrorMode (uMode=0x1) returned 0x0 [0239.308] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.310] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0239.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0239.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0239.311] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0 [0239.312] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.312] SetErrorMode (uMode=0x0) returned 0x1 [0239.313] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0239.313] SetErrorMode (uMode=0x1) returned 0x0 [0239.314] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0239.315] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0239.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0239.316] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0 [0239.316] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.317] SetErrorMode (uMode=0x0) returned 0x1 [0239.317] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp", lpFilePart=0x0) returned 0x3d [0239.318] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp", lpFilePart=0x0) returned 0x3d [0239.318] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.318] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.319] CoTaskMemFree (pv=0xfe030) [0239.319] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.319] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp", lpFilePart=0x0) returned 0x3e [0239.319] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp", lpFilePart=0x0) returned 0x3e [0239.320] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.320] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.320] CoTaskMemFree (pv=0xfe030) [0239.320] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.320] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp", lpFilePart=0x0) returned 0x3e [0239.321] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp", lpFilePart=0x0) returned 0x3e [0239.321] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.321] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.322] CoTaskMemFree (pv=0xfe030) [0239.322] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.322] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x40 [0239.323] SetErrorMode (uMode=0x1) returned 0x0 [0239.323] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.324] GetFileType (hFile=0x18c) returned 0x1 [0239.324] SetErrorMode (uMode=0x0) returned 0x1 [0239.324] GetFileType (hFile=0x18c) returned 0x1 [0239.324] WriteFile (in: hFile=0x18c, lpBuffer=0x273f010*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x273f010*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0239.326] WriteFile (in: hFile=0x18c, lpBuffer=0x273f010*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e7a8, lpOverlapped=0x0 | out: lpBuffer=0x273f010*, lpNumberOfBytesWritten=0x27e7a8*=0xb14, lpOverlapped=0x0) returned 1 [0239.326] CloseHandle (hObject=0x18c) returned 1 [0239.327] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x32 [0239.328] SetErrorMode (uMode=0x1) returned 0x0 [0239.328] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\arm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.328] GetFileType (hFile=0x18c) returned 0x1 [0239.328] SetErrorMode (uMode=0x0) returned 0x1 [0239.328] GetFileType (hFile=0x18c) returned 0x1 [0239.329] WriteFile (in: hFile=0x18c, lpBuffer=0x2755090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2755090*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0239.330] WriteFile (in: hFile=0x18c, lpBuffer=0x2755090*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e848, lpOverlapped=0x0 | out: lpBuffer=0x2755090*, lpNumberOfBytesWritten=0x27e848*=0xb14, lpOverlapped=0x0) returned 1 [0239.330] CloseHandle (hObject=0x18c) returned 1 [0239.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x2e [0239.332] SetErrorMode (uMode=0x1) returned 0x0 [0239.332] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\adobe\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.332] GetFileType (hFile=0x18c) returned 0x1 [0239.332] SetErrorMode (uMode=0x0) returned 0x1 [0239.332] GetFileType (hFile=0x18c) returned 0x1 [0239.333] WriteFile (in: hFile=0x18c, lpBuffer=0x276b100*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x276b100*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.334] WriteFile (in: hFile=0x18c, lpBuffer=0x276b100*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x276b100*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0239.335] CloseHandle (hObject=0x18c) returned 1 [0239.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data", lpFilePart=0x0) returned 0x1f [0239.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data", lpFilePart=0x0) returned 0x1f [0239.336] SetErrorMode (uMode=0x1) returned 0x0 [0239.336] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0239.349] SetErrorMode (uMode=0x0) returned 0x1 [0239.351] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x39 [0239.351] SetErrorMode (uMode=0x1) returned 0x0 [0239.351] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\application data\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.352] GetFileType (hFile=0x18c) returned 0x1 [0239.352] SetErrorMode (uMode=0x0) returned 0x1 [0239.352] GetFileType (hFile=0x18c) returned 0x1 [0239.353] WriteFile (in: hFile=0x18c, lpBuffer=0x2783170*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x2783170*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.355] WriteFile (in: hFile=0x18c, lpBuffer=0x2783170*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x2783170*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0239.355] CloseHandle (hObject=0x18c) returned 1 [0239.355] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop", lpFilePart=0x0) returned 0x16 [0239.355] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop", lpFilePart=0x0) returned 0x16 [0239.356] SetErrorMode (uMode=0x1) returned 0x0 [0239.356] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0239.365] SetErrorMode (uMode=0x0) returned 0x1 [0239.366] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x30 [0239.367] SetErrorMode (uMode=0x1) returned 0x0 [0239.367] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\desktop\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.372] GetFileType (hFile=0x18c) returned 0x1 [0239.372] SetErrorMode (uMode=0x0) returned 0x1 [0239.372] GetFileType (hFile=0x18c) returned 0x1 [0239.373] WriteFile (in: hFile=0x18c, lpBuffer=0x279b0e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x279b0e0*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.375] WriteFile (in: hFile=0x18c, lpBuffer=0x279b0e0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x279b0e0*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0239.375] CloseHandle (hObject=0x18c) returned 1 [0239.375] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents", lpFilePart=0x0) returned 0x18 [0239.375] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents", lpFilePart=0x0) returned 0x18 [0239.376] SetErrorMode (uMode=0x1) returned 0x0 [0239.376] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0239.379] SetErrorMode (uMode=0x0) returned 0x1 [0239.380] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x32 [0239.381] SetErrorMode (uMode=0x1) returned 0x0 [0239.381] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\documents\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.382] GetFileType (hFile=0x18c) returned 0x1 [0239.382] SetErrorMode (uMode=0x0) returned 0x1 [0239.382] GetFileType (hFile=0x18c) returned 0x1 [0239.382] WriteFile (in: hFile=0x18c, lpBuffer=0x27b3088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x27b3088*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.384] WriteFile (in: hFile=0x18c, lpBuffer=0x27b3088*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x27b3088*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0239.384] CloseHandle (hObject=0x18c) returned 1 [0239.384] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites", lpFilePart=0x0) returned 0x18 [0239.384] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites", lpFilePart=0x0) returned 0x18 [0239.384] SetErrorMode (uMode=0x1) returned 0x0 [0239.384] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0239.388] SetErrorMode (uMode=0x0) returned 0x1 [0239.389] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x32 [0239.389] SetErrorMode (uMode=0x1) returned 0x0 [0239.390] CreateFileW (lpFileName="C:\\ProgramData\\Favorites\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\favorites\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.390] GetFileType (hFile=0x18c) returned 0x1 [0239.390] SetErrorMode (uMode=0x0) returned 0x1 [0239.390] GetFileType (hFile=0x18c) returned 0x1 [0239.391] WriteFile (in: hFile=0x18c, lpBuffer=0x27cb030*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x27cb030*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.394] WriteFile (in: hFile=0x18c, lpBuffer=0x27cb030*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x27cb030*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0239.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0239.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0239.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0239.395] SetErrorMode (uMode=0x1) returned 0x0 [0239.395] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.398] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0239.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0239.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0239.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0239.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0239.399] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0239.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0239.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0239.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0239.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0239.400] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0239.401] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0239.401] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0239.401] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0239.401] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0239.401] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0239.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0239.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0239.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0239.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0239.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0239.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0239.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0239.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0239.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0239.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0239.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0239.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0239.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0239.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0239.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0239.404] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.405] SetErrorMode (uMode=0x0) returned 0x1 [0239.405] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0239.405] SetErrorMode (uMode=0x1) returned 0x0 [0239.406] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0239.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0239.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0239.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0239.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0239.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0239.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0239.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0239.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0239.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0239.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0239.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0239.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0239.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0239.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0239.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0239.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0239.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0239.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0239.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0239.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0239.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0239.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0239.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0239.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0239.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0239.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0239.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0239.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0239.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0239.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0239.413] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.414] SetErrorMode (uMode=0x0) returned 0x1 [0239.414] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\Hx.hxn", lpFilePart=0x0) returned 0x24 [0239.414] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\Hx.hxn", lpFilePart=0x0) returned 0x24 [0239.414] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.414] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.414] CoTaskMemFree (pv=0xfe030) [0239.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.415] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.415] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.415] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.415] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.415] CoTaskMemFree (pv=0xfe030) [0239.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.415] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.416] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.416] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.416] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.416] CoTaskMemFree (pv=0xfe030) [0239.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.416] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.416] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.417] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.417] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.417] CoTaskMemFree (pv=0xfe030) [0239.417] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.417] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", lpFilePart=0x0) returned 0x33 [0239.417] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", lpFilePart=0x0) returned 0x33 [0239.417] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.417] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.418] CoTaskMemFree (pv=0xfe030) [0239.418] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.418] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", lpFilePart=0x0) returned 0x35 [0239.418] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", lpFilePart=0x0) returned 0x35 [0239.418] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.418] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.418] CoTaskMemFree (pv=0xfe030) [0239.418] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.419] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", lpFilePart=0x0) returned 0x3b [0239.419] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", lpFilePart=0x0) returned 0x3b [0239.419] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.419] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.419] CoTaskMemFree (pv=0xfe030) [0239.419] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.419] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", lpFilePart=0x0) returned 0x35 [0239.420] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", lpFilePart=0x0) returned 0x35 [0239.420] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.420] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.420] CoTaskMemFree (pv=0xfe030) [0239.420] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.420] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x39 [0239.420] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x39 [0239.421] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.421] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.421] CoTaskMemFree (pv=0xfe030) [0239.421] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.421] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.421] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.422] CoTaskMemFree (pv=0xfe030) [0239.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.422] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.422] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.422] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.422] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.422] CoTaskMemFree (pv=0xfe030) [0239.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.423] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.423] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.423] CoTaskMemFree (pv=0xfe030) [0239.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", lpFilePart=0x0) returned 0x33 [0239.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", lpFilePart=0x0) returned 0x33 [0239.424] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.424] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.424] CoTaskMemFree (pv=0xfe030) [0239.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", lpFilePart=0x0) returned 0x30 [0239.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", lpFilePart=0x0) returned 0x30 [0239.425] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.425] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.425] CoTaskMemFree (pv=0xfe030) [0239.425] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.425] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.425] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.426] CoTaskMemFree (pv=0xfe030) [0239.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.426] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.426] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.426] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.426] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.426] CoTaskMemFree (pv=0xfe030) [0239.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x38 [0239.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x38 [0239.427] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.427] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.427] CoTaskMemFree (pv=0xfe030) [0239.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", lpFilePart=0x0) returned 0x35 [0239.428] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", lpFilePart=0x0) returned 0x35 [0239.428] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.428] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.428] CoTaskMemFree (pv=0xfe030) [0239.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.428] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x39 [0239.428] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x39 [0239.429] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.429] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.429] CoTaskMemFree (pv=0xfe030) [0239.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.429] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.429] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.429] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.429] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.430] CoTaskMemFree (pv=0xfe030) [0239.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.430] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.430] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", lpFilePart=0x0) returned 0x32 [0239.430] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.430] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.430] CoTaskMemFree (pv=0xfe030) [0239.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.431] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.431] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.431] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.431] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.431] CoTaskMemFree (pv=0xfe030) [0239.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.431] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", lpFilePart=0x0) returned 0x3d [0239.432] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", lpFilePart=0x0) returned 0x3d [0239.432] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.432] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.432] CoTaskMemFree (pv=0xfe030) [0239.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.432] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.432] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.433] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.433] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.433] CoTaskMemFree (pv=0xfe030) [0239.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.433] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.433] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", lpFilePart=0x0) returned 0x36 [0239.433] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.433] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.434] CoTaskMemFree (pv=0xfe030) [0239.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.434] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.434] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.434] CoTaskMemFree (pv=0xfe030) [0239.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x38 [0239.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x38 [0239.435] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.435] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.435] CoTaskMemFree (pv=0xfe030) [0239.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", lpFilePart=0x0) returned 0x34 [0239.436] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.436] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.436] CoTaskMemFree (pv=0xfe030) [0239.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x38 [0239.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", lpFilePart=0x0) returned 0x38 [0239.437] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.437] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.437] CoTaskMemFree (pv=0xfe030) [0239.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\nslist.hxl", lpFilePart=0x0) returned 0x28 [0239.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\nslist.hxl", lpFilePart=0x0) returned 0x28 [0239.437] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0239.437] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.438] CoTaskMemFree (pv=0xfe030) [0239.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.445] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x37 [0239.445] SetErrorMode (uMode=0x1) returned 0x0 [0239.445] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\microsoft help\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.447] SetErrorMode (uMode=0x0) returned 0x1 [0239.447] GetFileType (hFile=0x18c) returned 0x1 [0239.448] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0239.449] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0239.449] SetErrorMode (uMode=0x1) returned 0x0 [0239.449] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.449] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.450] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0239.450] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0239.450] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.450] SetErrorMode (uMode=0x0) returned 0x1 [0239.450] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0239.450] SetErrorMode (uMode=0x1) returned 0x0 [0239.451] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0239.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0239.451] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.452] SetErrorMode (uMode=0x0) returned 0x1 [0239.452] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0239.452] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0239.452] SetErrorMode (uMode=0x1) returned 0x0 [0239.452] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.453] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.454] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0239.454] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0239.454] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.454] SetErrorMode (uMode=0x0) returned 0x1 [0239.454] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0239.454] SetErrorMode (uMode=0x1) returned 0x0 [0239.455] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.455] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.455] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0239.455] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0239.455] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.456] SetErrorMode (uMode=0x0) returned 0x1 [0239.456] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x3a [0239.456] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x27e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x3a [0239.456] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x3a [0239.456] SetErrorMode (uMode=0x1) returned 0x0 [0239.456] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0239.457] SetErrorMode (uMode=0x0) returned 0x1 [0239.457] GetFileType (hFile=0x18c) returned 0x1 [0239.457] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e948 | out: lpFileSizeHigh=0x27e948*=0x0) returned 0xa4 [0239.458] ReadFile (in: hFile=0x18c, lpBuffer=0x28044a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e828, lpOverlapped=0x0 | out: lpBuffer=0x28044a0*, lpNumberOfBytesRead=0x27e828*=0xa4, lpOverlapped=0x0) returned 1 [0239.459] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x27e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x3a [0239.459] SetErrorMode (uMode=0x1) returned 0x0 [0239.459] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x27e830 | out: lpFileInformation=0x27e830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4)) returned 1 [0239.459] SetErrorMode (uMode=0x0) returned 0x1 [0239.588] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x27e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x3a [0239.588] SetErrorMode (uMode=0x1) returned 0x0 [0239.589] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0239.590] SetErrorMode (uMode=0x0) returned 0x1 [0239.590] GetFileType (hFile=0x18c) returned 0x1 [0239.590] WriteFile (in: hFile=0x18c, lpBuffer=0x285d0d0*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x27e7c8, lpOverlapped=0x0 | out: lpBuffer=0x285d0d0*, lpNumberOfBytesWritten=0x27e7c8*=0x1b0, lpOverlapped=0x0) returned 1 [0239.591] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x3a [0239.591] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\I8J3eVKVuSq2Ipgu_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e580, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\I8J3eVKVuSq2Ipgu_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x43 [0239.591] SetErrorMode (uMode=0x1) returned 0x0 [0239.591] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x27e7d0 | out: lpFileInformation=0x27e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5f5ff690, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0239.592] SetErrorMode (uMode=0x0) returned 0x1 [0239.592] MoveFileW (lpExistingFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\ProgramData\\Mozilla\\logs\\I8J3eVKVuSq2Ipgu_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\programdata\\mozilla\\logs\\i8j3evkvusq2ipgu_encrypted_by.whiterose")) returned 1 [0239.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x35 [0239.688] SetErrorMode (uMode=0x1) returned 0x0 [0239.689] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\mozilla\\logs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.689] SetErrorMode (uMode=0x0) returned 0x1 [0239.689] GetFileType (hFile=0x18c) returned 0x1 [0239.691] WriteFile (in: hFile=0x18c, lpBuffer=0x2870378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e7e8, lpOverlapped=0x0 | out: lpBuffer=0x2870378*, lpNumberOfBytesWritten=0x27e7e8*=0x1000, lpOverlapped=0x0) returned 1 [0239.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x30 [0239.693] SetErrorMode (uMode=0x1) returned 0x0 [0239.693] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\mozilla\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.693] SetErrorMode (uMode=0x0) returned 0x1 [0239.693] GetFileType (hFile=0x18c) returned 0x1 [0239.695] WriteFile (in: hFile=0x18c, lpBuffer=0x28863f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x28863f8*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0239.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0239.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0239.697] SetErrorMode (uMode=0x1) returned 0x0 [0239.697] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0239.698] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.698] SetErrorMode (uMode=0x0) returned 0x1 [0239.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0239.699] SetErrorMode (uMode=0x1) returned 0x0 [0239.699] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0239.699] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.700] SetErrorMode (uMode=0x0) returned 0x1 [0239.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x2f [0239.700] SetErrorMode (uMode=0x1) returned 0x0 [0239.700] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\oracle\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.701] SetErrorMode (uMode=0x0) returned 0x1 [0239.701] GetFileType (hFile=0x18c) returned 0x1 [0239.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0239.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0239.703] SetErrorMode (uMode=0x1) returned 0x0 [0239.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0239.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0239.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0239.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0239.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0239.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0239.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0239.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0239.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0239.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0239.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0239.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0239.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0239.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0239.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0239.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0239.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0239.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0239.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0239.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0239.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0239.711] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.712] SetErrorMode (uMode=0x0) returned 0x1 [0239.712] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0239.712] SetErrorMode (uMode=0x1) returned 0x0 [0239.712] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0239.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0239.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0239.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0239.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0239.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0239.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0239.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0239.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0239.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0239.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0239.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0239.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0239.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0239.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0239.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0239.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0239.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0239.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0239.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0239.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0239.718] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.719] SetErrorMode (uMode=0x0) returned 0x1 [0239.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0239.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0239.720] SetErrorMode (uMode=0x1) returned 0x0 [0239.720] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0239.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0239.721] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.722] SetErrorMode (uMode=0x0) returned 0x1 [0239.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0239.722] SetErrorMode (uMode=0x1) returned 0x0 [0239.722] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0239.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0239.723] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.723] SetErrorMode (uMode=0x0) returned 0x1 [0239.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0239.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0239.724] SetErrorMode (uMode=0x1) returned 0x0 [0239.724] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.724] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.724] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0239.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0239.725] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.725] SetErrorMode (uMode=0x0) returned 0x1 [0239.725] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0239.725] SetErrorMode (uMode=0x1) returned 0x0 [0239.725] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0239.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0239.726] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.727] SetErrorMode (uMode=0x0) returned 0x1 [0239.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0239.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0239.727] SetErrorMode (uMode=0x1) returned 0x0 [0239.727] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0239.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0239.728] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.728] SetErrorMode (uMode=0x0) returned 0x1 [0239.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0239.729] SetErrorMode (uMode=0x1) returned 0x0 [0239.729] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0239.730] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0239.730] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.730] SetErrorMode (uMode=0x0) returned 0x1 [0239.730] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0239.730] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0239.731] SetErrorMode (uMode=0x1) returned 0x0 [0239.731] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0239.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0239.732] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.732] SetErrorMode (uMode=0x0) returned 0x1 [0239.732] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0239.732] SetErrorMode (uMode=0x1) returned 0x0 [0239.732] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0239.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0239.733] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.733] SetErrorMode (uMode=0x0) returned 0x1 [0239.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", lpFilePart=0x0) returned 0x75 [0239.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", lpFilePart=0x0) returned 0x75 [0239.734] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.734] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.734] CoTaskMemFree (pv=0xffa70) [0239.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x72 [0239.735] SetErrorMode (uMode=0x1) returned 0x0 [0239.735] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.736] SetErrorMode (uMode=0x0) returned 0x1 [0239.736] GetFileType (hFile=0x18c) returned 0x1 [0239.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6e [0239.737] SetErrorMode (uMode=0x1) returned 0x0 [0239.738] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.738] SetErrorMode (uMode=0x0) returned 0x1 [0239.738] GetFileType (hFile=0x18c) returned 0x1 [0239.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.740] SetErrorMode (uMode=0x1) returned 0x0 [0239.740] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.740] SetErrorMode (uMode=0x0) returned 0x1 [0239.740] GetFileType (hFile=0x18c) returned 0x1 [0239.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0239.742] SetErrorMode (uMode=0x1) returned 0x0 [0239.742] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.743] SetErrorMode (uMode=0x0) returned 0x1 [0239.743] GetFileType (hFile=0x18c) returned 0x1 [0239.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0239.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0239.745] SetErrorMode (uMode=0x1) returned 0x0 [0239.745] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.746] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.746] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0239.746] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0239.747] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.747] SetErrorMode (uMode=0x0) returned 0x1 [0239.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0239.747] SetErrorMode (uMode=0x1) returned 0x0 [0239.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0239.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0239.748] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.748] SetErrorMode (uMode=0x0) returned 0x1 [0239.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0239.749] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0239.749] SetErrorMode (uMode=0x1) returned 0x0 [0239.749] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.749] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.750] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0239.774] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.774] SetErrorMode (uMode=0x0) returned 0x1 [0239.774] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0239.774] SetErrorMode (uMode=0x1) returned 0x0 [0239.774] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0239.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0239.775] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.775] SetErrorMode (uMode=0x0) returned 0x1 [0239.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0239.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0239.776] SetErrorMode (uMode=0x1) returned 0x0 [0239.776] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.777] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.777] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0239.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0239.778] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.782] SetErrorMode (uMode=0x0) returned 0x1 [0239.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0239.782] SetErrorMode (uMode=0x1) returned 0x0 [0239.782] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0239.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0239.783] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.783] SetErrorMode (uMode=0x0) returned 0x1 [0239.783] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0239.784] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0239.784] SetErrorMode (uMode=0x1) returned 0x0 [0239.784] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.785] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.785] SetErrorMode (uMode=0x0) returned 0x1 [0239.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0239.786] SetErrorMode (uMode=0x1) returned 0x0 [0239.786] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.786] SetErrorMode (uMode=0x0) returned 0x1 [0239.786] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", lpFilePart=0x0) returned 0x75 [0239.786] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", lpFilePart=0x0) returned 0x75 [0239.787] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.787] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.787] CoTaskMemFree (pv=0xffa70) [0239.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x72 [0239.796] SetErrorMode (uMode=0x1) returned 0x0 [0239.796] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.797] SetErrorMode (uMode=0x0) returned 0x1 [0239.797] GetFileType (hFile=0x18c) returned 0x1 [0239.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6e [0239.799] SetErrorMode (uMode=0x1) returned 0x0 [0239.799] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.800] SetErrorMode (uMode=0x0) returned 0x1 [0239.800] GetFileType (hFile=0x18c) returned 0x1 [0239.801] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.801] SetErrorMode (uMode=0x1) returned 0x0 [0239.801] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.802] SetErrorMode (uMode=0x0) returned 0x1 [0239.802] GetFileType (hFile=0x18c) returned 0x1 [0239.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5f [0239.803] SetErrorMode (uMode=0x1) returned 0x0 [0239.803] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.804] SetErrorMode (uMode=0x0) returned 0x1 [0239.804] GetFileType (hFile=0x18c) returned 0x1 [0239.805] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.805] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.806] SetErrorMode (uMode=0x1) returned 0x0 [0239.806] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.806] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.806] SetErrorMode (uMode=0x0) returned 0x1 [0239.806] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.807] SetErrorMode (uMode=0x1) returned 0x0 [0239.807] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.807] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.807] SetErrorMode (uMode=0x0) returned 0x1 [0239.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.808] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.808] SetErrorMode (uMode=0x1) returned 0x0 [0239.808] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.809] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.809] SetErrorMode (uMode=0x0) returned 0x1 [0239.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.809] SetErrorMode (uMode=0x1) returned 0x0 [0239.809] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.810] SetErrorMode (uMode=0x0) returned 0x1 [0239.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0239.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0239.810] SetErrorMode (uMode=0x1) returned 0x0 [0239.810] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.811] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.811] SetErrorMode (uMode=0x0) returned 0x1 [0239.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0239.811] SetErrorMode (uMode=0x1) returned 0x0 [0239.811] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.812] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.812] SetErrorMode (uMode=0x0) returned 0x1 [0239.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0239.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0239.812] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.812] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.813] CoTaskMemFree (pv=0xffa70) [0239.813] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0239.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0239.813] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.813] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.813] CoTaskMemFree (pv=0xffa70) [0239.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x86 [0239.814] SetErrorMode (uMode=0x1) returned 0x0 [0239.814] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.816] SetErrorMode (uMode=0x0) returned 0x1 [0239.816] GetFileType (hFile=0x18c) returned 0x1 [0239.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x71 [0239.818] SetErrorMode (uMode=0x1) returned 0x0 [0239.818] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.819] SetErrorMode (uMode=0x0) returned 0x1 [0239.819] GetFileType (hFile=0x18c) returned 0x1 [0239.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.821] SetErrorMode (uMode=0x1) returned 0x0 [0239.821] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0239.821] SetErrorMode (uMode=0x0) returned 0x1 [0239.821] GetFileType (hFile=0x18c) returned 0x1 [0239.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0239.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0239.823] SetErrorMode (uMode=0x1) returned 0x0 [0239.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.823] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.824] SetErrorMode (uMode=0x0) returned 0x1 [0239.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0239.824] SetErrorMode (uMode=0x1) returned 0x0 [0239.824] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.824] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.825] SetErrorMode (uMode=0x0) returned 0x1 [0239.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0239.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0239.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.825] CoTaskMemFree (pv=0xffa70) [0239.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0239.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0239.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.826] CoTaskMemFree (pv=0xffa70) [0239.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0239.827] SetErrorMode (uMode=0x1) returned 0x0 [0239.831] SetErrorMode (uMode=0x0) returned 0x1 [0239.831] GetFileType (hFile=0x18c) returned 0x1 [0239.832] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.833] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.833] SetErrorMode (uMode=0x1) returned 0x0 [0239.833] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.834] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.834] SetErrorMode (uMode=0x0) returned 0x1 [0239.834] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.834] SetErrorMode (uMode=0x1) returned 0x0 [0239.835] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.835] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.835] SetErrorMode (uMode=0x0) returned 0x1 [0239.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.836] SetErrorMode (uMode=0x1) returned 0x0 [0239.836] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.836] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.836] SetErrorMode (uMode=0x0) returned 0x1 [0239.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.837] SetErrorMode (uMode=0x1) returned 0x0 [0239.837] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.837] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.837] SetErrorMode (uMode=0x0) returned 0x1 [0239.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0239.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0239.838] SetErrorMode (uMode=0x1) returned 0x0 [0239.838] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.839] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.839] SetErrorMode (uMode=0x0) returned 0x1 [0239.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0239.839] SetErrorMode (uMode=0x1) returned 0x0 [0239.839] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.840] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.840] SetErrorMode (uMode=0x0) returned 0x1 [0239.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0239.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0239.840] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.840] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.841] CoTaskMemFree (pv=0xffa70) [0239.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0239.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0239.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.841] CoTaskMemFree (pv=0xffa70) [0239.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.842] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x8b [0239.842] SetErrorMode (uMode=0x1) returned 0x0 [0239.844] SetErrorMode (uMode=0x0) returned 0x1 [0239.844] GetFileType (hFile=0x18c) returned 0x1 [0239.845] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x71 [0239.845] SetErrorMode (uMode=0x1) returned 0x0 [0239.846] SetErrorMode (uMode=0x0) returned 0x1 [0239.846] GetFileType (hFile=0x18c) returned 0x1 [0239.847] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.847] SetErrorMode (uMode=0x1) returned 0x0 [0239.848] SetErrorMode (uMode=0x0) returned 0x1 [0239.848] GetFileType (hFile=0x18c) returned 0x1 [0239.849] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0239.849] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0239.850] SetErrorMode (uMode=0x1) returned 0x0 [0239.850] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.851] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.851] SetErrorMode (uMode=0x0) returned 0x1 [0239.851] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0239.851] SetErrorMode (uMode=0x1) returned 0x0 [0239.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.852] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.852] SetErrorMode (uMode=0x0) returned 0x1 [0239.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpFilePart=0x0) returned 0x4d [0239.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpFilePart=0x0) returned 0x4d [0239.853] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.853] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.853] CoTaskMemFree (pv=0xffa70) [0239.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0239.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0239.853] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.853] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.854] CoTaskMemFree (pv=0xffa70) [0239.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.854] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0239.854] SetErrorMode (uMode=0x1) returned 0x0 [0239.856] SetErrorMode (uMode=0x0) returned 0x1 [0239.856] GetFileType (hFile=0x18c) returned 0x1 [0239.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.858] SetErrorMode (uMode=0x1) returned 0x0 [0239.858] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.858] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.858] SetErrorMode (uMode=0x0) returned 0x1 [0239.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.859] SetErrorMode (uMode=0x1) returned 0x0 [0239.859] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.859] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.859] SetErrorMode (uMode=0x0) returned 0x1 [0239.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.860] SetErrorMode (uMode=0x1) returned 0x0 [0239.860] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.861] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.861] SetErrorMode (uMode=0x0) returned 0x1 [0239.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.861] SetErrorMode (uMode=0x1) returned 0x0 [0239.861] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.862] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.862] SetErrorMode (uMode=0x0) returned 0x1 [0239.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0239.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0239.862] SetErrorMode (uMode=0x1) returned 0x0 [0239.863] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.863] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.863] SetErrorMode (uMode=0x0) returned 0x1 [0239.863] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0239.864] SetErrorMode (uMode=0x1) returned 0x0 [0239.864] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.864] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.864] SetErrorMode (uMode=0x0) returned 0x1 [0239.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0239.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0239.865] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.865] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.865] CoTaskMemFree (pv=0xffa70) [0239.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.865] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0239.865] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0239.866] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.866] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.866] CoTaskMemFree (pv=0xffa70) [0239.866] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.866] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x87 [0239.866] SetErrorMode (uMode=0x1) returned 0x0 [0239.868] SetErrorMode (uMode=0x0) returned 0x1 [0239.868] GetFileType (hFile=0x18c) returned 0x1 [0239.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x72 [0239.870] SetErrorMode (uMode=0x1) returned 0x0 [0239.870] SetErrorMode (uMode=0x0) returned 0x1 [0239.870] GetFileType (hFile=0x18c) returned 0x1 [0239.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0239.872] SetErrorMode (uMode=0x1) returned 0x0 [0239.872] SetErrorMode (uMode=0x0) returned 0x1 [0239.872] GetFileType (hFile=0x18c) returned 0x1 [0239.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.874] SetErrorMode (uMode=0x1) returned 0x0 [0239.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.875] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.875] SetErrorMode (uMode=0x0) returned 0x1 [0239.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.876] SetErrorMode (uMode=0x1) returned 0x0 [0239.876] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.876] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.876] SetErrorMode (uMode=0x0) returned 0x1 [0239.876] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.877] SetErrorMode (uMode=0x1) returned 0x0 [0239.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.877] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.878] SetErrorMode (uMode=0x0) returned 0x1 [0239.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.878] SetErrorMode (uMode=0x1) returned 0x0 [0239.878] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.878] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.879] SetErrorMode (uMode=0x0) returned 0x1 [0239.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0239.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0239.879] SetErrorMode (uMode=0x1) returned 0x0 [0239.879] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.880] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.880] SetErrorMode (uMode=0x0) returned 0x1 [0239.880] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0239.880] SetErrorMode (uMode=0x1) returned 0x0 [0239.881] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.881] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.881] SetErrorMode (uMode=0x0) returned 0x1 [0239.881] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0239.881] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0239.881] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.881] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.882] CoTaskMemFree (pv=0xffa70) [0239.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.882] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0239.882] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0239.882] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.882] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.882] CoTaskMemFree (pv=0xffa70) [0239.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.883] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x8a [0239.883] SetErrorMode (uMode=0x1) returned 0x0 [0239.885] SetErrorMode (uMode=0x0) returned 0x1 [0239.885] GetFileType (hFile=0x18c) returned 0x1 [0239.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x72 [0239.886] SetErrorMode (uMode=0x1) returned 0x0 [0239.887] SetErrorMode (uMode=0x0) returned 0x1 [0239.887] GetFileType (hFile=0x18c) returned 0x1 [0239.888] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0239.888] SetErrorMode (uMode=0x1) returned 0x0 [0239.889] SetErrorMode (uMode=0x0) returned 0x1 [0239.889] GetFileType (hFile=0x18c) returned 0x1 [0239.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.891] SetErrorMode (uMode=0x1) returned 0x0 [0239.891] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.892] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.892] SetErrorMode (uMode=0x0) returned 0x1 [0239.892] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0239.892] SetErrorMode (uMode=0x1) returned 0x0 [0239.892] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.893] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.893] SetErrorMode (uMode=0x0) returned 0x1 [0239.893] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.893] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.893] SetErrorMode (uMode=0x1) returned 0x0 [0239.894] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.894] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.894] SetErrorMode (uMode=0x0) returned 0x1 [0239.894] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0239.895] SetErrorMode (uMode=0x1) returned 0x0 [0239.895] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.895] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.895] SetErrorMode (uMode=0x0) returned 0x1 [0239.895] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0239.896] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0239.896] SetErrorMode (uMode=0x1) returned 0x0 [0239.896] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.896] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.897] SetErrorMode (uMode=0x0) returned 0x1 [0239.897] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0239.897] SetErrorMode (uMode=0x1) returned 0x0 [0239.897] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.897] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.898] SetErrorMode (uMode=0x0) returned 0x1 [0239.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0239.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0239.898] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.898] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.898] CoTaskMemFree (pv=0xffa70) [0239.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0239.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0239.899] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.899] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.899] CoTaskMemFree (pv=0xffa70) [0239.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x89 [0239.900] SetErrorMode (uMode=0x1) returned 0x0 [0239.902] SetErrorMode (uMode=0x0) returned 0x1 [0239.902] GetFileType (hFile=0x18c) returned 0x1 [0239.903] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x72 [0239.903] SetErrorMode (uMode=0x1) returned 0x0 [0239.921] SetErrorMode (uMode=0x0) returned 0x1 [0239.921] GetFileType (hFile=0x18c) returned 0x1 [0239.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0239.923] SetErrorMode (uMode=0x1) returned 0x0 [0239.923] SetErrorMode (uMode=0x0) returned 0x1 [0239.923] GetFileType (hFile=0x18c) returned 0x1 [0239.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.927] SetErrorMode (uMode=0x1) returned 0x0 [0239.928] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.928] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.928] SetErrorMode (uMode=0x0) returned 0x1 [0239.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.928] SetErrorMode (uMode=0x1) returned 0x0 [0239.929] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.929] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.929] SetErrorMode (uMode=0x0) returned 0x1 [0239.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.930] SetErrorMode (uMode=0x1) returned 0x0 [0239.930] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.930] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.930] SetErrorMode (uMode=0x0) returned 0x1 [0239.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.931] SetErrorMode (uMode=0x1) returned 0x0 [0239.931] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.931] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.931] SetErrorMode (uMode=0x0) returned 0x1 [0239.931] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0239.932] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0239.932] SetErrorMode (uMode=0x1) returned 0x0 [0239.932] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.933] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.933] SetErrorMode (uMode=0x0) returned 0x1 [0239.933] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0239.933] SetErrorMode (uMode=0x1) returned 0x0 [0239.933] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.933] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.934] SetErrorMode (uMode=0x0) returned 0x1 [0239.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0239.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0239.934] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.934] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.934] CoTaskMemFree (pv=0xffa70) [0239.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.935] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0239.935] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0239.935] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.935] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.935] CoTaskMemFree (pv=0xffa70) [0239.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.935] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x8b [0239.936] SetErrorMode (uMode=0x1) returned 0x0 [0239.938] SetErrorMode (uMode=0x0) returned 0x1 [0239.938] GetFileType (hFile=0x18c) returned 0x1 [0239.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x71 [0239.939] SetErrorMode (uMode=0x1) returned 0x0 [0239.940] SetErrorMode (uMode=0x0) returned 0x1 [0239.940] GetFileType (hFile=0x18c) returned 0x1 [0239.941] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.941] SetErrorMode (uMode=0x1) returned 0x0 [0239.941] SetErrorMode (uMode=0x0) returned 0x1 [0239.942] GetFileType (hFile=0x18c) returned 0x1 [0239.943] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.943] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.943] SetErrorMode (uMode=0x1) returned 0x0 [0239.943] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.944] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.944] SetErrorMode (uMode=0x0) returned 0x1 [0239.944] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0239.944] SetErrorMode (uMode=0x1) returned 0x0 [0239.944] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.945] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.945] SetErrorMode (uMode=0x0) returned 0x1 [0239.945] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.945] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.945] SetErrorMode (uMode=0x1) returned 0x0 [0239.946] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.946] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.946] SetErrorMode (uMode=0x0) returned 0x1 [0239.946] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0239.947] SetErrorMode (uMode=0x1) returned 0x0 [0239.947] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.947] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.947] SetErrorMode (uMode=0x0) returned 0x1 [0239.947] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0239.948] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0239.948] SetErrorMode (uMode=0x1) returned 0x0 [0239.948] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.948] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.948] SetErrorMode (uMode=0x0) returned 0x1 [0239.949] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0239.949] SetErrorMode (uMode=0x1) returned 0x0 [0239.949] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.949] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.949] SetErrorMode (uMode=0x0) returned 0x1 [0239.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0239.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0239.950] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.950] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.950] CoTaskMemFree (pv=0xffa70) [0239.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.951] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0239.951] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0239.951] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.951] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.951] CoTaskMemFree (pv=0xffa70) [0239.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.952] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x88 [0239.952] SetErrorMode (uMode=0x1) returned 0x0 [0239.954] SetErrorMode (uMode=0x0) returned 0x1 [0239.954] GetFileType (hFile=0x18c) returned 0x1 [0239.955] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x71 [0239.955] SetErrorMode (uMode=0x1) returned 0x0 [0239.956] SetErrorMode (uMode=0x0) returned 0x1 [0239.956] GetFileType (hFile=0x18c) returned 0x1 [0239.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.957] SetErrorMode (uMode=0x1) returned 0x0 [0239.958] SetErrorMode (uMode=0x0) returned 0x1 [0239.958] GetFileType (hFile=0x18c) returned 0x1 [0239.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.959] SetErrorMode (uMode=0x1) returned 0x0 [0239.960] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.961] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.961] SetErrorMode (uMode=0x0) returned 0x1 [0239.961] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.961] SetErrorMode (uMode=0x1) returned 0x0 [0239.962] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.962] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.962] SetErrorMode (uMode=0x0) returned 0x1 [0239.962] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.963] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.963] SetErrorMode (uMode=0x1) returned 0x0 [0239.963] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.964] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.964] SetErrorMode (uMode=0x0) returned 0x1 [0239.965] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.965] SetErrorMode (uMode=0x1) returned 0x0 [0239.965] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.965] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.965] SetErrorMode (uMode=0x0) returned 0x1 [0239.966] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0239.966] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0239.966] SetErrorMode (uMode=0x1) returned 0x0 [0239.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.967] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.968] SetErrorMode (uMode=0x0) returned 0x1 [0239.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0239.968] SetErrorMode (uMode=0x1) returned 0x0 [0239.968] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.969] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.969] SetErrorMode (uMode=0x0) returned 0x1 [0239.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0239.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0239.970] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.970] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.970] CoTaskMemFree (pv=0xffa70) [0239.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0239.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0239.971] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.971] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.971] CoTaskMemFree (pv=0xffa70) [0239.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x89 [0239.971] SetErrorMode (uMode=0x1) returned 0x0 [0239.973] SetErrorMode (uMode=0x0) returned 0x1 [0239.973] GetFileType (hFile=0x18c) returned 0x1 [0239.974] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x71 [0239.975] SetErrorMode (uMode=0x1) returned 0x0 [0239.975] SetErrorMode (uMode=0x0) returned 0x1 [0239.975] GetFileType (hFile=0x18c) returned 0x1 [0239.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0239.977] SetErrorMode (uMode=0x1) returned 0x0 [0239.977] SetErrorMode (uMode=0x0) returned 0x1 [0239.977] GetFileType (hFile=0x18c) returned 0x1 [0239.978] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.979] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.979] SetErrorMode (uMode=0x1) returned 0x0 [0239.979] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.980] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.980] SetErrorMode (uMode=0x0) returned 0x1 [0239.980] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0239.980] SetErrorMode (uMode=0x1) returned 0x0 [0239.981] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.981] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.981] SetErrorMode (uMode=0x0) returned 0x1 [0239.981] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.982] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.982] SetErrorMode (uMode=0x1) returned 0x0 [0239.982] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.989] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.989] SetErrorMode (uMode=0x0) returned 0x1 [0239.990] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0239.990] SetErrorMode (uMode=0x1) returned 0x0 [0239.990] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.990] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.991] SetErrorMode (uMode=0x0) returned 0x1 [0239.991] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0239.991] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0239.991] SetErrorMode (uMode=0x1) returned 0x0 [0239.992] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.993] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.993] SetErrorMode (uMode=0x0) returned 0x1 [0239.993] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0239.993] SetErrorMode (uMode=0x1) returned 0x0 [0239.994] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0239.994] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0239.994] SetErrorMode (uMode=0x0) returned 0x1 [0239.994] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0239.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0239.995] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.995] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.995] CoTaskMemFree (pv=0xffa70) [0239.995] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0239.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0239.996] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0239.996] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0239.996] CoTaskMemFree (pv=0xffa70) [0239.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0239.996] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x86 [0239.997] SetErrorMode (uMode=0x1) returned 0x0 [0239.998] SetErrorMode (uMode=0x0) returned 0x1 [0239.998] GetFileType (hFile=0x18c) returned 0x1 [0240.000] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x71 [0240.000] SetErrorMode (uMode=0x1) returned 0x0 [0240.001] SetErrorMode (uMode=0x0) returned 0x1 [0240.001] GetFileType (hFile=0x18c) returned 0x1 [0240.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0240.002] SetErrorMode (uMode=0x1) returned 0x0 [0240.003] SetErrorMode (uMode=0x0) returned 0x1 [0240.003] GetFileType (hFile=0x18c) returned 0x1 [0240.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0240.005] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0240.005] SetErrorMode (uMode=0x1) returned 0x0 [0240.005] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.006] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.006] SetErrorMode (uMode=0x0) returned 0x1 [0240.007] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0240.007] SetErrorMode (uMode=0x1) returned 0x0 [0240.007] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.007] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.008] SetErrorMode (uMode=0x0) returned 0x1 [0240.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpFilePart=0x0) returned 0x4d [0240.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpFilePart=0x0) returned 0x4d [0240.008] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.008] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.009] CoTaskMemFree (pv=0xffa70) [0240.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.009] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0240.009] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0240.009] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.009] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.009] CoTaskMemFree (pv=0xffa70) [0240.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.010] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0240.010] SetErrorMode (uMode=0x1) returned 0x0 [0240.012] SetErrorMode (uMode=0x0) returned 0x1 [0240.012] GetFileType (hFile=0x18c) returned 0x1 [0240.014] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0240.014] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0240.014] SetErrorMode (uMode=0x1) returned 0x0 [0240.014] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.016] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.016] SetErrorMode (uMode=0x0) returned 0x1 [0240.016] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0240.017] SetErrorMode (uMode=0x1) returned 0x0 [0240.017] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.017] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.017] SetErrorMode (uMode=0x0) returned 0x1 [0240.018] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0240.018] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0240.018] SetErrorMode (uMode=0x1) returned 0x0 [0240.018] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.019] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.019] SetErrorMode (uMode=0x0) returned 0x1 [0240.019] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0240.019] SetErrorMode (uMode=0x1) returned 0x0 [0240.020] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.020] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.020] SetErrorMode (uMode=0x0) returned 0x1 [0240.021] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0240.021] SetErrorMode (uMode=0x1) returned 0x0 [0240.021] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.022] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.022] SetErrorMode (uMode=0x0) returned 0x1 [0240.022] SetErrorMode (uMode=0x1) returned 0x0 [0240.022] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.023] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.023] SetErrorMode (uMode=0x0) returned 0x1 [0240.023] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.023] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.023] CoTaskMemFree (pv=0xffa70) [0240.024] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.024] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.024] CoTaskMemFree (pv=0xffa70) [0240.024] SetErrorMode (uMode=0x1) returned 0x0 [0240.026] SetErrorMode (uMode=0x0) returned 0x1 [0240.026] GetFileType (hFile=0x18c) returned 0x1 [0240.027] SetErrorMode (uMode=0x1) returned 0x0 [0240.028] SetErrorMode (uMode=0x0) returned 0x1 [0240.028] GetFileType (hFile=0x18c) returned 0x1 [0240.029] SetErrorMode (uMode=0x1) returned 0x0 [0240.030] SetErrorMode (uMode=0x0) returned 0x1 [0240.030] GetFileType (hFile=0x18c) returned 0x1 [0240.031] SetErrorMode (uMode=0x1) returned 0x0 [0240.031] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.032] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.032] SetErrorMode (uMode=0x0) returned 0x1 [0240.032] SetErrorMode (uMode=0x1) returned 0x0 [0240.033] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.033] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.033] SetErrorMode (uMode=0x0) returned 0x1 [0240.033] SetErrorMode (uMode=0x1) returned 0x0 [0240.034] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.035] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.035] SetErrorMode (uMode=0x0) returned 0x1 [0240.035] SetErrorMode (uMode=0x1) returned 0x0 [0240.036] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.036] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.036] SetErrorMode (uMode=0x0) returned 0x1 [0240.036] SetErrorMode (uMode=0x1) returned 0x0 [0240.037] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.037] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.037] SetErrorMode (uMode=0x0) returned 0x1 [0240.038] SetErrorMode (uMode=0x1) returned 0x0 [0240.038] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.038] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.038] SetErrorMode (uMode=0x0) returned 0x1 [0240.039] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.039] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.039] CoTaskMemFree (pv=0xffa70) [0240.039] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.039] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.039] CoTaskMemFree (pv=0xffa70) [0240.040] SetErrorMode (uMode=0x1) returned 0x0 [0240.045] SetErrorMode (uMode=0x0) returned 0x1 [0240.045] GetFileType (hFile=0x18c) returned 0x1 [0240.047] SetErrorMode (uMode=0x1) returned 0x0 [0240.047] SetErrorMode (uMode=0x0) returned 0x1 [0240.047] GetFileType (hFile=0x18c) returned 0x1 [0240.049] SetErrorMode (uMode=0x1) returned 0x0 [0240.049] SetErrorMode (uMode=0x0) returned 0x1 [0240.049] GetFileType (hFile=0x18c) returned 0x1 [0240.050] SetErrorMode (uMode=0x1) returned 0x0 [0240.051] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.051] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.051] SetErrorMode (uMode=0x0) returned 0x1 [0240.052] SetErrorMode (uMode=0x1) returned 0x0 [0240.052] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.052] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.052] SetErrorMode (uMode=0x0) returned 0x1 [0240.053] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.053] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.053] CoTaskMemFree (pv=0xffa70) [0240.053] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.053] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.053] CoTaskMemFree (pv=0xffa70) [0240.053] SetErrorMode (uMode=0x1) returned 0x0 [0240.057] SetErrorMode (uMode=0x0) returned 0x1 [0240.057] GetFileType (hFile=0x18c) returned 0x1 [0240.061] SetErrorMode (uMode=0x1) returned 0x0 [0240.061] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.062] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.063] SetErrorMode (uMode=0x0) returned 0x1 [0240.063] SetErrorMode (uMode=0x1) returned 0x0 [0240.063] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.063] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.064] SetErrorMode (uMode=0x0) returned 0x1 [0240.064] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.064] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.064] CoTaskMemFree (pv=0xffa70) [0240.064] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.064] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.065] CoTaskMemFree (pv=0xffa70) [0240.065] SetErrorMode (uMode=0x1) returned 0x0 [0240.067] SetErrorMode (uMode=0x0) returned 0x1 [0240.067] GetFileType (hFile=0x18c) returned 0x1 [0240.068] SetErrorMode (uMode=0x1) returned 0x0 [0240.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.070] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.070] SetErrorMode (uMode=0x0) returned 0x1 [0240.070] SetErrorMode (uMode=0x1) returned 0x0 [0240.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.071] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.071] SetErrorMode (uMode=0x0) returned 0x1 [0240.071] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.071] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.071] CoTaskMemFree (pv=0xffa70) [0240.072] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.072] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.072] CoTaskMemFree (pv=0xffa70) [0240.072] SetErrorMode (uMode=0x1) returned 0x0 [0240.074] SetErrorMode (uMode=0x0) returned 0x1 [0240.074] GetFileType (hFile=0x18c) returned 0x1 [0240.075] SetErrorMode (uMode=0x1) returned 0x0 [0240.075] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.076] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.076] SetErrorMode (uMode=0x0) returned 0x1 [0240.076] SetErrorMode (uMode=0x1) returned 0x0 [0240.077] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.077] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.077] SetErrorMode (uMode=0x0) returned 0x1 [0240.078] SetErrorMode (uMode=0x1) returned 0x0 [0240.078] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.078] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.078] SetErrorMode (uMode=0x0) returned 0x1 [0240.079] SetErrorMode (uMode=0x1) returned 0x0 [0240.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.079] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.079] SetErrorMode (uMode=0x0) returned 0x1 [0240.080] SetErrorMode (uMode=0x1) returned 0x0 [0240.080] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.080] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.081] SetErrorMode (uMode=0x0) returned 0x1 [0240.081] SetErrorMode (uMode=0x1) returned 0x0 [0240.081] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.081] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.082] SetErrorMode (uMode=0x0) returned 0x1 [0240.082] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.082] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.082] CoTaskMemFree (pv=0xffa70) [0240.082] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0240.082] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.083] CoTaskMemFree (pv=0xffa70) [0240.083] SetErrorMode (uMode=0x1) returned 0x0 [0240.085] SetErrorMode (uMode=0x0) returned 0x1 [0240.085] GetFileType (hFile=0x18c) returned 0x1 [0240.086] SetErrorMode (uMode=0x1) returned 0x0 [0240.087] SetErrorMode (uMode=0x0) returned 0x1 [0240.087] GetFileType (hFile=0x18c) returned 0x1 [0240.088] SetErrorMode (uMode=0x1) returned 0x0 [0240.089] SetErrorMode (uMode=0x0) returned 0x1 [0240.089] GetFileType (hFile=0x18c) returned 0x1 [0240.090] SetErrorMode (uMode=0x1) returned 0x0 [0240.091] SetErrorMode (uMode=0x0) returned 0x1 [0240.091] GetFileType (hFile=0x18c) returned 0x1 [0240.092] SetErrorMode (uMode=0x1) returned 0x0 [0240.092] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0240.101] SetErrorMode (uMode=0x0) returned 0x1 [0240.103] SetErrorMode (uMode=0x1) returned 0x0 [0240.103] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\start menu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.105] GetFileType (hFile=0x18c) returned 0x1 [0240.105] SetErrorMode (uMode=0x0) returned 0x1 [0240.105] GetFileType (hFile=0x18c) returned 0x1 [0240.107] WriteFile (in: hFile=0x18c, lpBuffer=0x27a4b48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x27a4b48*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0240.108] WriteFile (in: hFile=0x18c, lpBuffer=0x27a4b48*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x27a4b48*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0240.108] CloseHandle (hObject=0x18c) returned 1 [0240.109] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0240.109] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0240.109] SetErrorMode (uMode=0x1) returned 0x0 [0240.109] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0240.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0240.111] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.111] SetErrorMode (uMode=0x0) returned 0x1 [0240.111] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0240.111] SetErrorMode (uMode=0x1) returned 0x0 [0240.111] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0240.111] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0240.111] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.112] SetErrorMode (uMode=0x0) returned 0x1 [0240.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0240.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0240.112] SetErrorMode (uMode=0x1) returned 0x0 [0240.112] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0240.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0240.113] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.113] SetErrorMode (uMode=0x0) returned 0x1 [0240.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0240.113] SetErrorMode (uMode=0x1) returned 0x0 [0240.113] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0240.113] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0240.114] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.114] SetErrorMode (uMode=0x0) returned 0x1 [0240.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0240.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0240.114] SetErrorMode (uMode=0x1) returned 0x0 [0240.114] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.114] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0240.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0240.115] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.115] SetErrorMode (uMode=0x0) returned 0x1 [0240.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0240.115] SetErrorMode (uMode=0x1) returned 0x0 [0240.115] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.115] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0240.116] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0240.116] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.116] SetErrorMode (uMode=0x0) returned 0x1 [0240.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0240.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0240.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0240.116] SetErrorMode (uMode=0x1) returned 0x0 [0240.116] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0240.117] GetFileType (hFile=0x18c) returned 0x1 [0240.117] SetErrorMode (uMode=0x0) returned 0x1 [0240.117] GetFileType (hFile=0x18c) returned 0x1 [0240.117] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x77 [0240.117] ReadFile (in: hFile=0x18c, lpBuffer=0x27b0c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x27b0c50*, lpNumberOfBytesRead=0x27e788*=0x77, lpOverlapped=0x0) returned 1 [0240.119] CloseHandle (hObject=0x18c) returned 1 [0240.120] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0240.120] SetErrorMode (uMode=0x1) returned 0x0 [0240.120] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77)) returned 1 [0240.120] SetErrorMode (uMode=0x0) returned 0x1 [0240.311] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0240.312] SetErrorMode (uMode=0x1) returned 0x0 [0240.312] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0240.313] GetFileType (hFile=0x18c) returned 0x1 [0240.313] SetErrorMode (uMode=0x0) returned 0x1 [0240.313] GetFileType (hFile=0x18c) returned 0x1 [0240.313] WriteFile (in: hFile=0x18c, lpBuffer=0x2810ad8*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x27e728, lpOverlapped=0x0 | out: lpBuffer=0x2810ad8*, lpNumberOfBytesWritten=0x27e728*=0x180, lpOverlapped=0x0) returned 1 [0240.315] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0240.315] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\TizQXjdwxpZnZbLy_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\TizQXjdwxpZnZbLy_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x4b [0240.315] SetErrorMode (uMode=0x1) returned 0x0 [0240.315] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x5fcfd730, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0240.315] SetErrorMode (uMode=0x0) returned 0x1 [0240.315] MoveFileW (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\TizQXjdwxpZnZbLy_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\programdata\\sun\\java\\java update\\tizqxjdwxpznzbly_encrypted_by.whiterose")) returned 1 [0240.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x3d [0240.424] SetErrorMode (uMode=0x1) returned 0x0 [0240.424] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\sun\\java\\java update\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.425] GetFileType (hFile=0x18c) returned 0x1 [0240.425] SetErrorMode (uMode=0x0) returned 0x1 [0240.425] GetFileType (hFile=0x18c) returned 0x1 [0240.427] WriteFile (in: hFile=0x18c, lpBuffer=0x2823db0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e748, lpOverlapped=0x0 | out: lpBuffer=0x2823db0*, lpNumberOfBytesWritten=0x27e748*=0x1000, lpOverlapped=0x0) returned 1 [0240.429] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x31 [0240.429] SetErrorMode (uMode=0x1) returned 0x0 [0240.429] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\sun\\java\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.429] GetFileType (hFile=0x18c) returned 0x1 [0240.429] SetErrorMode (uMode=0x0) returned 0x1 [0240.429] GetFileType (hFile=0x18c) returned 0x1 [0240.431] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x2c [0240.431] SetErrorMode (uMode=0x1) returned 0x0 [0240.431] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\sun\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.431] GetFileType (hFile=0x18c) returned 0x1 [0240.431] SetErrorMode (uMode=0x0) returned 0x1 [0240.431] GetFileType (hFile=0x18c) returned 0x1 [0240.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0240.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0240.436] SetErrorMode (uMode=0x1) returned 0x0 [0240.436] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0240.448] SetErrorMode (uMode=0x0) returned 0x1 [0240.450] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x32 [0240.450] SetErrorMode (uMode=0x1) returned 0x0 [0240.450] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\templates\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.476] GetFileType (hFile=0x18c) returned 0x1 [0240.476] SetErrorMode (uMode=0x0) returned 0x1 [0240.476] GetFileType (hFile=0x18c) returned 0x1 [0240.477] WriteFile (in: hFile=0x18c, lpBuffer=0x2867e48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x2867e48*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0240.478] WriteFile (in: hFile=0x18c, lpBuffer=0x2867e48*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x2867e48*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0240.478] CloseHandle (hObject=0x18c) returned 1 [0240.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x28 [0240.479] SetErrorMode (uMode=0x1) returned 0x0 [0240.479] CreateFileW (lpFileName="C:\\ProgramData\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\programdata\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.480] GetFileType (hFile=0x18c) returned 0x1 [0240.480] SetErrorMode (uMode=0x0) returned 0x1 [0240.480] GetFileType (hFile=0x18c) returned 0x1 [0240.480] WriteFile (in: hFile=0x18c, lpBuffer=0x287dea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e928, lpOverlapped=0x0 | out: lpBuffer=0x287dea8*, lpNumberOfBytesWritten=0x27e928*=0x1000, lpOverlapped=0x0) returned 1 [0240.481] WriteFile (in: hFile=0x18c, lpBuffer=0x287dea8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e988, lpOverlapped=0x0 | out: lpBuffer=0x287dea8*, lpNumberOfBytesWritten=0x27e988*=0xb14, lpOverlapped=0x0) returned 1 [0240.482] CloseHandle (hObject=0x18c) returned 1 [0240.482] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0240.482] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0240.482] SetErrorMode (uMode=0x1) returned 0x0 [0240.482] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0240.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0 [0240.568] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.568] SetErrorMode (uMode=0x0) returned 0x1 [0240.568] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0240.568] SetErrorMode (uMode=0x1) returned 0x0 [0240.568] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0240.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0 [0240.569] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.569] SetErrorMode (uMode=0x0) returned 0x1 [0240.569] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0240.569] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0240.569] SetErrorMode (uMode=0x1) returned 0x0 [0240.569] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.570] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.570] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0240.570] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0240.570] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0240.570] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.570] SetErrorMode (uMode=0x0) returned 0x1 [0240.570] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0240.571] SetErrorMode (uMode=0x1) returned 0x0 [0240.571] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0240.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0240.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0240.571] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.571] SetErrorMode (uMode=0x0) returned 0x1 [0240.571] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0240.572] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0240.572] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.573] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.573] CoTaskMemFree (pv=0xfe030) [0240.573] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.573] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim", lpFilePart=0x0) returned 0x3a [0240.573] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim", lpFilePart=0x0) returned 0x3a [0240.573] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.573] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.573] CoTaskMemFree (pv=0xfe030) [0240.573] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.574] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0240.574] SetErrorMode (uMode=0x1) returned 0x0 [0240.574] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.575] GetFileType (hFile=0x18c) returned 0x1 [0240.575] SetErrorMode (uMode=0x0) returned 0x1 [0240.575] GetFileType (hFile=0x18c) returned 0x1 [0240.575] WriteFile (in: hFile=0x18c, lpBuffer=0x289a1c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e888, lpOverlapped=0x0 | out: lpBuffer=0x289a1c8*, lpNumberOfBytesWritten=0x27e888*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] WriteFile (in: hFile=0x18c, lpBuffer=0x289a1c8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e8e8, lpOverlapped=0x0 | out: lpBuffer=0x289a1c8*, lpNumberOfBytesWritten=0x27e8e8*=0xb14, lpOverlapped=0x0) returned 1 [0240.577] CloseHandle (hObject=0x18c) returned 1 [0240.577] GetFullPathNameW (in: lpFileName="C:\\Recovery\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x25 [0240.577] SetErrorMode (uMode=0x1) returned 0x0 [0240.577] CreateFileW (lpFileName="C:\\Recovery\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\recovery\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0240.578] GetFileType (hFile=0x18c) returned 0x1 [0240.578] SetErrorMode (uMode=0x0) returned 0x1 [0240.578] GetFileType (hFile=0x18c) returned 0x1 [0240.578] WriteFile (in: hFile=0x18c, lpBuffer=0x28b0218*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e928, lpOverlapped=0x0 | out: lpBuffer=0x28b0218*, lpNumberOfBytesWritten=0x27e928*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] WriteFile (in: hFile=0x18c, lpBuffer=0x28b0218*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e988, lpOverlapped=0x0 | out: lpBuffer=0x28b0218*, lpNumberOfBytesWritten=0x27e988*=0xb14, lpOverlapped=0x0) returned 1 [0240.580] CloseHandle (hObject=0x18c) returned 1 [0240.580] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0240.580] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0240.580] SetErrorMode (uMode=0x1) returned 0x0 [0240.580] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0240.585] SetErrorMode (uMode=0x0) returned 0x1 [0240.587] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e420, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x36 [0240.587] SetErrorMode (uMode=0x1) returned 0x0 [0240.587] CreateFileW (lpFileName="C:\\System Volume Information\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\system volume information\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0240.592] SetErrorMode (uMode=0x0) returned 0x1 [0240.595] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x27e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0240.595] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0240.595] SetErrorMode (uMode=0x1) returned 0x0 [0240.595] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6081ed0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe6081ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6081ed0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe6081ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0240.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0240.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0240.595] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0240.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0240.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6081ed0, ftCreationTime.dwHighDateTime=0x1d533c7, ftLastAccessTime.dwLowDateTime=0xe6081ed0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe6081ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1b14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW-TO-RECOVERY-FILES.TXT", cAlternateFileName="HOW-TO~1.TXT")) returned 1 [0240.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0240.596] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0240.596] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.596] SetErrorMode (uMode=0x0) returned 0x1 [0240.596] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x27e590, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0240.596] SetErrorMode (uMode=0x1) returned 0x0 [0240.596] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x27e730 | out: lpFindFileData=0x27e730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6081ed0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe6081ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6081ed0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe6081ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0240.597] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6081ed0, ftCreationTime.dwHighDateTime=0x1d533c7, ftLastAccessTime.dwLowDateTime=0xe6081ed0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe6081ed0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x1b14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW-TO-RECOVERY-FILES.TXT", cAlternateFileName="HOW-TO~1.TXT")) returned 1 [0240.598] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0240.598] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e740 | out: lpFindFileData=0x27e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0240.599] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.599] SetErrorMode (uMode=0x0) returned 0x1 [0240.599] GetFullPathNameW (in: lpFileName="C:\\Users\\desktop.ini", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\desktop.ini", lpFilePart=0x0) returned 0x14 [0240.599] GetFullPathNameW (in: lpFileName="C:\\Users\\desktop.ini", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\desktop.ini", lpFilePart=0x0) returned 0x14 [0240.599] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.599] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.600] CoTaskMemFree (pv=0xfe030) [0240.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.600] GetFullPathNameW (in: lpFileName="C:\\Users\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x22 [0240.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x27e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0240.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0240.600] SetErrorMode (uMode=0x1) returned 0x0 [0240.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.601] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.602] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0240.602] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0240.602] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0240.603] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0240.603] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd727d10, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xdd727d10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0240.603] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd5b60510, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd5b60510, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0240.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0240.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0240.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0240.605] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0240.605] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd5de7c70, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd5de7c70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0240.606] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0240.606] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0240.606] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0240.607] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0240.607] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0240.607] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0240.608] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd6a8d150, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6a8d150, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0240.614] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0240.614] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0240.614] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0240.615] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0240.615] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0240.615] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd67b9730, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd67b9730, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0240.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd67b9730, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd67b9730, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0240.616] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.616] SetErrorMode (uMode=0x0) returned 0x1 [0240.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x27e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0240.617] SetErrorMode (uMode=0x1) returned 0x0 [0240.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x27e690 | out: lpFindFileData=0x27e690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.617] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.618] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0240.618] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0240.618] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd727d10, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xdd727d10, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd5b60510, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd5b60510, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0240.620] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0240.620] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0240.620] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0240.621] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0240.621] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd5de7c70, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd5de7c70, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0240.622] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0240.622] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0240.622] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0240.623] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0240.623] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0240.623] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0240.624] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0240.624] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0240.624] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0240.625] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd6a8d150, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6a8d150, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0240.625] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0240.626] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0240.626] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0240.626] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0240.627] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0240.627] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0240.627] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0240.628] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd67b9730, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd67b9730, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0240.628] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e6a0 | out: lpFindFileData=0x27e6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd67b9730, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd67b9730, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0240.629] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.629] SetErrorMode (uMode=0x0) returned 0x1 [0240.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", lpFilePart=0x0) returned 0x28 [0240.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x27e670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", lpFilePart=0x0) returned 0x28 [0240.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x27e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", lpFilePart=0x0) returned 0x28 [0240.629] SetErrorMode (uMode=0x1) returned 0x0 [0240.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0240.634] SetErrorMode (uMode=0x0) returned 0x1 [0240.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT", lpFilePart=0x0) returned 0x28 [0240.636] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat")) returned 0 [0240.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x2d [0240.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x2d [0240.651] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.651] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.651] CoTaskMemFree (pv=0xfe030) [0240.651] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2", lpFilePart=0x0) returned 0x2d [0240.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2", lpFilePart=0x0) returned 0x2d [0240.651] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.651] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.652] CoTaskMemFree (pv=0xfe030) [0240.652] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpFilePart=0x0) returned 0x55 [0240.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpFilePart=0x0) returned 0x55 [0240.653] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.653] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.653] CoTaskMemFree (pv=0xfe030) [0240.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x7a [0240.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x7a [0240.654] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.654] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.654] CoTaskMemFree (pv=0xfe030) [0240.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x7a [0240.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x7a [0240.673] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.673] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.674] CoTaskMemFree (pv=0xfe030) [0240.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini", lpFilePart=0x0) returned 0x28 [0240.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini", lpFilePart=0x0) returned 0x28 [0240.675] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0240.675] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0240.675] CoTaskMemFree (pv=0xfe030) [0240.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0240.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x27e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0240.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0240.676] SetErrorMode (uMode=0x1) returned 0x0 [0240.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0240.677] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0240.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd6b4b830, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6b4b830, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0240.678] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd6b4b830, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6b4b830, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0240.678] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.678] SetErrorMode (uMode=0x0) returned 0x1 [0240.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x27e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0240.679] SetErrorMode (uMode=0x1) returned 0x0 [0240.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x27e5f0 | out: lpFindFileData=0x27e5f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.679] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.679] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0240.679] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0240.680] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd6b4b830, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6b4b830, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0240.680] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e600 | out: lpFindFileData=0x27e600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd6b4b830, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xd6b4b830, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0240.680] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.680] SetErrorMode (uMode=0x0) returned 0x1 [0240.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x27e650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0240.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0240.681] SetErrorMode (uMode=0x1) returned 0x0 [0240.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0240.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0240.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0240.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0240.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0240.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0240.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0240.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0240.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0240.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0240.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0240.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0d752f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe0d752f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0240.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0240.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0240.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0240.685] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.685] SetErrorMode (uMode=0x0) returned 0x1 [0240.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x27e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0240.685] SetErrorMode (uMode=0x1) returned 0x0 [0240.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x27e550 | out: lpFindFileData=0x27e550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0240.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0240.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0240.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0240.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0240.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0240.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0240.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0240.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0240.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0240.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0240.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0240.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0d752f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe0d752f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0240.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0240.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0240.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e560 | out: lpFindFileData=0x27e560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0240.689] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0240.689] SetErrorMode (uMode=0x0) returned 0x1 [0240.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", lpFilePart=0x0) returned 0x3f [0240.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", lpFilePart=0x0) returned 0x3f [0240.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", lpFilePart=0x0) returned 0x3f [0240.690] SetErrorMode (uMode=0x1) returned 0x0 [0240.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0240.691] SetErrorMode (uMode=0x0) returned 0x1 [0240.691] GetFileType (hFile=0x18c) returned 0x1 [0240.691] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x1a918 [0240.692] ReadFile (in: hFile=0x18c, lpBuffer=0x36735410, nNumberOfBytesToRead=0x1a918, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x36735410*, lpNumberOfBytesRead=0x27e788*=0x1a918, lpOverlapped=0x0) returned 1 [0240.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", lpFilePart=0x0) returned 0x3f [0240.700] SetErrorMode (uMode=0x1) returned 0x0 [0240.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918)) returned 1 [0240.700] SetErrorMode (uMode=0x0) returned 0x1 [0240.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", lpFilePart=0x0) returned 0x3f [0240.902] SetErrorMode (uMode=0x1) returned 0x0 [0240.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0240.904] SetErrorMode (uMode=0x0) returned 0x1 [0240.904] GetFileType (hFile=0x18c) returned 0x1 [0240.904] WriteFile (in: hFile=0x18c, lpBuffer=0x367d5070*, nNumberOfBytesToWrite=0x1aa20, lpNumberOfBytesWritten=0x27e808, lpOverlapped=0x0 | out: lpBuffer=0x367d5070*, lpNumberOfBytesWritten=0x27e808*=0x1aa20, lpOverlapped=0x0) returned 1 [0240.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT", lpFilePart=0x0) returned 0x3f [0240.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\RUAcVqcu4yODkTkw_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\RUAcVqcu4yODkTkw_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x53 [0240.908] SetErrorMode (uMode=0x1) returned 0x0 [0240.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e730 | out: lpFileInformation=0x27e730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x602a4b70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1aa20)) returned 1 [0240.908] SetErrorMode (uMode=0x0) returned 0x1 [0240.908] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\RUAcVqcu4yODkTkw_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ruacvqcu4yodktkw_encrypted_by.whiterose")) returned 1 [0241.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x38 [0241.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x27e530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x38 [0241.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x27e240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x38 [0241.015] SetErrorMode (uMode=0x1) returned 0x0 [0241.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0241.015] SetErrorMode (uMode=0x0) returned 0x1 [0241.015] GetFileType (hFile=0x18c) returned 0x1 [0241.015] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e8a8 | out: lpFileSizeHigh=0x27e8a8*=0x0) returned 0x126775 [0241.018] ReadFile (in: hFile=0x18c, lpBuffer=0x367efac0, nNumberOfBytesToRead=0x126775, lpNumberOfBytesRead=0x27e788, lpOverlapped=0x0 | out: lpBuffer=0x367efac0*, lpNumberOfBytesRead=0x27e788*=0x126775, lpOverlapped=0x0) returned 1 [0241.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x27e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x38 [0241.052] SetErrorMode (uMode=0x1) returned 0x0 [0241.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x27e790 | out: lpFileInformation=0x27e790*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775)) returned 1 [0241.052] SetErrorMode (uMode=0x0) returned 0x1 [0241.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x27e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x38 [0241.248] SetErrorMode (uMode=0x1) returned 0x0 [0241.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0241.257] SetErrorMode (uMode=0x0) returned 0x1 [0241.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x27be20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x38 [0241.261] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db")) returned 1 [0241.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0241.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0241.263] SetErrorMode (uMode=0x1) returned 0x0 [0241.263] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.264] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0241.266] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.266] SetErrorMode (uMode=0x0) returned 0x1 [0241.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0241.266] SetErrorMode (uMode=0x1) returned 0x0 [0241.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.266] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.267] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0241.267] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0241.268] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0241.268] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.268] SetErrorMode (uMode=0x0) returned 0x1 [0241.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0241.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0241.269] SetErrorMode (uMode=0x1) returned 0x0 [0241.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.269] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.270] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0241.270] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0241.270] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.271] SetErrorMode (uMode=0x0) returned 0x1 [0241.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0241.271] SetErrorMode (uMode=0x1) returned 0x0 [0241.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.271] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0241.272] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0241.272] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.273] SetErrorMode (uMode=0x0) returned 0x1 [0241.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0241.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0241.273] SetErrorMode (uMode=0x1) returned 0x0 [0241.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.275] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0241.275] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0241.275] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0241.276] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0241.276] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0241.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0241.277] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.278] SetErrorMode (uMode=0x0) returned 0x1 [0241.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0241.278] SetErrorMode (uMode=0x1) returned 0x0 [0241.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.279] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0241.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0241.280] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0241.281] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0241.281] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0241.281] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0241.282] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.282] SetErrorMode (uMode=0x0) returned 0x1 [0241.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", lpFilePart=0x0) returned 0x51 [0241.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", lpFilePart=0x0) returned 0x51 [0241.283] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.283] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.284] CoTaskMemFree (pv=0xffa70) [0241.284] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", lpFilePart=0x0) returned 0x50 [0241.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", lpFilePart=0x0) returned 0x50 [0241.284] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.284] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.284] CoTaskMemFree (pv=0xffa70) [0241.284] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", lpFilePart=0x0) returned 0x4f [0241.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", lpFilePart=0x0) returned 0x4f [0241.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.285] CoTaskMemFree (pv=0xffa70) [0241.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", lpFilePart=0x0) returned 0x4c [0241.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", lpFilePart=0x0) returned 0x4c [0241.285] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.285] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.285] CoTaskMemFree (pv=0xffa70) [0241.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0241.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0241.285] SetErrorMode (uMode=0x1) returned 0x0 [0241.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.287] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0241.288] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0241.288] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.288] SetErrorMode (uMode=0x0) returned 0x1 [0241.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0241.288] SetErrorMode (uMode=0x1) returned 0x0 [0241.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.288] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.288] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0241.289] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0241.289] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.289] SetErrorMode (uMode=0x0) returned 0x1 [0241.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", lpFilePart=0x0) returned 0x52 [0241.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", lpFilePart=0x0) returned 0x52 [0241.289] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.289] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.289] CoTaskMemFree (pv=0xffa70) [0241.289] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5e [0241.290] SetErrorMode (uMode=0x1) returned 0x0 [0241.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.290] GetFileType (hFile=0x18c) returned 0x1 [0241.290] SetErrorMode (uMode=0x0) returned 0x1 [0241.290] GetFileType (hFile=0x18c) returned 0x1 [0241.292] WriteFile (in: hFile=0x18c, lpBuffer=0x27bb378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27bb378*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0241.294] WriteFile (in: hFile=0x18c, lpBuffer=0x27bb378*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27bb378*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0241.294] CloseHandle (hObject=0x18c) returned 1 [0241.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x58 [0241.295] SetErrorMode (uMode=0x1) returned 0x0 [0241.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.295] GetFileType (hFile=0x18c) returned 0x1 [0241.295] SetErrorMode (uMode=0x0) returned 0x1 [0241.295] GetFileType (hFile=0x18c) returned 0x1 [0241.297] WriteFile (in: hFile=0x18c, lpBuffer=0x27d1498*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x27d1498*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0241.298] WriteFile (in: hFile=0x18c, lpBuffer=0x27d1498*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27d1498*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0241.299] CloseHandle (hObject=0x18c) returned 1 [0241.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0241.299] SetErrorMode (uMode=0x1) returned 0x0 [0241.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.300] GetFileType (hFile=0x18c) returned 0x1 [0241.300] SetErrorMode (uMode=0x0) returned 0x1 [0241.300] GetFileType (hFile=0x18c) returned 0x1 [0241.300] WriteFile (in: hFile=0x18c, lpBuffer=0x27e7598*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x27e7598*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0241.301] WriteFile (in: hFile=0x18c, lpBuffer=0x27e7598*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x27e7598*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0241.302] CloseHandle (hObject=0x18c) returned 1 [0241.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0241.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0241.302] SetErrorMode (uMode=0x1) returned 0x0 [0241.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0241.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0241.303] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0241.303] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.303] SetErrorMode (uMode=0x0) returned 0x1 [0241.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0241.303] SetErrorMode (uMode=0x1) returned 0x0 [0241.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.304] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.304] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0241.304] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0241.304] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0241.304] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.304] SetErrorMode (uMode=0x0) returned 0x1 [0241.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x46 [0241.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x46 [0241.305] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.305] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.305] CoTaskMemFree (pv=0xffa70) [0241.305] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0241.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0241.305] SetErrorMode (uMode=0x1) returned 0x0 [0241.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0241.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0241.306] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0241.307] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.307] SetErrorMode (uMode=0x0) returned 0x1 [0241.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0241.307] SetErrorMode (uMode=0x1) returned 0x0 [0241.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0241.307] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0241.308] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0241.308] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.308] SetErrorMode (uMode=0x0) returned 0x1 [0241.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x4b [0241.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x4b [0241.308] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.308] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.308] CoTaskMemFree (pv=0xffa70) [0241.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x4a [0241.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x4a [0241.309] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.309] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.309] CoTaskMemFree (pv=0xffa70) [0241.309] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5a [0241.309] SetErrorMode (uMode=0x1) returned 0x0 [0241.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.310] GetFileType (hFile=0x18c) returned 0x1 [0241.310] SetErrorMode (uMode=0x0) returned 0x1 [0241.310] GetFileType (hFile=0x18c) returned 0x1 [0241.310] WriteFile (in: hFile=0x18c, lpBuffer=0x2804da8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x2804da8*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0241.311] WriteFile (in: hFile=0x18c, lpBuffer=0x2804da8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2804da8*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0241.312] CloseHandle (hObject=0x18c) returned 1 [0241.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x51 [0241.312] SetErrorMode (uMode=0x1) returned 0x0 [0241.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.313] GetFileType (hFile=0x18c) returned 0x1 [0241.313] SetErrorMode (uMode=0x0) returned 0x1 [0241.313] GetFileType (hFile=0x18c) returned 0x1 [0241.313] WriteFile (in: hFile=0x18c, lpBuffer=0x281aea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x281aea8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0241.314] WriteFile (in: hFile=0x18c, lpBuffer=0x281aea8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x281aea8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0241.315] CloseHandle (hObject=0x18c) returned 1 [0241.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4b [0241.315] SetErrorMode (uMode=0x1) returned 0x0 [0241.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.315] GetFileType (hFile=0x18c) returned 0x1 [0241.316] SetErrorMode (uMode=0x0) returned 0x1 [0241.316] GetFileType (hFile=0x18c) returned 0x1 [0241.316] WriteFile (in: hFile=0x18c, lpBuffer=0x2830f88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2830f88*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0241.317] WriteFile (in: hFile=0x18c, lpBuffer=0x2830f88*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2830f88*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0241.317] CloseHandle (hObject=0x18c) returned 1 [0241.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x3c [0241.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x3c [0241.318] SetErrorMode (uMode=0x1) returned 0x0 [0241.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0241.323] SetErrorMode (uMode=0x0) returned 0x1 [0241.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x56 [0241.325] SetErrorMode (uMode=0x1) returned 0x0 [0241.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.326] GetFileType (hFile=0x18c) returned 0x1 [0241.326] SetErrorMode (uMode=0x0) returned 0x1 [0241.326] GetFileType (hFile=0x18c) returned 0x1 [0241.327] WriteFile (in: hFile=0x18c, lpBuffer=0x28493b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28493b8*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0241.328] WriteFile (in: hFile=0x18c, lpBuffer=0x28493b8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x28493b8*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0241.328] CloseHandle (hObject=0x18c) returned 1 [0241.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0241.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0241.329] SetErrorMode (uMode=0x1) returned 0x0 [0241.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.329] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.329] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0241.329] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 0 [0241.330] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.330] SetErrorMode (uMode=0x0) returned 0x1 [0241.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0241.330] SetErrorMode (uMode=0x1) returned 0x0 [0241.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0241.330] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 0 [0241.330] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.331] SetErrorMode (uMode=0x0) returned 0x1 [0241.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0241.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0241.331] SetErrorMode (uMode=0x1) returned 0x0 [0241.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.331] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.331] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0241.332] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0241.332] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 0 [0241.332] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.332] SetErrorMode (uMode=0x0) returned 0x1 [0241.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0241.332] SetErrorMode (uMode=0x1) returned 0x0 [0241.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.332] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.332] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0241.333] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0241.333] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 0 [0241.333] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.333] SetErrorMode (uMode=0x0) returned 0x1 [0241.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0241.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0241.334] SetErrorMode (uMode=0x1) returned 0x0 [0241.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.335] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0241.336] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 0 [0241.336] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.336] SetErrorMode (uMode=0x0) returned 0x1 [0241.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0241.336] SetErrorMode (uMode=0x1) returned 0x0 [0241.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.337] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.337] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0241.338] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 0 [0241.338] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.338] SetErrorMode (uMode=0x0) returned 0x1 [0241.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0241.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0241.339] SetErrorMode (uMode=0x1) returned 0x0 [0241.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.339] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.340] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0241.340] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 0 [0241.340] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.341] SetErrorMode (uMode=0x0) returned 0x1 [0241.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0241.341] SetErrorMode (uMode=0x1) returned 0x0 [0241.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.341] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.342] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0241.342] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 0 [0241.343] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.343] SetErrorMode (uMode=0x0) returned 0x1 [0241.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0241.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0241.344] SetErrorMode (uMode=0x1) returned 0x0 [0241.344] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.344] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.345] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0241.345] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 0 [0241.346] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.346] SetErrorMode (uMode=0x0) returned 0x1 [0241.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0241.346] SetErrorMode (uMode=0x1) returned 0x0 [0241.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0241.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 0 [0241.348] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.348] SetErrorMode (uMode=0x0) returned 0x1 [0241.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0241.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0241.349] SetErrorMode (uMode=0x1) returned 0x0 [0241.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.351] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.351] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0241.351] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0241.352] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.352] SetErrorMode (uMode=0x0) returned 0x1 [0241.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0241.353] SetErrorMode (uMode=0x1) returned 0x0 [0241.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.353] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.354] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0241.354] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0241.354] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.355] SetErrorMode (uMode=0x0) returned 0x1 [0241.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0241.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0241.356] SetErrorMode (uMode=0x1) returned 0x0 [0241.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.356] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.357] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.357] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.358] SetErrorMode (uMode=0x0) returned 0x1 [0241.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0241.358] SetErrorMode (uMode=0x1) returned 0x0 [0241.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.359] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.359] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.360] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.360] SetErrorMode (uMode=0x0) returned 0x1 [0241.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa9 [0241.361] SetErrorMode (uMode=0x1) returned 0x0 [0241.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.361] GetFileType (hFile=0x18c) returned 0x1 [0241.361] SetErrorMode (uMode=0x0) returned 0x1 [0241.361] GetFileType (hFile=0x18c) returned 0x1 [0241.362] WriteFile (in: hFile=0x18c, lpBuffer=0x28726c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e2e8, lpOverlapped=0x0 | out: lpBuffer=0x28726c0*, lpNumberOfBytesWritten=0x27e2e8*=0x1000, lpOverlapped=0x0) returned 1 [0241.363] WriteFile (in: hFile=0x18c, lpBuffer=0x28726c0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e348, lpOverlapped=0x0 | out: lpBuffer=0x28726c0*, lpNumberOfBytesWritten=0x27e348*=0xb14, lpOverlapped=0x0) returned 1 [0241.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa4 [0241.364] SetErrorMode (uMode=0x1) returned 0x0 [0241.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.364] GetFileType (hFile=0x18c) returned 0x1 [0241.364] SetErrorMode (uMode=0x0) returned 0x1 [0241.365] GetFileType (hFile=0x18c) returned 0x1 [0241.365] WriteFile (in: hFile=0x18c, lpBuffer=0x2888910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e388, lpOverlapped=0x0 | out: lpBuffer=0x2888910*, lpNumberOfBytesWritten=0x27e388*=0x1000, lpOverlapped=0x0) returned 1 [0241.366] WriteFile (in: hFile=0x18c, lpBuffer=0x2888910*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e3e8, lpOverlapped=0x0 | out: lpBuffer=0x2888910*, lpNumberOfBytesWritten=0x27e3e8*=0xb14, lpOverlapped=0x0) returned 1 [0241.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6d [0241.367] SetErrorMode (uMode=0x1) returned 0x0 [0241.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.369] GetFileType (hFile=0x18c) returned 0x1 [0241.369] SetErrorMode (uMode=0x0) returned 0x1 [0241.369] GetFileType (hFile=0x18c) returned 0x1 [0241.369] WriteFile (in: hFile=0x18c, lpBuffer=0x289ea80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x289ea80*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0241.370] WriteFile (in: hFile=0x18c, lpBuffer=0x289ea80*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e488, lpOverlapped=0x0 | out: lpBuffer=0x289ea80*, lpNumberOfBytesWritten=0x27e488*=0xb14, lpOverlapped=0x0) returned 1 [0241.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x60 [0241.371] SetErrorMode (uMode=0x1) returned 0x0 [0241.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.372] GetFileType (hFile=0x18c) returned 0x1 [0241.372] SetErrorMode (uMode=0x0) returned 0x1 [0241.372] GetFileType (hFile=0x18c) returned 0x1 [0241.372] WriteFile (in: hFile=0x18c, lpBuffer=0x28b4bc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x28b4bc0*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0241.374] WriteFile (in: hFile=0x18c, lpBuffer=0x28b4bc0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x28b4bc0*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0241.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0241.375] SetErrorMode (uMode=0x1) returned 0x0 [0241.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.375] GetFileType (hFile=0x18c) returned 0x1 [0241.375] SetErrorMode (uMode=0x0) returned 0x1 [0241.375] GetFileType (hFile=0x18c) returned 0x1 [0241.376] WriteFile (in: hFile=0x18c, lpBuffer=0x28cacc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x28cacc0*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0241.377] WriteFile (in: hFile=0x18c, lpBuffer=0x28cacc0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28cacc0*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0241.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0241.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0241.378] SetErrorMode (uMode=0x1) returned 0x0 [0241.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0241.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 0 [0241.379] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.379] SetErrorMode (uMode=0x0) returned 0x1 [0241.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0241.380] SetErrorMode (uMode=0x1) returned 0x0 [0241.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0241.381] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 0 [0241.381] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.381] SetErrorMode (uMode=0x0) returned 0x1 [0241.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0241.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0241.382] SetErrorMode (uMode=0x1) returned 0x0 [0241.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0241.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0241.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0241.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 0 [0241.385] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.385] SetErrorMode (uMode=0x0) returned 0x1 [0241.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0241.386] SetErrorMode (uMode=0x1) returned 0x0 [0241.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0241.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0241.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0241.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 0 [0241.389] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.390] SetErrorMode (uMode=0x0) returned 0x1 [0241.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0241.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0241.390] SetErrorMode (uMode=0x1) returned 0x0 [0241.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.392] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0241.393] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 0 [0241.393] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.393] SetErrorMode (uMode=0x0) returned 0x1 [0241.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0241.393] SetErrorMode (uMode=0x1) returned 0x0 [0241.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0241.394] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 0 [0241.395] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.395] SetErrorMode (uMode=0x0) returned 0x1 [0241.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0xa0 [0241.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0xa0 [0241.395] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.396] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.396] CoTaskMemFree (pv=0xffa70) [0241.396] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa4 [0241.396] SetErrorMode (uMode=0x1) returned 0x0 [0241.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.398] SetErrorMode (uMode=0x0) returned 0x1 [0241.398] GetFileType (hFile=0x18c) returned 0x1 [0241.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0241.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0241.400] SetErrorMode (uMode=0x1) returned 0x0 [0241.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.402] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1 [0241.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1 [0241.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1 [0241.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1 [0241.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1 [0241.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1 [0241.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 0 [0241.404] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.405] SetErrorMode (uMode=0x0) returned 0x1 [0241.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0241.405] SetErrorMode (uMode=0x1) returned 0x0 [0241.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1 [0241.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1 [0241.408] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 0 [0241.408] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.409] SetErrorMode (uMode=0x0) returned 0x1 [0241.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe", lpFilePart=0x0) returned 0x9d [0241.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe", lpFilePart=0x0) returned 0x9d [0241.410] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.410] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.410] CoTaskMemFree (pv=0xffa70) [0241.410] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms", lpFilePart=0x0) returned 0xa4 [0241.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms", lpFilePart=0x0) returned 0xa4 [0241.410] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.410] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.411] CoTaskMemFree (pv=0xffa70) [0241.411] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest", lpFilePart=0x0) returned 0xa6 [0241.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest", lpFilePart=0x0) returned 0xa6 [0241.411] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.411] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.412] CoTaskMemFree (pv=0xffa70) [0241.412] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms", lpFilePart=0x0) returned 0xa9 [0241.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms", lpFilePart=0x0) returned 0xa9 [0241.412] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.412] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.412] CoTaskMemFree (pv=0xffa70) [0241.412] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest", lpFilePart=0x0) returned 0xab [0241.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest", lpFilePart=0x0) returned 0xab [0241.413] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.413] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.413] CoTaskMemFree (pv=0xffa70) [0241.413] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x9b [0241.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x9b [0241.414] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.414] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.414] CoTaskMemFree (pv=0xffa70) [0241.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x9f [0241.418] SetErrorMode (uMode=0x1) returned 0x0 [0241.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.419] SetErrorMode (uMode=0x0) returned 0x1 [0241.419] GetFileType (hFile=0x18c) returned 0x1 [0241.421] WriteFile (in: hFile=0x18c, lpBuffer=0x271abf8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x271abf8*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0241.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0241.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0241.422] SetErrorMode (uMode=0x1) returned 0x0 [0241.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1 [0241.425] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1 [0241.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1 [0241.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1 [0241.426] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 0 [0241.426] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.427] SetErrorMode (uMode=0x0) returned 0x1 [0241.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0241.428] SetErrorMode (uMode=0x1) returned 0x0 [0241.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1 [0241.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 0 [0241.430] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.431] SetErrorMode (uMode=0x0) returned 0x1 [0241.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", lpFilePart=0x0) returned 0x9b [0241.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", lpFilePart=0x0) returned 0x9b [0241.431] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.431] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.432] CoTaskMemFree (pv=0xffa70) [0241.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", lpFilePart=0x0) returned 0x9d [0241.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", lpFilePart=0x0) returned 0x9d [0241.432] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.432] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.432] CoTaskMemFree (pv=0xffa70) [0241.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", lpFilePart=0x0) returned 0x9b [0241.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", lpFilePart=0x0) returned 0x9b [0241.433] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.433] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.433] CoTaskMemFree (pv=0xffa70) [0241.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", lpFilePart=0x0) returned 0x9d [0241.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", lpFilePart=0x0) returned 0x9d [0241.434] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.434] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.434] CoTaskMemFree (pv=0xffa70) [0241.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x72 [0241.435] SetErrorMode (uMode=0x1) returned 0x0 [0241.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.436] SetErrorMode (uMode=0x0) returned 0x1 [0241.436] GetFileType (hFile=0x18c) returned 0x1 [0241.438] WriteFile (in: hFile=0x18c, lpBuffer=0x2737838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x2737838*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0241.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0241.439] SetErrorMode (uMode=0x1) returned 0x0 [0241.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.440] SetErrorMode (uMode=0x0) returned 0x1 [0241.440] GetFileType (hFile=0x18c) returned 0x1 [0241.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5b [0241.442] SetErrorMode (uMode=0x1) returned 0x0 [0241.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.443] SetErrorMode (uMode=0x0) returned 0x1 [0241.443] GetFileType (hFile=0x18c) returned 0x1 [0241.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4e [0241.444] SetErrorMode (uMode=0x1) returned 0x0 [0241.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.445] SetErrorMode (uMode=0x0) returned 0x1 [0241.445] GetFileType (hFile=0x18c) returned 0x1 [0241.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4a [0241.447] SetErrorMode (uMode=0x1) returned 0x0 [0241.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.447] SetErrorMode (uMode=0x0) returned 0x1 [0241.447] GetFileType (hFile=0x18c) returned 0x1 [0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0241.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0241.449] SetErrorMode (uMode=0x1) returned 0x0 [0241.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.449] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.450] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.450] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.450] SetErrorMode (uMode=0x0) returned 0x1 [0241.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0241.451] SetErrorMode (uMode=0x1) returned 0x0 [0241.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.452] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.452] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.452] SetErrorMode (uMode=0x0) returned 0x1 [0241.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x50 [0241.453] SetErrorMode (uMode=0x1) returned 0x0 [0241.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.453] SetErrorMode (uMode=0x0) returned 0x1 [0241.453] GetFileType (hFile=0x18c) returned 0x1 [0241.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0241.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0241.455] SetErrorMode (uMode=0x1) returned 0x0 [0241.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.456] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.456] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0241.456] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0241.456] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0241.456] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.456] SetErrorMode (uMode=0x0) returned 0x1 [0241.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0241.457] SetErrorMode (uMode=0x1) returned 0x0 [0241.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.457] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0241.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0241.458] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0241.458] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.458] SetErrorMode (uMode=0x0) returned 0x1 [0241.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0241.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0241.459] SetErrorMode (uMode=0x1) returned 0x0 [0241.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.460] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.460] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0241.460] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0241.460] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.461] SetErrorMode (uMode=0x0) returned 0x1 [0241.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0241.461] SetErrorMode (uMode=0x1) returned 0x0 [0241.461] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0241.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0241.462] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.462] SetErrorMode (uMode=0x0) returned 0x1 [0241.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0241.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0241.463] SetErrorMode (uMode=0x1) returned 0x0 [0241.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.465] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0241.466] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0241.467] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0241.467] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0241.467] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0241.467] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0241.467] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0241.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0241.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0241.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0241.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1 [0241.468] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1 [0241.469] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1 [0241.469] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1 [0241.469] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0241.469] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0241.469] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0241.470] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0241.470] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.471] SetErrorMode (uMode=0x0) returned 0x1 [0241.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0241.471] SetErrorMode (uMode=0x1) returned 0x0 [0241.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0241.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0241.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0241.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0241.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0241.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0241.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0241.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0241.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0241.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0241.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1 [0241.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1 [0241.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1 [0241.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1 [0241.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0241.476] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0241.476] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0241.476] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0241.476] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.477] SetErrorMode (uMode=0x0) returned 0x1 [0241.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x4d [0241.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x4d [0241.478] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.478] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.478] CoTaskMemFree (pv=0xffa70) [0241.478] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x4f [0241.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x4f [0241.479] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.479] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.479] CoTaskMemFree (pv=0xffa70) [0241.479] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x5d [0241.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x5d [0241.480] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.480] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.480] CoTaskMemFree (pv=0xffa70) [0241.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x65 [0241.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x65 [0241.480] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.480] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.481] CoTaskMemFree (pv=0xffa70) [0241.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x59 [0241.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x59 [0241.481] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.481] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.482] CoTaskMemFree (pv=0xffa70) [0241.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x61 [0241.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x61 [0241.482] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.482] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.483] CoTaskMemFree (pv=0xffa70) [0241.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0241.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0241.483] SetErrorMode (uMode=0x1) returned 0x0 [0241.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.485] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.485] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.485] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.485] SetErrorMode (uMode=0x0) returned 0x1 [0241.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0241.486] SetErrorMode (uMode=0x1) returned 0x0 [0241.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.486] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.487] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.487] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.487] SetErrorMode (uMode=0x0) returned 0x1 [0241.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x75 [0241.488] SetErrorMode (uMode=0x1) returned 0x0 [0241.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.488] SetErrorMode (uMode=0x0) returned 0x1 [0241.488] GetFileType (hFile=0x18c) returned 0x1 [0241.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0241.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0241.490] SetErrorMode (uMode=0x1) returned 0x0 [0241.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0241.504] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0241.505] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.505] SetErrorMode (uMode=0x0) returned 0x1 [0241.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0241.506] SetErrorMode (uMode=0x1) returned 0x0 [0241.506] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.506] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0241.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0241.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0241.507] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0241.507] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.507] SetErrorMode (uMode=0x0) returned 0x1 [0241.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x55 [0241.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x55 [0241.508] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.508] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.508] CoTaskMemFree (pv=0xffa70) [0241.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.509] SetErrorMode (uMode=0x1) returned 0x0 [0241.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0241.510] SetErrorMode (uMode=0x0) returned 0x1 [0241.510] GetFileType (hFile=0x18c) returned 0x1 [0241.510] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x28 [0241.510] ReadFile (in: hFile=0x18c, lpBuffer=0x27d7608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x27d7608*, lpNumberOfBytesRead=0x27e508*=0x28, lpOverlapped=0x0) returned 1 [0241.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.511] SetErrorMode (uMode=0x1) returned 0x0 [0241.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0241.512] SetErrorMode (uMode=0x0) returned 0x1 [0241.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.648] SetErrorMode (uMode=0x1) returned 0x0 [0241.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0241.653] SetErrorMode (uMode=0x0) returned 0x1 [0241.653] GetFileType (hFile=0x18c) returned 0x1 [0241.655] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\xSsj5*zmnBiNRP22_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\xSsj5*zmnBiNRP22_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x74 [0241.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x59 [0241.666] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 1 [0241.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0241.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0241.668] SetErrorMode (uMode=0x1) returned 0x0 [0241.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.670] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.670] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.671] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.671] SetErrorMode (uMode=0x0) returned 0x1 [0241.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0241.671] SetErrorMode (uMode=0x1) returned 0x0 [0241.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.671] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.672] SetErrorMode (uMode=0x0) returned 0x1 [0241.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6e [0241.672] SetErrorMode (uMode=0x1) returned 0x0 [0241.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.673] GetFileType (hFile=0x18c) returned 0x1 [0241.673] SetErrorMode (uMode=0x0) returned 0x1 [0241.673] GetFileType (hFile=0x18c) returned 0x1 [0241.674] WriteFile (in: hFile=0x18c, lpBuffer=0x28503d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x28503d0*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0241.676] WriteFile (in: hFile=0x18c, lpBuffer=0x28503d0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e488, lpOverlapped=0x0 | out: lpBuffer=0x28503d0*, lpNumberOfBytesWritten=0x27e488*=0xb14, lpOverlapped=0x0) returned 1 [0241.676] CloseHandle (hObject=0x18c) returned 1 [0241.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x66 [0241.678] SetErrorMode (uMode=0x1) returned 0x0 [0241.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0241.678] GetFileType (hFile=0x18c) returned 0x1 [0241.678] SetErrorMode (uMode=0x0) returned 0x1 [0241.678] GetFileType (hFile=0x18c) returned 0x1 [0241.680] WriteFile (in: hFile=0x18c, lpBuffer=0x2866520*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2866520*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0241.684] WriteFile (in: hFile=0x18c, lpBuffer=0x2866520*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2866520*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0241.686] CloseHandle (hObject=0x18c) returned 1 [0241.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0241.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0241.686] SetErrorMode (uMode=0x1) returned 0x0 [0241.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0241.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0241.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0241.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0241.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0241.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0241.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0 [0241.697] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.697] SetErrorMode (uMode=0x0) returned 0x1 [0241.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0241.698] SetErrorMode (uMode=0x1) returned 0x0 [0241.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0241.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0241.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0241.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0241.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0241.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0241.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0241.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1 [0241.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1 [0241.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0241.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0241.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0241.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0241.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0241.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0241.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0241.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1 [0241.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1 [0241.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0241.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0241.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0241.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0241.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0241.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0241.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0241.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0241.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0241.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0241.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0241.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0241.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0241.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0241.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0241.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0241.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0241.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0241.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0241.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0241.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0241.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0241.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0241.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0241.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0241.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0241.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0 [0241.716] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0241.717] SetErrorMode (uMode=0x0) returned 0x1 [0241.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x53 [0241.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x53 [0241.717] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.717] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.718] CoTaskMemFree (pv=0xffa70) [0241.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x5b [0241.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x5b [0241.718] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.718] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.719] CoTaskMemFree (pv=0xffa70) [0241.719] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x5b [0241.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x5b [0241.719] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.719] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.719] CoTaskMemFree (pv=0xffa70) [0241.719] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x58 [0241.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x58 [0241.720] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.720] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.720] CoTaskMemFree (pv=0xffa70) [0241.720] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x54 [0241.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x54 [0241.721] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.721] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.721] CoTaskMemFree (pv=0xffa70) [0241.721] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x5c [0241.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x5c [0241.721] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.721] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.722] CoTaskMemFree (pv=0xffa70) [0241.722] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x5e [0241.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x5e [0241.722] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.722] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.723] CoTaskMemFree (pv=0xffa70) [0241.723] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x53 [0241.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x53 [0241.723] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.723] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.723] CoTaskMemFree (pv=0xffa70) [0241.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x62 [0241.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x62 [0241.724] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.724] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.724] CoTaskMemFree (pv=0xffa70) [0241.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x5b [0241.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x5b [0241.725] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.725] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.725] CoTaskMemFree (pv=0xffa70) [0241.725] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0241.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0241.726] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.726] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.726] CoTaskMemFree (pv=0xffa70) [0241.726] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x5e [0241.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x5e [0241.727] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.727] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.727] CoTaskMemFree (pv=0xffa70) [0241.727] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x64 [0241.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x64 [0241.728] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.728] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.728] CoTaskMemFree (pv=0xffa70) [0241.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x6c [0241.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x6c [0241.729] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.729] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.729] CoTaskMemFree (pv=0xffa70) [0241.729] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x64 [0241.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x64 [0241.730] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.730] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.730] CoTaskMemFree (pv=0xffa70) [0241.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x5e [0241.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x5e [0241.731] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.731] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.732] CoTaskMemFree (pv=0xffa70) [0241.732] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x66 [0241.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x66 [0241.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.732] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.733] CoTaskMemFree (pv=0xffa70) [0241.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x57 [0241.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x57 [0241.733] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0241.733] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0241.734] CoTaskMemFree (pv=0xffa70) [0241.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0241.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x5f [0241.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x27e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x5f [0241.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x5f [0241.735] SetErrorMode (uMode=0x1) returned 0x0 [0241.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0241.736] GetFileType (hFile=0x18c) returned 0x1 [0241.736] SetErrorMode (uMode=0x0) returned 0x1 [0241.736] GetFileType (hFile=0x18c) returned 0x1 [0241.736] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e628 | out: lpFileSizeHigh=0x27e628*=0x0) returned 0x4000 [0241.736] ReadFile (in: hFile=0x18c, lpBuffer=0x287f9a8, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x27e508, lpOverlapped=0x0 | out: lpBuffer=0x287f9a8*, lpNumberOfBytesRead=0x27e508*=0x4000, lpOverlapped=0x0) returned 1 [0241.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x27e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x5f [0241.738] SetErrorMode (uMode=0x1) returned 0x0 [0241.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x27e510 | out: lpFileInformation=0x27e510*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0241.738] SetErrorMode (uMode=0x0) returned 0x1 [0241.955] SetErrorMode (uMode=0x1) returned 0x0 [0241.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0241.957] GetFileType (hFile=0x18c) returned 0x1 [0241.957] SetErrorMode (uMode=0x0) returned 0x1 [0241.957] GetFileType (hFile=0x18c) returned 0x1 [0241.957] WriteFile (in: hFile=0x18c, lpBuffer=0x28f8e38*, nNumberOfBytesToWrite=0x4110, lpNumberOfBytesWritten=0x27e588, lpOverlapped=0x0 | out: lpBuffer=0x28f8e38*, lpNumberOfBytesWritten=0x27e588*=0x4110, lpOverlapped=0x0) returned 1 [0241.959] SetErrorMode (uMode=0x1) returned 0x0 [0241.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x27e4b0 | out: lpFileInformation=0x27e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c9c790, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x4110)) returned 1 [0241.959] SetErrorMode (uMode=0x0) returned 0x1 [0241.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Nw2fIEpLjTHuJyO0_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\nw2fiepljthujyo0_encrypted_by.whiterose")) returned 1 [0242.059] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.059] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.060] CoTaskMemFree (pv=0xfe030) [0242.060] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.060] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.060] CoTaskMemFree (pv=0xfe030) [0242.061] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.061] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.061] CoTaskMemFree (pv=0xfe030) [0242.061] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.061] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.062] CoTaskMemFree (pv=0xfe030) [0242.062] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.062] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.062] CoTaskMemFree (pv=0xfe030) [0242.062] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.063] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.063] CoTaskMemFree (pv=0xfe030) [0242.063] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.063] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.064] CoTaskMemFree (pv=0xfe030) [0242.064] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.064] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.064] CoTaskMemFree (pv=0xfe030) [0242.064] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.064] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.065] CoTaskMemFree (pv=0xfe030) [0242.065] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.065] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.065] CoTaskMemFree (pv=0xfe030) [0242.066] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.066] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.066] CoTaskMemFree (pv=0xfe030) [0242.066] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.066] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.067] CoTaskMemFree (pv=0xfe030) [0242.067] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.067] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.067] CoTaskMemFree (pv=0xfe030) [0242.068] SetErrorMode (uMode=0x1) returned 0x0 [0242.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.069] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.070] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0242.070] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0242.071] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0242.071] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0242.071] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0242.072] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0242.072] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.072] SetErrorMode (uMode=0x0) returned 0x1 [0242.073] SetErrorMode (uMode=0x1) returned 0x0 [0242.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.074] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.074] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0242.074] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0242.075] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0242.075] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0242.075] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0242.076] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0242.076] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.076] SetErrorMode (uMode=0x0) returned 0x1 [0242.077] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.077] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.077] CoTaskMemFree (pv=0xfe030) [0242.077] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.077] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.078] CoTaskMemFree (pv=0xfe030) [0242.078] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.078] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.078] CoTaskMemFree (pv=0xfe030) [0242.079] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.079] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.079] CoTaskMemFree (pv=0xfe030) [0242.079] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.079] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.080] CoTaskMemFree (pv=0xfe030) [0242.080] SetErrorMode (uMode=0x1) returned 0x0 [0242.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0242.082] GetFileType (hFile=0x18c) returned 0x1 [0242.082] SetErrorMode (uMode=0x0) returned 0x1 [0242.082] GetFileType (hFile=0x18c) returned 0x1 [0242.133] SetErrorMode (uMode=0x1) returned 0x0 [0242.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0242.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0242.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0242.137] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0242.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0242.138] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0242.139] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.139] SetErrorMode (uMode=0x0) returned 0x1 [0242.140] SetErrorMode (uMode=0x1) returned 0x0 [0242.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.141] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0242.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0242.142] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0242.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0242.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0242.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0242.143] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.144] SetErrorMode (uMode=0x0) returned 0x1 [0242.144] SetErrorMode (uMode=0x1) returned 0x0 [0242.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.146] SetErrorMode (uMode=0x0) returned 0x1 [0242.146] GetFileType (hFile=0x18c) returned 0x1 [0242.146] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x0 [0242.147] SetErrorMode (uMode=0x1) returned 0x0 [0242.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.147] SetErrorMode (uMode=0x0) returned 0x1 [0242.242] SetErrorMode (uMode=0x1) returned 0x0 [0242.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.243] SetErrorMode (uMode=0x0) returned 0x1 [0242.243] GetFileType (hFile=0x18c) returned 0x1 [0242.244] SetErrorMode (uMode=0x1) returned 0x0 [0242.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e410 | out: lpFileInformation=0x27e410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f4a050, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0242.244] SetErrorMode (uMode=0x0) returned 0x1 [0242.244] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\nm8HzASWqe6G0fi6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\nm8hzaswqe6g0fi6_encrypted_by.whiterose")) returned 1 [0242.340] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.340] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.340] CoTaskMemFree (pv=0xffa70) [0242.340] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.340] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.341] CoTaskMemFree (pv=0xffa70) [0242.341] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.341] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.341] CoTaskMemFree (pv=0xffa70) [0242.341] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.341] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.342] CoTaskMemFree (pv=0xffa70) [0242.342] SetErrorMode (uMode=0x1) returned 0x0 [0242.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0242.343] SetErrorMode (uMode=0x0) returned 0x1 [0242.343] GetFileType (hFile=0x18c) returned 0x1 [0242.344] SetErrorMode (uMode=0x1) returned 0x0 [0242.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0242.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0242.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0242.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0242.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0242.348] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0242.349] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.349] SetErrorMode (uMode=0x0) returned 0x1 [0242.350] SetErrorMode (uMode=0x1) returned 0x0 [0242.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.351] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.351] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0242.351] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0242.352] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0242.352] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0242.352] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0242.352] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0242.352] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.353] SetErrorMode (uMode=0x0) returned 0x1 [0242.354] SetErrorMode (uMode=0x1) returned 0x0 [0242.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.362] SetErrorMode (uMode=0x0) returned 0x1 [0242.362] GetFileType (hFile=0x18c) returned 0x1 [0242.362] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x156 [0242.363] ReadFile (in: hFile=0x18c, lpBuffer=0x279d6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e468, lpOverlapped=0x0 | out: lpBuffer=0x279d6c8*, lpNumberOfBytesRead=0x27e468*=0x156, lpOverlapped=0x0) returned 1 [0242.364] SetErrorMode (uMode=0x1) returned 0x0 [0242.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0242.364] SetErrorMode (uMode=0x0) returned 0x1 [0242.452] SetErrorMode (uMode=0x1) returned 0x0 [0242.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.454] SetErrorMode (uMode=0x0) returned 0x1 [0242.454] GetFileType (hFile=0x18c) returned 0x1 [0242.459] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 1 [0242.461] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.461] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.462] CoTaskMemFree (pv=0xffa70) [0242.462] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.462] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.462] CoTaskMemFree (pv=0xffa70) [0242.462] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.462] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.462] CoTaskMemFree (pv=0xffa70) [0242.463] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0242.463] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.463] CoTaskMemFree (pv=0xffa70) [0242.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x75 [0242.464] SetErrorMode (uMode=0x1) returned 0x0 [0242.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0242.464] GetFileType (hFile=0x18c) returned 0x1 [0242.464] SetErrorMode (uMode=0x0) returned 0x1 [0242.464] GetFileType (hFile=0x18c) returned 0x1 [0242.466] WriteFile (in: hFile=0x18c, lpBuffer=0x28109d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x28109d8*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0242.467] WriteFile (in: hFile=0x18c, lpBuffer=0x28109d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e488, lpOverlapped=0x0 | out: lpBuffer=0x28109d8*, lpNumberOfBytesWritten=0x27e488*=0xb14, lpOverlapped=0x0) returned 1 [0242.467] CloseHandle (hObject=0x18c) returned 1 [0242.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0242.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0242.468] SetErrorMode (uMode=0x1) returned 0x0 [0242.468] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.470] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0242.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0242.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0242.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0242.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0242.471] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0242.471] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.472] SetErrorMode (uMode=0x0) returned 0x1 [0242.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0242.472] SetErrorMode (uMode=0x1) returned 0x0 [0242.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0242.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0242.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0242.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0242.473] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0242.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0242.474] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.474] SetErrorMode (uMode=0x0) returned 0x1 [0242.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x66 [0242.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x27e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x66 [0242.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x66 [0242.475] SetErrorMode (uMode=0x1) returned 0x0 [0242.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.477] GetFileType (hFile=0x18c) returned 0x1 [0242.477] SetErrorMode (uMode=0x0) returned 0x1 [0242.477] GetFileType (hFile=0x18c) returned 0x1 [0242.477] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x4ad [0242.477] ReadFile (in: hFile=0x18c, lpBuffer=0x2819558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e468, lpOverlapped=0x0 | out: lpBuffer=0x2819558*, lpNumberOfBytesRead=0x27e468*=0x4ad, lpOverlapped=0x0) returned 1 [0242.478] CloseHandle (hObject=0x18c) returned 1 [0242.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x27e200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x66 [0242.479] SetErrorMode (uMode=0x1) returned 0x0 [0242.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1 [0242.479] SetErrorMode (uMode=0x0) returned 0x1 [0242.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x27df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x66 [0242.672] SetErrorMode (uMode=0x1) returned 0x0 [0242.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.674] GetFileType (hFile=0x18c) returned 0x1 [0242.674] SetErrorMode (uMode=0x0) returned 0x1 [0242.674] GetFileType (hFile=0x18c) returned 0x1 [0242.674] WriteFile (in: hFile=0x18c, lpBuffer=0x2877a18*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x27e408, lpOverlapped=0x0 | out: lpBuffer=0x2877a18*, lpNumberOfBytesWritten=0x27e408*=0x5b0, lpOverlapped=0x0) returned 1 [0242.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x27e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x66 [0242.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\JBnIEdQu2bJKCUTV_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\JBnIEdQu2bJKCUTV_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x83 [0242.676] SetErrorMode (uMode=0x1) returned 0x0 [0242.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e410 | out: lpFileInformation=0x27e410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x613746d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0242.676] SetErrorMode (uMode=0x0) returned 0x1 [0242.676] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\JBnIEdQu2bJKCUTV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\jbniedqu2bjkcutv_encrypted_by.whiterose")) returned 1 [0242.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x63 [0242.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x63 [0242.778] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.778] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.779] CoTaskMemFree (pv=0xfe030) [0242.779] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0242.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x60 [0242.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x60 [0242.779] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.779] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.780] CoTaskMemFree (pv=0xfe030) [0242.780] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0242.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x5f [0242.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x5f [0242.780] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.780] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.781] CoTaskMemFree (pv=0xfe030) [0242.781] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0242.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0242.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0242.781] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0242.781] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0242.782] CoTaskMemFree (pv=0xfe030) [0242.782] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0242.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x75 [0242.782] SetErrorMode (uMode=0x1) returned 0x0 [0242.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0242.783] GetFileType (hFile=0x18c) returned 0x1 [0242.783] SetErrorMode (uMode=0x0) returned 0x1 [0242.783] GetFileType (hFile=0x18c) returned 0x1 [0242.785] WriteFile (in: hFile=0x18c, lpBuffer=0x288daa8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x288daa8*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0242.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0242.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0242.787] SetErrorMode (uMode=0x1) returned 0x0 [0242.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0242.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0242.791] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0242.791] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0242.791] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1 [0242.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0242.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0 [0242.794] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.795] SetErrorMode (uMode=0x0) returned 0x1 [0242.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0242.795] SetErrorMode (uMode=0x1) returned 0x0 [0242.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0242.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0242.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0242.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0242.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1 [0242.798] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0242.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0242.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0242.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0242.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0 [0242.800] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.801] SetErrorMode (uMode=0x0) returned 0x1 [0242.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0242.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0242.801] SetErrorMode (uMode=0x1) returned 0x0 [0242.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0242.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0242.806] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.806] SetErrorMode (uMode=0x0) returned 0x1 [0242.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0242.806] SetErrorMode (uMode=0x1) returned 0x0 [0242.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0242.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0242.808] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.808] SetErrorMode (uMode=0x0) returned 0x1 [0242.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0242.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0242.809] SetErrorMode (uMode=0x1) returned 0x0 [0242.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.811] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0242.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0242.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0242.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0242.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0242.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0242.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0242.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0242.814] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.815] SetErrorMode (uMode=0x0) returned 0x1 [0242.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0242.815] SetErrorMode (uMode=0x1) returned 0x0 [0242.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0242.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0242.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0242.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0242.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0242.818] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0242.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0242.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0242.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0242.820] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0242.821] SetErrorMode (uMode=0x0) returned 0x1 [0242.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0242.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0242.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0242.821] SetErrorMode (uMode=0x1) returned 0x0 [0242.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.823] GetFileType (hFile=0x18c) returned 0x1 [0242.823] SetErrorMode (uMode=0x0) returned 0x1 [0242.823] GetFileType (hFile=0x18c) returned 0x1 [0242.823] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xd2c [0242.823] ReadFile (in: hFile=0x18c, lpBuffer=0x289ee40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x289ee40*, lpNumberOfBytesRead=0x27e328*=0xd2c, lpOverlapped=0x0) returned 1 [0242.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0242.825] SetErrorMode (uMode=0x1) returned 0x0 [0242.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1 [0242.825] SetErrorMode (uMode=0x0) returned 0x1 [0242.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0242.888] SetErrorMode (uMode=0x1) returned 0x0 [0242.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.889] GetFileType (hFile=0x18c) returned 0x1 [0242.889] SetErrorMode (uMode=0x0) returned 0x1 [0242.889] GetFileType (hFile=0x18c) returned 0x1 [0242.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0242.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\Ve9VvYwzrFqxqlZ9_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\Ve9VvYwzrFqxqlZ9_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xa5 [0242.891] SetErrorMode (uMode=0x1) returned 0x0 [0242.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61589a10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0242.891] SetErrorMode (uMode=0x0) returned 0x1 [0242.891] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\Ve9VvYwzrFqxqlZ9_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ve9vvywzrfqxqlz9_encrypted_by.whiterose")) returned 1 [0242.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0242.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0242.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0242.995] SetErrorMode (uMode=0x1) returned 0x0 [0242.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0242.996] GetFileType (hFile=0x18c) returned 0x1 [0242.996] SetErrorMode (uMode=0x0) returned 0x1 [0242.996] GetFileType (hFile=0x18c) returned 0x1 [0242.996] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xa0 [0242.996] ReadFile (in: hFile=0x18c, lpBuffer=0x2906170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x2906170*, lpNumberOfBytesRead=0x27e328*=0xa0, lpOverlapped=0x0) returned 1 [0242.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0242.997] SetErrorMode (uMode=0x1) returned 0x0 [0242.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0242.997] SetErrorMode (uMode=0x0) returned 0x1 [0243.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0243.062] SetErrorMode (uMode=0x1) returned 0x0 [0243.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0243.063] GetFileType (hFile=0x18c) returned 0x1 [0243.063] SetErrorMode (uMode=0x0) returned 0x1 [0243.063] GetFileType (hFile=0x18c) returned 0x1 [0243.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0243.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\C8QQWnjnzCbwYDSV_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\C8QQWnjnzCbwYDSV_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xa5 [0243.065] SetErrorMode (uMode=0x1) returned 0x0 [0243.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6172c930, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0243.065] SetErrorMode (uMode=0x0) returned 0x1 [0243.065] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\C8QQWnjnzCbwYDSV_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\c8qqwnjnzcbwydsv_encrypted_by.whiterose")) returned 1 [0243.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0243.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0243.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0243.187] SetErrorMode (uMode=0x1) returned 0x0 [0243.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0243.188] GetFileType (hFile=0x18c) returned 0x1 [0243.188] SetErrorMode (uMode=0x0) returned 0x1 [0243.188] GetFileType (hFile=0x18c) returned 0x1 [0243.188] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5c [0243.188] ReadFile (in: hFile=0x18c, lpBuffer=0x2764920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x2764920*, lpNumberOfBytesRead=0x27e328*=0x5c, lpOverlapped=0x0) returned 1 [0243.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0243.191] SetErrorMode (uMode=0x1) returned 0x0 [0243.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0243.191] SetErrorMode (uMode=0x0) returned 0x1 [0243.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0243.263] SetErrorMode (uMode=0x1) returned 0x0 [0243.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0243.264] GetFileType (hFile=0x18c) returned 0x1 [0243.264] SetErrorMode (uMode=0x0) returned 0x1 [0243.264] GetFileType (hFile=0x18c) returned 0x1 [0243.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0243.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\PgfYPGyHQXHidrtk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\PgfYPGyHQXHidrtk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xa5 [0243.266] SetErrorMode (uMode=0x1) returned 0x0 [0243.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6191bb10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0243.266] SetErrorMode (uMode=0x0) returned 0x1 [0243.266] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\PgfYPGyHQXHidrtk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\pgfypgyhqxhidrtk_encrypted_by.whiterose")) returned 1 [0243.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0243.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0243.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0243.370] SetErrorMode (uMode=0x1) returned 0x0 [0243.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0243.371] GetFileType (hFile=0x18c) returned 0x1 [0243.371] SetErrorMode (uMode=0x0) returned 0x1 [0243.371] GetFileType (hFile=0x18c) returned 0x1 [0243.371] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5f [0243.371] ReadFile (in: hFile=0x18c, lpBuffer=0x27c3a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x27c3a90*, lpNumberOfBytesRead=0x27e328*=0x5f, lpOverlapped=0x0) returned 1 [0243.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0243.373] SetErrorMode (uMode=0x1) returned 0x0 [0243.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0243.373] SetErrorMode (uMode=0x0) returned 0x1 [0243.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0243.439] SetErrorMode (uMode=0x1) returned 0x0 [0243.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0243.441] GetFileType (hFile=0x18c) returned 0x1 [0243.441] SetErrorMode (uMode=0x0) returned 0x1 [0243.441] GetFileType (hFile=0x18c) returned 0x1 [0243.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0243.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\w0YSf7kvYUsiLJm8_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\w0YSf7kvYUsiLJm8_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xa5 [0243.442] SetErrorMode (uMode=0x1) returned 0x0 [0243.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61abea30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0243.442] SetErrorMode (uMode=0x0) returned 0x1 [0243.442] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\w0YSf7kvYUsiLJm8_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\w0ysf7kvyusiljm8_encrypted_by.whiterose")) returned 1 [0243.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x8b [0243.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x8b [0243.541] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.541] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.542] CoTaskMemFree (pv=0xfe030) [0243.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0243.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0243.542] SetErrorMode (uMode=0x1) returned 0x0 [0243.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0243.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0243.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0243.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0243.546] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0243.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0243.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0243.547] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0243.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0243.548] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0243.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0243.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0243.549] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0243.550] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0243.550] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0243.550] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0243.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0243.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0243.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0243.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0243.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0243.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0243.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0243.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0243.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0243.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0243.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0243.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0243.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0243.555] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0243.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0243.556] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0243.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0243.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0243.557] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0243.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0243.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0243.558] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0243.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0243.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0243.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0243.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0243.560] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0243.561] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.561] SetErrorMode (uMode=0x0) returned 0x1 [0243.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0243.562] SetErrorMode (uMode=0x1) returned 0x0 [0243.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.563] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.563] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0243.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0243.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0243.564] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0243.565] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0243.565] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0243.565] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0243.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0243.566] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0243.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0243.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0243.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0243.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0243.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0243.568] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0243.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0243.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0243.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0243.570] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0243.570] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0243.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0243.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0243.571] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0243.572] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0243.572] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0243.573] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0243.573] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0243.573] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0243.574] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0243.574] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0243.574] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0243.575] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0243.575] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0243.575] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0243.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0243.576] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0243.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0243.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0243.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0243.578] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0243.578] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0243.578] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0243.579] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0243.579] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.580] SetErrorMode (uMode=0x0) returned 0x1 [0243.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0243.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0243.580] SetErrorMode (uMode=0x1) returned 0x0 [0243.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.582] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.583] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.583] SetErrorMode (uMode=0x0) returned 0x1 [0243.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0243.583] SetErrorMode (uMode=0x1) returned 0x0 [0243.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.584] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.584] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.585] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.585] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.585] SetErrorMode (uMode=0x0) returned 0x1 [0243.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x97 [0243.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x97 [0243.585] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.585] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.586] CoTaskMemFree (pv=0xfe030) [0243.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.586] SetErrorMode (uMode=0x1) returned 0x0 [0243.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.587] GetFileType (hFile=0x18c) returned 0x1 [0243.587] SetErrorMode (uMode=0x0) returned 0x1 [0243.587] GetFileType (hFile=0x18c) returned 0x1 [0243.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0243.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0243.589] SetErrorMode (uMode=0x1) returned 0x0 [0243.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.590] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.590] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.591] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.591] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.591] SetErrorMode (uMode=0x0) returned 0x1 [0243.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0243.591] SetErrorMode (uMode=0x1) returned 0x0 [0243.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.592] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.592] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.593] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.593] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.593] SetErrorMode (uMode=0x0) returned 0x1 [0243.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x97 [0243.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x97 [0243.594] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.594] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.594] CoTaskMemFree (pv=0xfe030) [0243.594] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.595] SetErrorMode (uMode=0x1) returned 0x0 [0243.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.596] GetFileType (hFile=0x18c) returned 0x1 [0243.596] SetErrorMode (uMode=0x0) returned 0x1 [0243.596] GetFileType (hFile=0x18c) returned 0x1 [0243.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0243.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0243.598] SetErrorMode (uMode=0x1) returned 0x0 [0243.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.599] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.600] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.600] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.600] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.601] SetErrorMode (uMode=0x0) returned 0x1 [0243.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0243.601] SetErrorMode (uMode=0x1) returned 0x0 [0243.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.602] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.602] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.603] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.603] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.603] SetErrorMode (uMode=0x0) returned 0x1 [0243.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x97 [0243.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x97 [0243.604] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.605] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.605] CoTaskMemFree (pv=0xfe030) [0243.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.606] SetErrorMode (uMode=0x1) returned 0x0 [0243.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.606] GetFileType (hFile=0x18c) returned 0x1 [0243.606] SetErrorMode (uMode=0x0) returned 0x1 [0243.606] GetFileType (hFile=0x18c) returned 0x1 [0243.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0243.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0243.608] SetErrorMode (uMode=0x1) returned 0x0 [0243.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.609] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.609] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.610] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.610] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.610] SetErrorMode (uMode=0x0) returned 0x1 [0243.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0243.611] SetErrorMode (uMode=0x1) returned 0x0 [0243.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.612] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.612] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.612] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.613] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.613] SetErrorMode (uMode=0x0) returned 0x1 [0243.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x97 [0243.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x97 [0243.614] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.614] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.614] CoTaskMemFree (pv=0xfe030) [0243.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.615] SetErrorMode (uMode=0x1) returned 0x0 [0243.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.616] GetFileType (hFile=0x18c) returned 0x1 [0243.616] SetErrorMode (uMode=0x0) returned 0x1 [0243.616] GetFileType (hFile=0x18c) returned 0x1 [0243.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0243.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0243.618] SetErrorMode (uMode=0x1) returned 0x0 [0243.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.619] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.620] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.620] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.620] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.620] SetErrorMode (uMode=0x0) returned 0x1 [0243.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0243.621] SetErrorMode (uMode=0x1) returned 0x0 [0243.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.622] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.622] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.623] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.623] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.623] SetErrorMode (uMode=0x0) returned 0x1 [0243.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x97 [0243.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x97 [0243.624] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.624] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.625] CoTaskMemFree (pv=0xfe030) [0243.625] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.625] SetErrorMode (uMode=0x1) returned 0x0 [0243.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.626] GetFileType (hFile=0x18c) returned 0x1 [0243.626] SetErrorMode (uMode=0x0) returned 0x1 [0243.626] GetFileType (hFile=0x18c) returned 0x1 [0243.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0243.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0243.628] SetErrorMode (uMode=0x1) returned 0x0 [0243.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.629] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.629] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.630] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.630] SetErrorMode (uMode=0x0) returned 0x1 [0243.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0243.631] SetErrorMode (uMode=0x1) returned 0x0 [0243.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.631] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.632] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.633] SetErrorMode (uMode=0x0) returned 0x1 [0243.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x97 [0243.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x97 [0243.634] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.634] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.634] CoTaskMemFree (pv=0xfe030) [0243.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.635] SetErrorMode (uMode=0x1) returned 0x0 [0243.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.636] GetFileType (hFile=0x18c) returned 0x1 [0243.636] SetErrorMode (uMode=0x0) returned 0x1 [0243.636] GetFileType (hFile=0x18c) returned 0x1 [0243.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0243.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0243.638] SetErrorMode (uMode=0x1) returned 0x0 [0243.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.639] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.640] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.640] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.640] SetErrorMode (uMode=0x0) returned 0x1 [0243.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0243.641] SetErrorMode (uMode=0x1) returned 0x0 [0243.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.642] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.643] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.643] SetErrorMode (uMode=0x0) returned 0x1 [0243.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x97 [0243.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x97 [0243.644] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.644] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.645] CoTaskMemFree (pv=0xfe030) [0243.645] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.645] SetErrorMode (uMode=0x1) returned 0x0 [0243.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.646] GetFileType (hFile=0x18c) returned 0x1 [0243.646] SetErrorMode (uMode=0x0) returned 0x1 [0243.646] GetFileType (hFile=0x18c) returned 0x1 [0243.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0243.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0243.648] SetErrorMode (uMode=0x1) returned 0x0 [0243.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.649] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.649] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.650] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.650] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.650] SetErrorMode (uMode=0x0) returned 0x1 [0243.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0243.651] SetErrorMode (uMode=0x1) returned 0x0 [0243.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.652] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.652] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.653] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.653] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.653] SetErrorMode (uMode=0x0) returned 0x1 [0243.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x9a [0243.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x9a [0243.654] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.654] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.655] CoTaskMemFree (pv=0xfe030) [0243.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.655] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0243.655] SetErrorMode (uMode=0x1) returned 0x0 [0243.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.656] GetFileType (hFile=0x18c) returned 0x1 [0243.656] SetErrorMode (uMode=0x0) returned 0x1 [0243.656] GetFileType (hFile=0x18c) returned 0x1 [0243.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0243.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0243.658] SetErrorMode (uMode=0x1) returned 0x0 [0243.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.659] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.660] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.661] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.661] SetErrorMode (uMode=0x0) returned 0x1 [0243.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0243.661] SetErrorMode (uMode=0x1) returned 0x0 [0243.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.662] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.663] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.663] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.663] SetErrorMode (uMode=0x0) returned 0x1 [0243.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x9a [0243.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x9a [0243.664] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.664] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.665] CoTaskMemFree (pv=0xfe030) [0243.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0243.666] SetErrorMode (uMode=0x1) returned 0x0 [0243.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.666] SetErrorMode (uMode=0x0) returned 0x1 [0243.667] GetFileType (hFile=0x18c) returned 0x1 [0243.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0243.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0243.668] SetErrorMode (uMode=0x1) returned 0x0 [0243.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.669] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.670] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.670] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.670] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.670] SetErrorMode (uMode=0x0) returned 0x1 [0243.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0243.671] SetErrorMode (uMode=0x1) returned 0x0 [0243.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.671] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.672] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.672] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.672] SetErrorMode (uMode=0x0) returned 0x1 [0243.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x97 [0243.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x97 [0243.673] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.673] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.673] CoTaskMemFree (pv=0xfe030) [0243.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.677] SetErrorMode (uMode=0x1) returned 0x0 [0243.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.678] SetErrorMode (uMode=0x0) returned 0x1 [0243.678] GetFileType (hFile=0x18c) returned 0x1 [0243.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0243.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0243.689] SetErrorMode (uMode=0x1) returned 0x0 [0243.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.690] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.690] SetErrorMode (uMode=0x0) returned 0x1 [0243.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0243.691] SetErrorMode (uMode=0x1) returned 0x0 [0243.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.692] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.692] SetErrorMode (uMode=0x0) returned 0x1 [0243.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x9b [0243.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x9b [0243.693] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.693] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.693] CoTaskMemFree (pv=0xfe030) [0243.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0243.693] SetErrorMode (uMode=0x1) returned 0x0 [0243.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.694] SetErrorMode (uMode=0x0) returned 0x1 [0243.694] GetFileType (hFile=0x18c) returned 0x1 [0243.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0243.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0243.696] SetErrorMode (uMode=0x1) returned 0x0 [0243.696] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.699] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.699] SetErrorMode (uMode=0x0) returned 0x1 [0243.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0243.699] SetErrorMode (uMode=0x1) returned 0x0 [0243.699] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.700] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.700] SetErrorMode (uMode=0x0) returned 0x1 [0243.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x97 [0243.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x97 [0243.701] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.701] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.701] CoTaskMemFree (pv=0xfe030) [0243.701] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.702] SetErrorMode (uMode=0x1) returned 0x0 [0243.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.703] SetErrorMode (uMode=0x0) returned 0x1 [0243.703] GetFileType (hFile=0x18c) returned 0x1 [0243.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0243.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0243.704] SetErrorMode (uMode=0x1) returned 0x0 [0243.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.706] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.706] SetErrorMode (uMode=0x0) returned 0x1 [0243.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0243.706] SetErrorMode (uMode=0x1) returned 0x0 [0243.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.707] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.708] SetErrorMode (uMode=0x0) returned 0x1 [0243.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x97 [0243.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x97 [0243.708] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.708] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.709] CoTaskMemFree (pv=0xfe030) [0243.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.709] SetErrorMode (uMode=0x1) returned 0x0 [0243.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.710] SetErrorMode (uMode=0x0) returned 0x1 [0243.710] GetFileType (hFile=0x18c) returned 0x1 [0243.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0243.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0243.711] SetErrorMode (uMode=0x1) returned 0x0 [0243.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.733] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.733] SetErrorMode (uMode=0x0) returned 0x1 [0243.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0243.734] SetErrorMode (uMode=0x1) returned 0x0 [0243.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.736] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.736] SetErrorMode (uMode=0x0) returned 0x1 [0243.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x98 [0243.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x98 [0243.737] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.737] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.737] CoTaskMemFree (pv=0xfe030) [0243.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa4 [0243.739] SetErrorMode (uMode=0x1) returned 0x0 [0243.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.740] SetErrorMode (uMode=0x0) returned 0x1 [0243.740] GetFileType (hFile=0x18c) returned 0x1 [0243.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0243.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0243.742] SetErrorMode (uMode=0x1) returned 0x0 [0243.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.742] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.742] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.743] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.743] SetErrorMode (uMode=0x0) returned 0x1 [0243.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0243.762] SetErrorMode (uMode=0x1) returned 0x0 [0243.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.763] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.763] SetErrorMode (uMode=0x0) returned 0x1 [0243.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x97 [0243.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x97 [0243.764] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.764] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.764] CoTaskMemFree (pv=0xfe030) [0243.764] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.764] SetErrorMode (uMode=0x1) returned 0x0 [0243.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.765] SetErrorMode (uMode=0x0) returned 0x1 [0243.765] GetFileType (hFile=0x18c) returned 0x1 [0243.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0243.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0243.767] SetErrorMode (uMode=0x1) returned 0x0 [0243.767] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.771] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.772] SetErrorMode (uMode=0x0) returned 0x1 [0243.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0243.772] SetErrorMode (uMode=0x1) returned 0x0 [0243.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.773] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.773] SetErrorMode (uMode=0x0) returned 0x1 [0243.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x97 [0243.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x97 [0243.774] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.774] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.774] CoTaskMemFree (pv=0xfe030) [0243.774] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.775] SetErrorMode (uMode=0x1) returned 0x0 [0243.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.776] SetErrorMode (uMode=0x0) returned 0x1 [0243.776] GetFileType (hFile=0x18c) returned 0x1 [0243.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0243.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0243.778] SetErrorMode (uMode=0x1) returned 0x0 [0243.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.778] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.779] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.781] SetErrorMode (uMode=0x0) returned 0x1 [0243.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0243.782] SetErrorMode (uMode=0x1) returned 0x0 [0243.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.783] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.783] SetErrorMode (uMode=0x0) returned 0x1 [0243.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x97 [0243.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x97 [0243.784] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.784] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.784] CoTaskMemFree (pv=0xfe030) [0243.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.786] SetErrorMode (uMode=0x1) returned 0x0 [0243.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.786] SetErrorMode (uMode=0x0) returned 0x1 [0243.787] GetFileType (hFile=0x18c) returned 0x1 [0243.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0243.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0243.788] SetErrorMode (uMode=0x1) returned 0x0 [0243.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.796] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.796] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.796] SetErrorMode (uMode=0x0) returned 0x1 [0243.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0243.797] SetErrorMode (uMode=0x1) returned 0x0 [0243.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.797] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.798] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.798] SetErrorMode (uMode=0x0) returned 0x1 [0243.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x97 [0243.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x97 [0243.799] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.799] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.799] CoTaskMemFree (pv=0xfe030) [0243.799] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.800] SetErrorMode (uMode=0x1) returned 0x0 [0243.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.800] SetErrorMode (uMode=0x0) returned 0x1 [0243.800] GetFileType (hFile=0x18c) returned 0x1 [0243.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0243.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0243.802] SetErrorMode (uMode=0x1) returned 0x0 [0243.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.803] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.803] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.803] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.803] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.803] SetErrorMode (uMode=0x0) returned 0x1 [0243.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0243.804] SetErrorMode (uMode=0x1) returned 0x0 [0243.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.804] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.805] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.805] SetErrorMode (uMode=0x0) returned 0x1 [0243.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x97 [0243.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x97 [0243.806] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.806] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.806] CoTaskMemFree (pv=0xfe030) [0243.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.807] SetErrorMode (uMode=0x1) returned 0x0 [0243.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.808] SetErrorMode (uMode=0x0) returned 0x1 [0243.808] GetFileType (hFile=0x18c) returned 0x1 [0243.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0243.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0243.810] SetErrorMode (uMode=0x1) returned 0x0 [0243.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.826] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.826] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.826] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.826] SetErrorMode (uMode=0x0) returned 0x1 [0243.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0243.827] SetErrorMode (uMode=0x1) returned 0x0 [0243.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.827] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.827] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.828] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.828] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.828] SetErrorMode (uMode=0x0) returned 0x1 [0243.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x97 [0243.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x97 [0243.829] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.829] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.829] CoTaskMemFree (pv=0xfe030) [0243.829] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.830] SetErrorMode (uMode=0x1) returned 0x0 [0243.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.831] SetErrorMode (uMode=0x0) returned 0x1 [0243.831] GetFileType (hFile=0x18c) returned 0x1 [0243.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0243.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0243.832] SetErrorMode (uMode=0x1) returned 0x0 [0243.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.834] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.834] SetErrorMode (uMode=0x0) returned 0x1 [0243.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0243.834] SetErrorMode (uMode=0x1) returned 0x0 [0243.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.835] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.836] SetErrorMode (uMode=0x0) returned 0x1 [0243.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x97 [0243.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x97 [0243.836] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.836] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.837] CoTaskMemFree (pv=0xfe030) [0243.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.837] SetErrorMode (uMode=0x1) returned 0x0 [0243.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.838] SetErrorMode (uMode=0x0) returned 0x1 [0243.838] GetFileType (hFile=0x18c) returned 0x1 [0243.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0243.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0243.840] SetErrorMode (uMode=0x1) returned 0x0 [0243.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.842] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.842] SetErrorMode (uMode=0x0) returned 0x1 [0243.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0243.843] SetErrorMode (uMode=0x1) returned 0x0 [0243.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.844] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.844] SetErrorMode (uMode=0x0) returned 0x1 [0243.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x97 [0243.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x97 [0243.845] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.845] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.845] CoTaskMemFree (pv=0xfe030) [0243.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.846] SetErrorMode (uMode=0x1) returned 0x0 [0243.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.847] SetErrorMode (uMode=0x0) returned 0x1 [0243.847] GetFileType (hFile=0x18c) returned 0x1 [0243.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0243.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0243.849] SetErrorMode (uMode=0x1) returned 0x0 [0243.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.849] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.849] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.850] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.850] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.850] SetErrorMode (uMode=0x0) returned 0x1 [0243.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0243.851] SetErrorMode (uMode=0x1) returned 0x0 [0243.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.851] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.852] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.852] SetErrorMode (uMode=0x0) returned 0x1 [0243.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x97 [0243.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x97 [0243.854] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.854] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.854] CoTaskMemFree (pv=0xfe030) [0243.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.855] SetErrorMode (uMode=0x1) returned 0x0 [0243.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.856] SetErrorMode (uMode=0x0) returned 0x1 [0243.856] GetFileType (hFile=0x18c) returned 0x1 [0243.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0243.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0243.858] SetErrorMode (uMode=0x1) returned 0x0 [0243.858] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.860] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.860] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.860] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.860] SetErrorMode (uMode=0x0) returned 0x1 [0243.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0243.861] SetErrorMode (uMode=0x1) returned 0x0 [0243.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.862] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.862] SetErrorMode (uMode=0x0) returned 0x1 [0243.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x97 [0243.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x97 [0243.863] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.863] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.863] CoTaskMemFree (pv=0xfe030) [0243.863] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.864] SetErrorMode (uMode=0x1) returned 0x0 [0243.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.864] SetErrorMode (uMode=0x0) returned 0x1 [0243.865] GetFileType (hFile=0x18c) returned 0x1 [0243.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0243.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0243.866] SetErrorMode (uMode=0x1) returned 0x0 [0243.866] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.868] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.868] SetErrorMode (uMode=0x0) returned 0x1 [0243.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0243.868] SetErrorMode (uMode=0x1) returned 0x0 [0243.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.869] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.870] SetErrorMode (uMode=0x0) returned 0x1 [0243.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x97 [0243.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x97 [0243.870] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.871] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.871] CoTaskMemFree (pv=0xfe030) [0243.871] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.871] SetErrorMode (uMode=0x1) returned 0x0 [0243.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.872] SetErrorMode (uMode=0x0) returned 0x1 [0243.872] GetFileType (hFile=0x18c) returned 0x1 [0243.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0243.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0243.874] SetErrorMode (uMode=0x1) returned 0x0 [0243.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.876] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.876] SetErrorMode (uMode=0x0) returned 0x1 [0243.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0243.877] SetErrorMode (uMode=0x1) returned 0x0 [0243.877] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.877] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.878] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.878] SetErrorMode (uMode=0x0) returned 0x1 [0243.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x97 [0243.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x97 [0243.879] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.879] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.879] CoTaskMemFree (pv=0xfe030) [0243.879] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.880] SetErrorMode (uMode=0x1) returned 0x0 [0243.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.881] SetErrorMode (uMode=0x0) returned 0x1 [0243.881] GetFileType (hFile=0x18c) returned 0x1 [0243.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0243.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0243.883] SetErrorMode (uMode=0x1) returned 0x0 [0243.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.884] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0243.884] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.884] SetErrorMode (uMode=0x0) returned 0x1 [0243.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0243.884] SetErrorMode (uMode=0x1) returned 0x0 [0243.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0243.886] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.886] SetErrorMode (uMode=0x0) returned 0x1 [0243.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x97 [0243.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x97 [0243.887] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.887] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.887] CoTaskMemFree (pv=0xfe030) [0243.887] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.888] SetErrorMode (uMode=0x1) returned 0x0 [0243.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.888] SetErrorMode (uMode=0x0) returned 0x1 [0243.888] GetFileType (hFile=0x18c) returned 0x1 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0243.890] SetErrorMode (uMode=0x1) returned 0x0 [0243.890] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.892] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.892] SetErrorMode (uMode=0x0) returned 0x1 [0243.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0243.893] SetErrorMode (uMode=0x1) returned 0x0 [0243.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.893] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.894] SetErrorMode (uMode=0x0) returned 0x1 [0243.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x97 [0243.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x97 [0243.894] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.894] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.895] CoTaskMemFree (pv=0xfe030) [0243.895] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.895] SetErrorMode (uMode=0x1) returned 0x0 [0243.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.896] SetErrorMode (uMode=0x0) returned 0x1 [0243.896] GetFileType (hFile=0x18c) returned 0x1 [0243.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0243.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0243.898] SetErrorMode (uMode=0x1) returned 0x0 [0243.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.898] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.898] SetErrorMode (uMode=0x0) returned 0x1 [0243.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0243.899] SetErrorMode (uMode=0x1) returned 0x0 [0243.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.900] SetErrorMode (uMode=0x0) returned 0x1 [0243.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9a [0243.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9a [0243.900] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.900] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.901] CoTaskMemFree (pv=0xfe030) [0243.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0243.901] SetErrorMode (uMode=0x1) returned 0x0 [0243.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.902] SetErrorMode (uMode=0x0) returned 0x1 [0243.902] GetFileType (hFile=0x18c) returned 0x1 [0243.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0243.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0243.911] SetErrorMode (uMode=0x1) returned 0x0 [0243.911] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.913] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.913] SetErrorMode (uMode=0x0) returned 0x1 [0243.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0243.914] SetErrorMode (uMode=0x1) returned 0x0 [0243.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.914] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.914] SetErrorMode (uMode=0x0) returned 0x1 [0243.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9a [0243.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9a [0243.915] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.915] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.915] CoTaskMemFree (pv=0xfe030) [0243.915] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0243.920] SetErrorMode (uMode=0x1) returned 0x0 [0243.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.920] SetErrorMode (uMode=0x0) returned 0x1 [0243.920] GetFileType (hFile=0x18c) returned 0x1 [0243.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0243.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0243.922] SetErrorMode (uMode=0x1) returned 0x0 [0243.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.923] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.923] SetErrorMode (uMode=0x0) returned 0x1 [0243.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0243.924] SetErrorMode (uMode=0x1) returned 0x0 [0243.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.924] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.924] SetErrorMode (uMode=0x0) returned 0x1 [0243.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x97 [0243.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x97 [0243.925] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.925] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.925] CoTaskMemFree (pv=0xfe030) [0243.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.926] SetErrorMode (uMode=0x1) returned 0x0 [0243.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.926] SetErrorMode (uMode=0x0) returned 0x1 [0243.926] GetFileType (hFile=0x18c) returned 0x1 [0243.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0243.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0243.928] SetErrorMode (uMode=0x1) returned 0x0 [0243.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.934] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.934] SetErrorMode (uMode=0x0) returned 0x1 [0243.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0243.935] SetErrorMode (uMode=0x1) returned 0x0 [0243.935] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.935] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.935] SetErrorMode (uMode=0x0) returned 0x1 [0243.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x97 [0243.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x97 [0243.936] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.936] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.936] CoTaskMemFree (pv=0xfe030) [0243.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.937] SetErrorMode (uMode=0x1) returned 0x0 [0243.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.937] SetErrorMode (uMode=0x0) returned 0x1 [0243.937] GetFileType (hFile=0x18c) returned 0x1 [0243.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0243.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0243.939] SetErrorMode (uMode=0x1) returned 0x0 [0243.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.940] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.940] SetErrorMode (uMode=0x0) returned 0x1 [0243.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0243.941] SetErrorMode (uMode=0x1) returned 0x0 [0243.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.941] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.941] SetErrorMode (uMode=0x0) returned 0x1 [0243.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x97 [0243.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x97 [0243.942] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.942] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.942] CoTaskMemFree (pv=0xfe030) [0243.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.943] SetErrorMode (uMode=0x1) returned 0x0 [0243.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.943] SetErrorMode (uMode=0x0) returned 0x1 [0243.944] GetFileType (hFile=0x18c) returned 0x1 [0243.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0243.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0243.945] SetErrorMode (uMode=0x1) returned 0x0 [0243.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.948] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.948] SetErrorMode (uMode=0x0) returned 0x1 [0243.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0243.949] SetErrorMode (uMode=0x1) returned 0x0 [0243.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.949] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.949] SetErrorMode (uMode=0x0) returned 0x1 [0243.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x97 [0243.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x97 [0243.950] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.950] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.951] CoTaskMemFree (pv=0xfe030) [0243.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0243.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0243.951] SetErrorMode (uMode=0x1) returned 0x0 [0243.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.952] SetErrorMode (uMode=0x0) returned 0x1 [0243.952] GetFileType (hFile=0x18c) returned 0x1 [0243.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0243.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0243.954] SetErrorMode (uMode=0x1) returned 0x0 [0243.954] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.954] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.954] SetErrorMode (uMode=0x0) returned 0x1 [0243.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0243.955] SetErrorMode (uMode=0x1) returned 0x0 [0243.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.955] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.956] SetErrorMode (uMode=0x0) returned 0x1 [0243.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x97 [0243.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x97 [0243.956] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.956] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.957] CoTaskMemFree (pv=0xfe030) [0243.957] SetErrorMode (uMode=0x1) returned 0x0 [0243.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.958] SetErrorMode (uMode=0x0) returned 0x1 [0243.958] GetFileType (hFile=0x18c) returned 0x1 [0243.959] SetErrorMode (uMode=0x1) returned 0x0 [0243.959] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.961] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.961] SetErrorMode (uMode=0x0) returned 0x1 [0243.962] SetErrorMode (uMode=0x1) returned 0x0 [0243.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.962] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.962] SetErrorMode (uMode=0x0) returned 0x1 [0243.963] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.963] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.963] CoTaskMemFree (pv=0xfe030) [0243.963] SetErrorMode (uMode=0x1) returned 0x0 [0243.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.964] SetErrorMode (uMode=0x0) returned 0x1 [0243.964] GetFileType (hFile=0x18c) returned 0x1 [0243.965] SetErrorMode (uMode=0x1) returned 0x0 [0243.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.966] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.966] SetErrorMode (uMode=0x0) returned 0x1 [0243.966] SetErrorMode (uMode=0x1) returned 0x0 [0243.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.967] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.967] SetErrorMode (uMode=0x0) returned 0x1 [0243.967] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.967] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.968] CoTaskMemFree (pv=0xfe030) [0243.968] SetErrorMode (uMode=0x1) returned 0x0 [0243.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.969] SetErrorMode (uMode=0x0) returned 0x1 [0243.969] GetFileType (hFile=0x18c) returned 0x1 [0243.970] SetErrorMode (uMode=0x1) returned 0x0 [0243.970] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.979] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.979] SetErrorMode (uMode=0x0) returned 0x1 [0243.980] SetErrorMode (uMode=0x1) returned 0x0 [0243.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.981] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.981] SetErrorMode (uMode=0x0) returned 0x1 [0243.982] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.982] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.982] CoTaskMemFree (pv=0xfe030) [0243.983] SetErrorMode (uMode=0x1) returned 0x0 [0243.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.984] SetErrorMode (uMode=0x0) returned 0x1 [0243.984] GetFileType (hFile=0x18c) returned 0x1 [0243.986] SetErrorMode (uMode=0x1) returned 0x0 [0243.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.986] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.986] SetErrorMode (uMode=0x0) returned 0x1 [0243.987] SetErrorMode (uMode=0x1) returned 0x0 [0243.987] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.987] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.987] SetErrorMode (uMode=0x0) returned 0x1 [0243.988] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.988] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.988] CoTaskMemFree (pv=0xfe030) [0243.988] SetErrorMode (uMode=0x1) returned 0x0 [0243.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.989] SetErrorMode (uMode=0x0) returned 0x1 [0243.989] GetFileType (hFile=0x18c) returned 0x1 [0243.990] SetErrorMode (uMode=0x1) returned 0x0 [0243.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.991] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.991] SetErrorMode (uMode=0x0) returned 0x1 [0243.992] SetErrorMode (uMode=0x1) returned 0x0 [0243.992] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.992] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.992] SetErrorMode (uMode=0x0) returned 0x1 [0243.993] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.993] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.993] CoTaskMemFree (pv=0xfe030) [0243.993] SetErrorMode (uMode=0x1) returned 0x0 [0243.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.994] SetErrorMode (uMode=0x0) returned 0x1 [0243.994] GetFileType (hFile=0x18c) returned 0x1 [0243.995] SetErrorMode (uMode=0x1) returned 0x0 [0243.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.996] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.996] SetErrorMode (uMode=0x0) returned 0x1 [0243.997] SetErrorMode (uMode=0x1) returned 0x0 [0243.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0243.997] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0243.997] SetErrorMode (uMode=0x0) returned 0x1 [0243.997] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0243.998] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0243.998] CoTaskMemFree (pv=0xfe030) [0243.998] SetErrorMode (uMode=0x1) returned 0x0 [0243.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0243.999] SetErrorMode (uMode=0x0) returned 0x1 [0243.999] GetFileType (hFile=0x18c) returned 0x1 [0244.001] SetErrorMode (uMode=0x1) returned 0x0 [0244.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.001] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.001] SetErrorMode (uMode=0x0) returned 0x1 [0244.002] SetErrorMode (uMode=0x1) returned 0x0 [0244.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.002] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.002] SetErrorMode (uMode=0x0) returned 0x1 [0244.003] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0244.003] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.003] CoTaskMemFree (pv=0xfe030) [0244.003] SetErrorMode (uMode=0x1) returned 0x0 [0244.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.004] SetErrorMode (uMode=0x0) returned 0x1 [0244.004] GetFileType (hFile=0x18c) returned 0x1 [0244.005] SetErrorMode (uMode=0x1) returned 0x0 [0244.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.006] SetErrorMode (uMode=0x0) returned 0x1 [0244.006] GetFileType (hFile=0x18c) returned 0x1 [0244.007] SetErrorMode (uMode=0x1) returned 0x0 [0244.007] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.008] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.008] SetErrorMode (uMode=0x0) returned 0x1 [0244.008] SetErrorMode (uMode=0x1) returned 0x0 [0244.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.009] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.009] SetErrorMode (uMode=0x0) returned 0x1 [0244.009] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0244.009] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.010] CoTaskMemFree (pv=0xfe030) [0244.010] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0244.010] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.010] CoTaskMemFree (pv=0xfe030) [0244.010] SetErrorMode (uMode=0x1) returned 0x0 [0244.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.014] SetErrorMode (uMode=0x0) returned 0x1 [0244.014] GetFileType (hFile=0x18c) returned 0x1 [0244.017] SetErrorMode (uMode=0x1) returned 0x0 [0244.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.017] SetErrorMode (uMode=0x0) returned 0x1 [0244.017] GetFileType (hFile=0x18c) returned 0x1 [0244.019] SetErrorMode (uMode=0x1) returned 0x0 [0244.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.019] SetErrorMode (uMode=0x0) returned 0x1 [0244.019] GetFileType (hFile=0x18c) returned 0x1 [0244.021] SetErrorMode (uMode=0x1) returned 0x0 [0244.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.021] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.021] SetErrorMode (uMode=0x0) returned 0x1 [0244.022] SetErrorMode (uMode=0x1) returned 0x0 [0244.022] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.022] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.022] SetErrorMode (uMode=0x0) returned 0x1 [0244.023] SetErrorMode (uMode=0x1) returned 0x0 [0244.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.026] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.026] SetErrorMode (uMode=0x0) returned 0x1 [0244.027] SetErrorMode (uMode=0x1) returned 0x0 [0244.027] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.028] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.028] SetErrorMode (uMode=0x0) returned 0x1 [0244.029] SetErrorMode (uMode=0x1) returned 0x0 [0244.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.031] SetErrorMode (uMode=0x0) returned 0x1 [0244.031] GetFileType (hFile=0x18c) returned 0x1 [0244.031] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xc8d [0244.036] SetErrorMode (uMode=0x1) returned 0x0 [0244.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1 [0244.037] SetErrorMode (uMode=0x0) returned 0x1 [0244.102] SetErrorMode (uMode=0x1) returned 0x0 [0244.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.104] SetErrorMode (uMode=0x0) returned 0x1 [0244.104] GetFileType (hFile=0x18c) returned 0x1 [0244.105] SetErrorMode (uMode=0x1) returned 0x0 [0244.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x62124550, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0244.106] SetErrorMode (uMode=0x0) returned 0x1 [0244.106] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\IkOGYvO81r2F4vQa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ikogyvo81r2f4vqa_encrypted_by.whiterose")) returned 1 [0244.213] SetErrorMode (uMode=0x1) returned 0x0 [0244.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.215] SetErrorMode (uMode=0x0) returned 0x1 [0244.215] GetFileType (hFile=0x18c) returned 0x1 [0244.215] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x8f [0244.216] SetErrorMode (uMode=0x1) returned 0x0 [0244.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1 [0244.216] SetErrorMode (uMode=0x0) returned 0x1 [0244.290] SetErrorMode (uMode=0x1) returned 0x0 [0244.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.292] SetErrorMode (uMode=0x0) returned 0x1 [0244.292] GetFileType (hFile=0x18c) returned 0x1 [0244.293] SetErrorMode (uMode=0x1) returned 0x0 [0244.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x622ed5d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0244.293] SetErrorMode (uMode=0x0) returned 0x1 [0244.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\pcvBoVBW0oNFBNKX_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\pcvbovbw0onfbnkx_encrypted_by.whiterose")) returned 1 [0244.399] SetErrorMode (uMode=0x1) returned 0x0 [0244.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.400] SetErrorMode (uMode=0x0) returned 0x1 [0244.400] GetFileType (hFile=0x18c) returned 0x1 [0244.400] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5c [0244.402] SetErrorMode (uMode=0x1) returned 0x0 [0244.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0244.402] SetErrorMode (uMode=0x0) returned 0x1 [0244.475] SetErrorMode (uMode=0x1) returned 0x0 [0244.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.476] SetErrorMode (uMode=0x0) returned 0x1 [0244.476] GetFileType (hFile=0x18c) returned 0x1 [0244.478] SetErrorMode (uMode=0x1) returned 0x0 [0244.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x624b6650, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0244.478] SetErrorMode (uMode=0x0) returned 0x1 [0244.478] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\CmVJhcPfoIiqQBkm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\cmvjhcpfoiiqqbkm_encrypted_by.whiterose")) returned 1 [0244.587] SetErrorMode (uMode=0x1) returned 0x0 [0244.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.587] SetErrorMode (uMode=0x0) returned 0x1 [0244.587] GetFileType (hFile=0x18c) returned 0x1 [0244.587] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5b [0244.589] SetErrorMode (uMode=0x1) returned 0x0 [0244.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1 [0244.589] SetErrorMode (uMode=0x0) returned 0x1 [0244.662] SetErrorMode (uMode=0x1) returned 0x0 [0244.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0244.663] SetErrorMode (uMode=0x0) returned 0x1 [0244.663] GetFileType (hFile=0x18c) returned 0x1 [0244.677] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 1 [0244.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x8b [0244.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x8b [0244.680] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.680] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.680] CoTaskMemFree (pv=0xffa70) [0244.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0244.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0244.680] SetErrorMode (uMode=0x1) returned 0x0 [0244.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0244.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0244.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0244.685] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0244.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0244.687] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.687] SetErrorMode (uMode=0x0) returned 0x1 [0244.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0244.688] SetErrorMode (uMode=0x1) returned 0x0 [0244.688] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0244.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0244.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0244.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0244.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0244.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0244.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0244.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0244.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0244.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0244.693] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0244.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0244.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0244.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0244.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0244.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0244.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0244.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0244.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0244.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0244.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0244.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0244.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0244.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0244.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0244.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0244.699] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.700] SetErrorMode (uMode=0x0) returned 0x1 [0244.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0244.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0244.701] SetErrorMode (uMode=0x1) returned 0x0 [0244.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.703] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.703] SetErrorMode (uMode=0x0) returned 0x1 [0244.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0244.703] SetErrorMode (uMode=0x1) returned 0x0 [0244.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.705] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.705] SetErrorMode (uMode=0x0) returned 0x1 [0244.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x97 [0244.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x97 [0244.706] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.706] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.706] CoTaskMemFree (pv=0xffa70) [0244.706] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.707] SetErrorMode (uMode=0x1) returned 0x0 [0244.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.708] GetFileType (hFile=0x18c) returned 0x1 [0244.708] SetErrorMode (uMode=0x0) returned 0x1 [0244.708] GetFileType (hFile=0x18c) returned 0x1 [0244.710] WriteFile (in: hFile=0x18c, lpBuffer=0x2873370*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x2873370*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.711] WriteFile (in: hFile=0x18c, lpBuffer=0x2873370*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x2873370*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.712] CloseHandle (hObject=0x18c) returned 1 [0244.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0244.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0244.712] SetErrorMode (uMode=0x1) returned 0x0 [0244.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.714] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.714] SetErrorMode (uMode=0x0) returned 0x1 [0244.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0244.715] SetErrorMode (uMode=0x1) returned 0x0 [0244.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.716] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.716] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.716] SetErrorMode (uMode=0x0) returned 0x1 [0244.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x97 [0244.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x97 [0244.717] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.717] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.717] CoTaskMemFree (pv=0xffa70) [0244.717] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.718] SetErrorMode (uMode=0x1) returned 0x0 [0244.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.719] GetFileType (hFile=0x18c) returned 0x1 [0244.719] SetErrorMode (uMode=0x0) returned 0x1 [0244.719] GetFileType (hFile=0x18c) returned 0x1 [0244.721] WriteFile (in: hFile=0x18c, lpBuffer=0x288d470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x288d470*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.722] WriteFile (in: hFile=0x18c, lpBuffer=0x288d470*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x288d470*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.723] CloseHandle (hObject=0x18c) returned 1 [0244.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0244.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0244.723] SetErrorMode (uMode=0x1) returned 0x0 [0244.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.726] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.726] SetErrorMode (uMode=0x0) returned 0x1 [0244.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0244.726] SetErrorMode (uMode=0x1) returned 0x0 [0244.726] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.728] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.728] SetErrorMode (uMode=0x0) returned 0x1 [0244.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x97 [0244.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x97 [0244.729] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.729] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.729] CoTaskMemFree (pv=0xffa70) [0244.729] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.730] SetErrorMode (uMode=0x1) returned 0x0 [0244.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.731] GetFileType (hFile=0x18c) returned 0x1 [0244.731] SetErrorMode (uMode=0x0) returned 0x1 [0244.731] GetFileType (hFile=0x18c) returned 0x1 [0244.731] WriteFile (in: hFile=0x18c, lpBuffer=0x28a7570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28a7570*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.732] WriteFile (in: hFile=0x18c, lpBuffer=0x28a7570*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28a7570*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.733] CloseHandle (hObject=0x18c) returned 1 [0244.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0244.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0244.733] SetErrorMode (uMode=0x1) returned 0x0 [0244.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.735] SetErrorMode (uMode=0x0) returned 0x1 [0244.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0244.736] SetErrorMode (uMode=0x1) returned 0x0 [0244.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.737] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.738] SetErrorMode (uMode=0x0) returned 0x1 [0244.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x97 [0244.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x97 [0244.738] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.738] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.738] CoTaskMemFree (pv=0xffa70) [0244.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.739] SetErrorMode (uMode=0x1) returned 0x0 [0244.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.740] GetFileType (hFile=0x18c) returned 0x1 [0244.740] SetErrorMode (uMode=0x0) returned 0x1 [0244.740] GetFileType (hFile=0x18c) returned 0x1 [0244.740] WriteFile (in: hFile=0x18c, lpBuffer=0x28c1670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28c1670*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.741] WriteFile (in: hFile=0x18c, lpBuffer=0x28c1670*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28c1670*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.762] CloseHandle (hObject=0x18c) returned 1 [0244.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0244.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0244.763] SetErrorMode (uMode=0x1) returned 0x0 [0244.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.765] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.765] SetErrorMode (uMode=0x0) returned 0x1 [0244.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0244.765] SetErrorMode (uMode=0x1) returned 0x0 [0244.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.766] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.766] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.767] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.767] SetErrorMode (uMode=0x0) returned 0x1 [0244.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x97 [0244.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x97 [0244.768] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.768] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.768] CoTaskMemFree (pv=0xffa70) [0244.768] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.769] SetErrorMode (uMode=0x1) returned 0x0 [0244.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.770] GetFileType (hFile=0x18c) returned 0x1 [0244.770] SetErrorMode (uMode=0x0) returned 0x1 [0244.770] GetFileType (hFile=0x18c) returned 0x1 [0244.770] WriteFile (in: hFile=0x18c, lpBuffer=0x28db770*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28db770*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.771] WriteFile (in: hFile=0x18c, lpBuffer=0x28db770*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28db770*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.772] CloseHandle (hObject=0x18c) returned 1 [0244.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0244.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0244.772] SetErrorMode (uMode=0x1) returned 0x0 [0244.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.773] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.774] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.774] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.774] SetErrorMode (uMode=0x0) returned 0x1 [0244.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0244.775] SetErrorMode (uMode=0x1) returned 0x0 [0244.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.775] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.776] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.776] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.776] SetErrorMode (uMode=0x0) returned 0x1 [0244.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x97 [0244.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x97 [0244.777] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.777] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.777] CoTaskMemFree (pv=0xffa70) [0244.777] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.778] SetErrorMode (uMode=0x1) returned 0x0 [0244.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.779] GetFileType (hFile=0x18c) returned 0x1 [0244.779] SetErrorMode (uMode=0x0) returned 0x1 [0244.779] GetFileType (hFile=0x18c) returned 0x1 [0244.779] WriteFile (in: hFile=0x18c, lpBuffer=0x28f5870*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28f5870*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.781] WriteFile (in: hFile=0x18c, lpBuffer=0x28f5870*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28f5870*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.781] CloseHandle (hObject=0x18c) returned 1 [0244.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0244.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0244.782] SetErrorMode (uMode=0x1) returned 0x0 [0244.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.783] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.784] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.784] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.784] SetErrorMode (uMode=0x0) returned 0x1 [0244.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0244.784] SetErrorMode (uMode=0x1) returned 0x0 [0244.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.786] SetErrorMode (uMode=0x0) returned 0x1 [0244.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x97 [0244.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x97 [0244.787] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.787] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.787] CoTaskMemFree (pv=0xffa70) [0244.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.788] SetErrorMode (uMode=0x1) returned 0x0 [0244.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.789] GetFileType (hFile=0x18c) returned 0x1 [0244.789] SetErrorMode (uMode=0x0) returned 0x1 [0244.789] GetFileType (hFile=0x18c) returned 0x1 [0244.789] WriteFile (in: hFile=0x18c, lpBuffer=0x290f970*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x290f970*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.791] WriteFile (in: hFile=0x18c, lpBuffer=0x290f970*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x290f970*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0244.791] CloseHandle (hObject=0x18c) returned 1 [0244.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0244.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0244.792] SetErrorMode (uMode=0x1) returned 0x0 [0244.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.794] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.794] SetErrorMode (uMode=0x0) returned 0x1 [0244.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0244.794] SetErrorMode (uMode=0x1) returned 0x0 [0244.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.795] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.796] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.796] SetErrorMode (uMode=0x0) returned 0x1 [0244.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x9a [0244.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x9a [0244.796] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.796] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.797] CoTaskMemFree (pv=0xffa70) [0244.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0244.801] SetErrorMode (uMode=0x1) returned 0x0 [0244.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.802] SetErrorMode (uMode=0x0) returned 0x1 [0244.802] GetFileType (hFile=0x18c) returned 0x1 [0244.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0244.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0244.804] SetErrorMode (uMode=0x1) returned 0x0 [0244.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.805] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.805] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.806] SetErrorMode (uMode=0x0) returned 0x1 [0244.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0244.806] SetErrorMode (uMode=0x1) returned 0x0 [0244.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.806] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.807] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.807] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.807] SetErrorMode (uMode=0x0) returned 0x1 [0244.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x9a [0244.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x9a [0244.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.808] CoTaskMemFree (pv=0xffa70) [0244.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0244.808] SetErrorMode (uMode=0x1) returned 0x0 [0244.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.809] SetErrorMode (uMode=0x0) returned 0x1 [0244.809] GetFileType (hFile=0x18c) returned 0x1 [0244.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0244.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0244.811] SetErrorMode (uMode=0x1) returned 0x0 [0244.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.812] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.813] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.813] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.813] SetErrorMode (uMode=0x0) returned 0x1 [0244.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0244.814] SetErrorMode (uMode=0x1) returned 0x0 [0244.814] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.814] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.815] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.815] SetErrorMode (uMode=0x0) returned 0x1 [0244.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x97 [0244.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x97 [0244.815] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.815] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.816] CoTaskMemFree (pv=0xffa70) [0244.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.816] SetErrorMode (uMode=0x1) returned 0x0 [0244.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.817] SetErrorMode (uMode=0x0) returned 0x1 [0244.817] GetFileType (hFile=0x18c) returned 0x1 [0244.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0244.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0244.818] SetErrorMode (uMode=0x1) returned 0x0 [0244.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.819] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.820] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.820] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.820] SetErrorMode (uMode=0x0) returned 0x1 [0244.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0244.820] SetErrorMode (uMode=0x1) returned 0x0 [0244.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.821] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.822] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.822] SetErrorMode (uMode=0x0) returned 0x1 [0244.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x9b [0244.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x9b [0244.822] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.822] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.822] CoTaskMemFree (pv=0xffa70) [0244.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0244.823] SetErrorMode (uMode=0x1) returned 0x0 [0244.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.824] SetErrorMode (uMode=0x0) returned 0x1 [0244.824] GetFileType (hFile=0x18c) returned 0x1 [0244.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0244.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0244.825] SetErrorMode (uMode=0x1) returned 0x0 [0244.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.827] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.827] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.827] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.827] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.827] SetErrorMode (uMode=0x0) returned 0x1 [0244.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0244.828] SetErrorMode (uMode=0x1) returned 0x0 [0244.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.828] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.828] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.829] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.829] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.829] SetErrorMode (uMode=0x0) returned 0x1 [0244.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x97 [0244.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x97 [0244.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.829] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.830] CoTaskMemFree (pv=0xffa70) [0244.830] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.830] SetErrorMode (uMode=0x1) returned 0x0 [0244.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.831] SetErrorMode (uMode=0x0) returned 0x1 [0244.831] GetFileType (hFile=0x18c) returned 0x1 [0244.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0244.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0244.833] SetErrorMode (uMode=0x1) returned 0x0 [0244.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.834] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.834] SetErrorMode (uMode=0x0) returned 0x1 [0244.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0244.834] SetErrorMode (uMode=0x1) returned 0x0 [0244.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.835] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.836] SetErrorMode (uMode=0x0) returned 0x1 [0244.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x97 [0244.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x97 [0244.836] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.836] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.836] CoTaskMemFree (pv=0xffa70) [0244.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.837] SetErrorMode (uMode=0x1) returned 0x0 [0244.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.837] SetErrorMode (uMode=0x0) returned 0x1 [0244.837] GetFileType (hFile=0x18c) returned 0x1 [0244.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0244.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0244.839] SetErrorMode (uMode=0x1) returned 0x0 [0244.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.841] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.841] SetErrorMode (uMode=0x0) returned 0x1 [0244.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0244.842] SetErrorMode (uMode=0x1) returned 0x0 [0244.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.843] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.843] SetErrorMode (uMode=0x0) returned 0x1 [0244.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x98 [0244.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x98 [0244.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.844] CoTaskMemFree (pv=0xffa70) [0244.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa4 [0244.844] SetErrorMode (uMode=0x1) returned 0x0 [0244.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.845] SetErrorMode (uMode=0x0) returned 0x1 [0244.845] GetFileType (hFile=0x18c) returned 0x1 [0244.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0244.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0244.847] SetErrorMode (uMode=0x1) returned 0x0 [0244.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.848] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.848] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.848] SetErrorMode (uMode=0x0) returned 0x1 [0244.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0244.849] SetErrorMode (uMode=0x1) returned 0x0 [0244.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.850] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.850] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.850] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.850] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.851] SetErrorMode (uMode=0x0) returned 0x1 [0244.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x97 [0244.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x97 [0244.852] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.852] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.852] CoTaskMemFree (pv=0xffa70) [0244.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.852] SetErrorMode (uMode=0x1) returned 0x0 [0244.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.853] SetErrorMode (uMode=0x0) returned 0x1 [0244.853] GetFileType (hFile=0x18c) returned 0x1 [0244.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0244.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0244.855] SetErrorMode (uMode=0x1) returned 0x0 [0244.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.857] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.857] SetErrorMode (uMode=0x0) returned 0x1 [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0244.858] SetErrorMode (uMode=0x1) returned 0x0 [0244.858] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.859] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.859] SetErrorMode (uMode=0x0) returned 0x1 [0244.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x97 [0244.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x97 [0244.860] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.860] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.860] CoTaskMemFree (pv=0xffa70) [0244.860] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.861] SetErrorMode (uMode=0x1) returned 0x0 [0244.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.861] SetErrorMode (uMode=0x0) returned 0x1 [0244.862] GetFileType (hFile=0x18c) returned 0x1 [0244.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0244.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0244.865] SetErrorMode (uMode=0x1) returned 0x0 [0244.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.866] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.866] SetErrorMode (uMode=0x0) returned 0x1 [0244.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0244.867] SetErrorMode (uMode=0x1) returned 0x0 [0244.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.868] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.868] SetErrorMode (uMode=0x0) returned 0x1 [0244.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x97 [0244.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x97 [0244.869] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.869] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.869] CoTaskMemFree (pv=0xffa70) [0244.869] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.870] SetErrorMode (uMode=0x1) returned 0x0 [0244.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.871] SetErrorMode (uMode=0x0) returned 0x1 [0244.871] GetFileType (hFile=0x18c) returned 0x1 [0244.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0244.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0244.872] SetErrorMode (uMode=0x1) returned 0x0 [0244.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.874] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.874] SetErrorMode (uMode=0x0) returned 0x1 [0244.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0244.875] SetErrorMode (uMode=0x1) returned 0x0 [0244.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.876] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.876] SetErrorMode (uMode=0x0) returned 0x1 [0244.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x97 [0244.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x97 [0244.877] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.877] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.877] CoTaskMemFree (pv=0xffa70) [0244.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.878] SetErrorMode (uMode=0x1) returned 0x0 [0244.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.878] SetErrorMode (uMode=0x0) returned 0x1 [0244.878] GetFileType (hFile=0x18c) returned 0x1 [0244.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0244.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0244.880] SetErrorMode (uMode=0x1) returned 0x0 [0244.880] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.881] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.881] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.881] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.881] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.882] SetErrorMode (uMode=0x0) returned 0x1 [0244.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0244.882] SetErrorMode (uMode=0x1) returned 0x0 [0244.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.883] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.883] SetErrorMode (uMode=0x0) returned 0x1 [0244.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x97 [0244.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x97 [0244.884] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.884] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.885] CoTaskMemFree (pv=0xffa70) [0244.885] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.885] SetErrorMode (uMode=0x1) returned 0x0 [0244.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.886] SetErrorMode (uMode=0x0) returned 0x1 [0244.886] GetFileType (hFile=0x18c) returned 0x1 [0244.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0244.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0244.887] SetErrorMode (uMode=0x1) returned 0x0 [0244.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.894] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.894] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.894] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.894] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.895] SetErrorMode (uMode=0x0) returned 0x1 [0244.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0244.895] SetErrorMode (uMode=0x1) returned 0x0 [0244.895] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.896] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.896] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.896] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.896] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.896] SetErrorMode (uMode=0x0) returned 0x1 [0244.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x97 [0244.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x97 [0244.897] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.897] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.898] CoTaskMemFree (pv=0xffa70) [0244.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.898] SetErrorMode (uMode=0x1) returned 0x0 [0244.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.899] SetErrorMode (uMode=0x0) returned 0x1 [0244.899] GetFileType (hFile=0x18c) returned 0x1 [0244.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0244.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0244.901] SetErrorMode (uMode=0x1) returned 0x0 [0244.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.902] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.902] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.902] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.902] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.902] SetErrorMode (uMode=0x0) returned 0x1 [0244.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0244.903] SetErrorMode (uMode=0x1) returned 0x0 [0244.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.904] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.904] SetErrorMode (uMode=0x0) returned 0x1 [0244.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x97 [0244.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x97 [0244.905] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.905] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.905] CoTaskMemFree (pv=0xffa70) [0244.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.906] SetErrorMode (uMode=0x1) returned 0x0 [0244.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.906] SetErrorMode (uMode=0x0) returned 0x1 [0244.907] GetFileType (hFile=0x18c) returned 0x1 [0244.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0244.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0244.908] SetErrorMode (uMode=0x1) returned 0x0 [0244.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.909] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.909] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.910] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.910] SetErrorMode (uMode=0x0) returned 0x1 [0244.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0244.911] SetErrorMode (uMode=0x1) returned 0x0 [0244.911] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.912] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.912] SetErrorMode (uMode=0x0) returned 0x1 [0244.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x97 [0244.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x97 [0244.913] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.913] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.913] CoTaskMemFree (pv=0xffa70) [0244.913] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.914] SetErrorMode (uMode=0x1) returned 0x0 [0244.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.915] SetErrorMode (uMode=0x0) returned 0x1 [0244.915] GetFileType (hFile=0x18c) returned 0x1 [0244.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0244.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0244.917] SetErrorMode (uMode=0x1) returned 0x0 [0244.917] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.918] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.918] SetErrorMode (uMode=0x0) returned 0x1 [0244.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0244.919] SetErrorMode (uMode=0x1) returned 0x0 [0244.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.919] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.920] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.920] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.920] SetErrorMode (uMode=0x0) returned 0x1 [0244.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x97 [0244.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x97 [0244.921] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.921] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.921] CoTaskMemFree (pv=0xffa70) [0244.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.921] SetErrorMode (uMode=0x1) returned 0x0 [0244.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.922] SetErrorMode (uMode=0x0) returned 0x1 [0244.922] GetFileType (hFile=0x18c) returned 0x1 [0244.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0244.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0244.924] SetErrorMode (uMode=0x1) returned 0x0 [0244.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.926] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.926] SetErrorMode (uMode=0x0) returned 0x1 [0244.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0244.926] SetErrorMode (uMode=0x1) returned 0x0 [0244.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.927] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.927] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.928] SetErrorMode (uMode=0x0) returned 0x1 [0244.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x97 [0244.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x97 [0244.928] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.928] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.929] CoTaskMemFree (pv=0xffa70) [0244.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.930] SetErrorMode (uMode=0x1) returned 0x0 [0244.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.930] SetErrorMode (uMode=0x0) returned 0x1 [0244.930] GetFileType (hFile=0x18c) returned 0x1 [0244.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0244.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0244.932] SetErrorMode (uMode=0x1) returned 0x0 [0244.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.933] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.933] SetErrorMode (uMode=0x0) returned 0x1 [0244.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0244.934] SetErrorMode (uMode=0x1) returned 0x0 [0244.934] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.935] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.935] SetErrorMode (uMode=0x0) returned 0x1 [0244.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x97 [0244.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x97 [0244.936] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.936] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.936] CoTaskMemFree (pv=0xffa70) [0244.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.937] SetErrorMode (uMode=0x1) returned 0x0 [0244.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.937] SetErrorMode (uMode=0x0) returned 0x1 [0244.937] GetFileType (hFile=0x18c) returned 0x1 [0244.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0244.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0244.939] SetErrorMode (uMode=0x1) returned 0x0 [0244.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.941] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.943] SetErrorMode (uMode=0x0) returned 0x1 [0244.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0244.944] SetErrorMode (uMode=0x1) returned 0x0 [0244.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.944] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.945] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.945] SetErrorMode (uMode=0x0) returned 0x1 [0244.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x97 [0244.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x97 [0244.946] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.946] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.946] CoTaskMemFree (pv=0xffa70) [0244.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.947] SetErrorMode (uMode=0x1) returned 0x0 [0244.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.947] SetErrorMode (uMode=0x0) returned 0x1 [0244.947] GetFileType (hFile=0x18c) returned 0x1 [0244.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0244.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0244.949] SetErrorMode (uMode=0x1) returned 0x0 [0244.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.950] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.950] SetErrorMode (uMode=0x0) returned 0x1 [0244.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0244.951] SetErrorMode (uMode=0x1) returned 0x0 [0244.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.952] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.952] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.952] SetErrorMode (uMode=0x0) returned 0x1 [0244.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x97 [0244.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x97 [0244.953] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.953] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.953] CoTaskMemFree (pv=0xffa70) [0244.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.954] SetErrorMode (uMode=0x1) returned 0x0 [0244.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.954] SetErrorMode (uMode=0x0) returned 0x1 [0244.954] GetFileType (hFile=0x18c) returned 0x1 [0244.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0244.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0244.956] SetErrorMode (uMode=0x1) returned 0x0 [0244.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.957] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.957] SetErrorMode (uMode=0x0) returned 0x1 [0244.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0244.958] SetErrorMode (uMode=0x1) returned 0x0 [0244.958] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.958] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.959] SetErrorMode (uMode=0x0) returned 0x1 [0244.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x97 [0244.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x97 [0244.959] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.959] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.960] CoTaskMemFree (pv=0xffa70) [0244.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.963] SetErrorMode (uMode=0x1) returned 0x0 [0244.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.963] SetErrorMode (uMode=0x0) returned 0x1 [0244.964] GetFileType (hFile=0x18c) returned 0x1 [0244.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0244.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0244.965] SetErrorMode (uMode=0x1) returned 0x0 [0244.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.966] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.966] SetErrorMode (uMode=0x0) returned 0x1 [0244.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0244.967] SetErrorMode (uMode=0x1) returned 0x0 [0244.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.967] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.967] SetErrorMode (uMode=0x0) returned 0x1 [0244.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9a [0244.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9a [0244.968] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.968] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.968] CoTaskMemFree (pv=0xffa70) [0244.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0244.969] SetErrorMode (uMode=0x1) returned 0x0 [0244.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.969] SetErrorMode (uMode=0x0) returned 0x1 [0244.969] GetFileType (hFile=0x18c) returned 0x1 [0244.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0244.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0244.971] SetErrorMode (uMode=0x1) returned 0x0 [0244.971] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.972] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.972] SetErrorMode (uMode=0x0) returned 0x1 [0244.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0244.973] SetErrorMode (uMode=0x1) returned 0x0 [0244.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.973] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.973] SetErrorMode (uMode=0x0) returned 0x1 [0244.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9a [0244.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9a [0244.974] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.974] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.974] CoTaskMemFree (pv=0xffa70) [0244.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0244.975] SetErrorMode (uMode=0x1) returned 0x0 [0244.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.976] SetErrorMode (uMode=0x0) returned 0x1 [0244.976] GetFileType (hFile=0x18c) returned 0x1 [0244.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0244.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0244.978] SetErrorMode (uMode=0x1) returned 0x0 [0244.978] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.978] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.978] SetErrorMode (uMode=0x0) returned 0x1 [0244.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0244.979] SetErrorMode (uMode=0x1) returned 0x0 [0244.979] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.979] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.979] SetErrorMode (uMode=0x0) returned 0x1 [0244.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x97 [0244.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x97 [0244.980] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.980] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.980] CoTaskMemFree (pv=0xffa70) [0244.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.981] SetErrorMode (uMode=0x1) returned 0x0 [0244.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.982] SetErrorMode (uMode=0x0) returned 0x1 [0244.982] GetFileType (hFile=0x18c) returned 0x1 [0244.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0244.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0244.983] SetErrorMode (uMode=0x1) returned 0x0 [0244.983] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.984] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.985] SetErrorMode (uMode=0x0) returned 0x1 [0244.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0244.985] SetErrorMode (uMode=0x1) returned 0x0 [0244.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.986] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.986] SetErrorMode (uMode=0x0) returned 0x1 [0244.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x97 [0244.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x97 [0244.987] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.987] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.987] CoTaskMemFree (pv=0xffa70) [0244.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.987] SetErrorMode (uMode=0x1) returned 0x0 [0244.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.988] SetErrorMode (uMode=0x0) returned 0x1 [0244.988] GetFileType (hFile=0x18c) returned 0x1 [0244.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0244.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0244.990] SetErrorMode (uMode=0x1) returned 0x0 [0244.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.990] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.990] SetErrorMode (uMode=0x0) returned 0x1 [0244.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0244.991] SetErrorMode (uMode=0x1) returned 0x0 [0244.991] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.991] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.991] SetErrorMode (uMode=0x0) returned 0x1 [0244.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x97 [0244.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x97 [0244.992] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.992] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.993] CoTaskMemFree (pv=0xffa70) [0244.993] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.993] SetErrorMode (uMode=0x1) returned 0x0 [0244.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0244.994] SetErrorMode (uMode=0x0) returned 0x1 [0244.994] GetFileType (hFile=0x18c) returned 0x1 [0244.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0244.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0244.995] SetErrorMode (uMode=0x1) returned 0x0 [0244.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.997] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.997] SetErrorMode (uMode=0x0) returned 0x1 [0244.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0244.997] SetErrorMode (uMode=0x1) returned 0x0 [0244.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0244.998] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0244.998] SetErrorMode (uMode=0x0) returned 0x1 [0244.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x97 [0244.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x97 [0244.999] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0244.999] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0244.999] CoTaskMemFree (pv=0xffa70) [0244.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0244.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0244.999] SetErrorMode (uMode=0x1) returned 0x0 [0245.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.000] SetErrorMode (uMode=0x0) returned 0x1 [0245.000] GetFileType (hFile=0x18c) returned 0x1 [0245.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0245.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0245.002] SetErrorMode (uMode=0x1) returned 0x0 [0245.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.002] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.003] SetErrorMode (uMode=0x0) returned 0x1 [0245.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0245.003] SetErrorMode (uMode=0x1) returned 0x0 [0245.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.004] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.004] SetErrorMode (uMode=0x0) returned 0x1 [0245.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x97 [0245.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x97 [0245.005] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.005] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.005] CoTaskMemFree (pv=0xffa70) [0245.005] SetErrorMode (uMode=0x1) returned 0x0 [0245.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.006] SetErrorMode (uMode=0x0) returned 0x1 [0245.006] GetFileType (hFile=0x18c) returned 0x1 [0245.008] SetErrorMode (uMode=0x1) returned 0x0 [0245.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.009] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.009] SetErrorMode (uMode=0x0) returned 0x1 [0245.010] SetErrorMode (uMode=0x1) returned 0x0 [0245.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.010] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.010] SetErrorMode (uMode=0x0) returned 0x1 [0245.011] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.011] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.011] CoTaskMemFree (pv=0xffa70) [0245.011] SetErrorMode (uMode=0x1) returned 0x0 [0245.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.012] SetErrorMode (uMode=0x0) returned 0x1 [0245.012] GetFileType (hFile=0x18c) returned 0x1 [0245.013] SetErrorMode (uMode=0x1) returned 0x0 [0245.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.013] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.014] SetErrorMode (uMode=0x0) returned 0x1 [0245.014] SetErrorMode (uMode=0x1) returned 0x0 [0245.014] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.014] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.015] SetErrorMode (uMode=0x0) returned 0x1 [0245.015] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.015] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.015] CoTaskMemFree (pv=0xffa70) [0245.015] SetErrorMode (uMode=0x1) returned 0x0 [0245.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.016] SetErrorMode (uMode=0x0) returned 0x1 [0245.016] GetFileType (hFile=0x18c) returned 0x1 [0245.018] SetErrorMode (uMode=0x1) returned 0x0 [0245.018] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.019] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.019] SetErrorMode (uMode=0x0) returned 0x1 [0245.019] SetErrorMode (uMode=0x1) returned 0x0 [0245.019] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.020] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.020] SetErrorMode (uMode=0x0) returned 0x1 [0245.020] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.020] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.020] CoTaskMemFree (pv=0xffa70) [0245.021] SetErrorMode (uMode=0x1) returned 0x0 [0245.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.021] SetErrorMode (uMode=0x0) returned 0x1 [0245.021] GetFileType (hFile=0x18c) returned 0x1 [0245.023] SetErrorMode (uMode=0x1) returned 0x0 [0245.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.023] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.024] SetErrorMode (uMode=0x0) returned 0x1 [0245.024] SetErrorMode (uMode=0x1) returned 0x0 [0245.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.024] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.025] SetErrorMode (uMode=0x0) returned 0x1 [0245.025] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.025] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.025] CoTaskMemFree (pv=0xffa70) [0245.025] SetErrorMode (uMode=0x1) returned 0x0 [0245.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.026] SetErrorMode (uMode=0x0) returned 0x1 [0245.026] GetFileType (hFile=0x18c) returned 0x1 [0245.027] SetErrorMode (uMode=0x1) returned 0x0 [0245.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.029] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.029] SetErrorMode (uMode=0x0) returned 0x1 [0245.029] SetErrorMode (uMode=0x1) returned 0x0 [0245.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.030] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.030] SetErrorMode (uMode=0x0) returned 0x1 [0245.030] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.030] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.030] CoTaskMemFree (pv=0xffa70) [0245.031] SetErrorMode (uMode=0x1) returned 0x0 [0245.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.031] SetErrorMode (uMode=0x0) returned 0x1 [0245.031] GetFileType (hFile=0x18c) returned 0x1 [0245.033] SetErrorMode (uMode=0x1) returned 0x0 [0245.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.033] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.033] SetErrorMode (uMode=0x0) returned 0x1 [0245.034] SetErrorMode (uMode=0x1) returned 0x0 [0245.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.034] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.034] SetErrorMode (uMode=0x0) returned 0x1 [0245.035] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.035] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.035] CoTaskMemFree (pv=0xffa70) [0245.035] SetErrorMode (uMode=0x1) returned 0x0 [0245.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.036] SetErrorMode (uMode=0x0) returned 0x1 [0245.036] GetFileType (hFile=0x18c) returned 0x1 [0245.037] SetErrorMode (uMode=0x1) returned 0x0 [0245.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.038] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.038] SetErrorMode (uMode=0x0) returned 0x1 [0245.038] SetErrorMode (uMode=0x1) returned 0x0 [0245.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.039] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.039] SetErrorMode (uMode=0x0) returned 0x1 [0245.040] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.040] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.040] CoTaskMemFree (pv=0xffa70) [0245.040] SetErrorMode (uMode=0x1) returned 0x0 [0245.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.041] SetErrorMode (uMode=0x0) returned 0x1 [0245.041] GetFileType (hFile=0x18c) returned 0x1 [0245.042] SetErrorMode (uMode=0x1) returned 0x0 [0245.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.043] SetErrorMode (uMode=0x0) returned 0x1 [0245.043] GetFileType (hFile=0x18c) returned 0x1 [0245.044] SetErrorMode (uMode=0x1) returned 0x0 [0245.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.045] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.045] SetErrorMode (uMode=0x0) returned 0x1 [0245.045] SetErrorMode (uMode=0x1) returned 0x0 [0245.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.046] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.046] SetErrorMode (uMode=0x0) returned 0x1 [0245.046] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.046] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.046] CoTaskMemFree (pv=0xffa70) [0245.047] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.047] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.047] CoTaskMemFree (pv=0xffa70) [0245.047] SetErrorMode (uMode=0x1) returned 0x0 [0245.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.049] SetErrorMode (uMode=0x0) returned 0x1 [0245.049] GetFileType (hFile=0x18c) returned 0x1 [0245.051] SetErrorMode (uMode=0x1) returned 0x0 [0245.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.051] SetErrorMode (uMode=0x0) returned 0x1 [0245.051] GetFileType (hFile=0x18c) returned 0x1 [0245.053] SetErrorMode (uMode=0x1) returned 0x0 [0245.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0245.054] SetErrorMode (uMode=0x0) returned 0x1 [0245.054] GetFileType (hFile=0x18c) returned 0x1 [0245.055] SetErrorMode (uMode=0x1) returned 0x0 [0245.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.056] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.056] SetErrorMode (uMode=0x0) returned 0x1 [0245.056] SetErrorMode (uMode=0x1) returned 0x0 [0245.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.057] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.059] SetErrorMode (uMode=0x0) returned 0x1 [0245.060] SetErrorMode (uMode=0x1) returned 0x0 [0245.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.062] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.063] SetErrorMode (uMode=0x0) returned 0x1 [0245.063] SetErrorMode (uMode=0x1) returned 0x0 [0245.063] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.064] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.065] SetErrorMode (uMode=0x0) returned 0x1 [0245.065] SetErrorMode (uMode=0x1) returned 0x0 [0245.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0245.067] SetErrorMode (uMode=0x0) returned 0x1 [0245.067] GetFileType (hFile=0x18c) returned 0x1 [0245.067] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x1a33 [0245.071] SetErrorMode (uMode=0x1) returned 0x0 [0245.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33)) returned 1 [0245.071] SetErrorMode (uMode=0x0) returned 0x1 [0245.261] SetErrorMode (uMode=0x1) returned 0x0 [0245.262] SetErrorMode (uMode=0x0) returned 0x1 [0245.262] GetFileType (hFile=0x18c) returned 0x1 [0245.262] WriteFile (in: hFile=0x18c, lpBuffer=0x276dce8*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x276dce8*, lpNumberOfBytesWritten=0x27e3a8*=0x1b40, lpOverlapped=0x0) returned 1 [0245.263] SetErrorMode (uMode=0x1) returned 0x0 [0245.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x62c26b10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b40)) returned 1 [0245.264] SetErrorMode (uMode=0x0) returned 0x1 [0245.264] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\OyLw1CjRqfRO9mOq_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\oylw1cjrqfro9moq_encrypted_by.whiterose")) returned 1 [0245.367] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.367] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.367] CoTaskMemFree (pv=0xfe030) [0245.368] SetErrorMode (uMode=0x1) returned 0x0 [0245.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.370] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.371] SetErrorMode (uMode=0x0) returned 0x1 [0245.371] SetErrorMode (uMode=0x1) returned 0x0 [0245.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.372] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.373] SetErrorMode (uMode=0x0) returned 0x1 [0245.373] SetErrorMode (uMode=0x1) returned 0x0 [0245.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.375] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.375] SetErrorMode (uMode=0x0) returned 0x1 [0245.375] SetErrorMode (uMode=0x1) returned 0x0 [0245.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.376] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.376] SetErrorMode (uMode=0x0) returned 0x1 [0245.376] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.376] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.376] CoTaskMemFree (pv=0xfe030) [0245.377] SetErrorMode (uMode=0x1) returned 0x0 [0245.378] SetErrorMode (uMode=0x0) returned 0x1 [0245.378] GetFileType (hFile=0x18c) returned 0x1 [0245.379] SetErrorMode (uMode=0x1) returned 0x0 [0245.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.392] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.392] SetErrorMode (uMode=0x0) returned 0x1 [0245.392] SetErrorMode (uMode=0x1) returned 0x0 [0245.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.393] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.393] SetErrorMode (uMode=0x0) returned 0x1 [0245.394] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.394] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.394] CoTaskMemFree (pv=0xfe030) [0245.394] SetErrorMode (uMode=0x1) returned 0x0 [0245.397] SetErrorMode (uMode=0x0) returned 0x1 [0245.397] GetFileType (hFile=0x18c) returned 0x1 [0245.400] SetErrorMode (uMode=0x1) returned 0x0 [0245.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.400] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.401] SetErrorMode (uMode=0x0) returned 0x1 [0245.401] SetErrorMode (uMode=0x1) returned 0x0 [0245.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.401] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.402] SetErrorMode (uMode=0x0) returned 0x1 [0245.402] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.402] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.402] CoTaskMemFree (pv=0xfe030) [0245.402] SetErrorMode (uMode=0x1) returned 0x0 [0245.403] SetErrorMode (uMode=0x0) returned 0x1 [0245.403] GetFileType (hFile=0x18c) returned 0x1 [0245.404] SetErrorMode (uMode=0x1) returned 0x0 [0245.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.406] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.406] SetErrorMode (uMode=0x0) returned 0x1 [0245.406] SetErrorMode (uMode=0x1) returned 0x0 [0245.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.407] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.407] SetErrorMode (uMode=0x0) returned 0x1 [0245.407] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.407] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.408] CoTaskMemFree (pv=0xfe030) [0245.408] SetErrorMode (uMode=0x1) returned 0x0 [0245.408] SetErrorMode (uMode=0x0) returned 0x1 [0245.408] GetFileType (hFile=0x18c) returned 0x1 [0245.410] SetErrorMode (uMode=0x1) returned 0x0 [0245.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.411] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.411] SetErrorMode (uMode=0x0) returned 0x1 [0245.411] SetErrorMode (uMode=0x1) returned 0x0 [0245.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.412] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.412] SetErrorMode (uMode=0x0) returned 0x1 [0245.412] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.412] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.413] CoTaskMemFree (pv=0xfe030) [0245.413] SetErrorMode (uMode=0x1) returned 0x0 [0245.414] SetErrorMode (uMode=0x0) returned 0x1 [0245.414] GetFileType (hFile=0x18c) returned 0x1 [0245.415] SetErrorMode (uMode=0x1) returned 0x0 [0245.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.416] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.416] SetErrorMode (uMode=0x0) returned 0x1 [0245.417] SetErrorMode (uMode=0x1) returned 0x0 [0245.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.417] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.417] SetErrorMode (uMode=0x0) returned 0x1 [0245.418] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.418] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.418] CoTaskMemFree (pv=0xfe030) [0245.418] SetErrorMode (uMode=0x1) returned 0x0 [0245.419] SetErrorMode (uMode=0x0) returned 0x1 [0245.419] GetFileType (hFile=0x18c) returned 0x1 [0245.421] SetErrorMode (uMode=0x1) returned 0x0 [0245.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.421] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.422] SetErrorMode (uMode=0x0) returned 0x1 [0245.422] SetErrorMode (uMode=0x1) returned 0x0 [0245.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.422] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.423] SetErrorMode (uMode=0x0) returned 0x1 [0245.423] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.423] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.423] CoTaskMemFree (pv=0xfe030) [0245.423] SetErrorMode (uMode=0x1) returned 0x0 [0245.424] SetErrorMode (uMode=0x0) returned 0x1 [0245.424] GetFileType (hFile=0x18c) returned 0x1 [0245.425] SetErrorMode (uMode=0x1) returned 0x0 [0245.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.427] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.427] SetErrorMode (uMode=0x0) returned 0x1 [0245.427] SetErrorMode (uMode=0x1) returned 0x0 [0245.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.428] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.428] SetErrorMode (uMode=0x0) returned 0x1 [0245.429] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.429] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.429] CoTaskMemFree (pv=0xfe030) [0245.429] SetErrorMode (uMode=0x1) returned 0x0 [0245.430] SetErrorMode (uMode=0x0) returned 0x1 [0245.430] GetFileType (hFile=0x18c) returned 0x1 [0245.431] SetErrorMode (uMode=0x1) returned 0x0 [0245.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.432] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.432] SetErrorMode (uMode=0x0) returned 0x1 [0245.432] SetErrorMode (uMode=0x1) returned 0x0 [0245.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.433] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.433] SetErrorMode (uMode=0x0) returned 0x1 [0245.433] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.433] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.433] CoTaskMemFree (pv=0xfe030) [0245.434] SetErrorMode (uMode=0x1) returned 0x0 [0245.434] SetErrorMode (uMode=0x0) returned 0x1 [0245.434] GetFileType (hFile=0x18c) returned 0x1 [0245.436] SetErrorMode (uMode=0x1) returned 0x0 [0245.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.437] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.437] SetErrorMode (uMode=0x0) returned 0x1 [0245.437] SetErrorMode (uMode=0x1) returned 0x0 [0245.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.438] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.438] SetErrorMode (uMode=0x0) returned 0x1 [0245.438] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.438] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.439] CoTaskMemFree (pv=0xfe030) [0245.439] SetErrorMode (uMode=0x1) returned 0x0 [0245.439] SetErrorMode (uMode=0x0) returned 0x1 [0245.440] GetFileType (hFile=0x18c) returned 0x1 [0245.441] SetErrorMode (uMode=0x1) returned 0x0 [0245.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.442] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.442] SetErrorMode (uMode=0x0) returned 0x1 [0245.442] SetErrorMode (uMode=0x1) returned 0x0 [0245.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.443] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.443] SetErrorMode (uMode=0x0) returned 0x1 [0245.443] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.443] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.444] CoTaskMemFree (pv=0xfe030) [0245.444] SetErrorMode (uMode=0x1) returned 0x0 [0245.445] SetErrorMode (uMode=0x0) returned 0x1 [0245.445] GetFileType (hFile=0x18c) returned 0x1 [0245.446] SetErrorMode (uMode=0x1) returned 0x0 [0245.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.450] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.450] SetErrorMode (uMode=0x0) returned 0x1 [0245.450] SetErrorMode (uMode=0x1) returned 0x0 [0245.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.451] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.451] SetErrorMode (uMode=0x0) returned 0x1 [0245.452] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.452] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.452] CoTaskMemFree (pv=0xfe030) [0245.452] SetErrorMode (uMode=0x1) returned 0x0 [0245.453] SetErrorMode (uMode=0x0) returned 0x1 [0245.453] GetFileType (hFile=0x18c) returned 0x1 [0245.454] SetErrorMode (uMode=0x1) returned 0x0 [0245.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.455] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.455] SetErrorMode (uMode=0x0) returned 0x1 [0245.455] SetErrorMode (uMode=0x1) returned 0x0 [0245.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.456] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.456] SetErrorMode (uMode=0x0) returned 0x1 [0245.456] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.456] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.457] CoTaskMemFree (pv=0xfe030) [0245.457] SetErrorMode (uMode=0x1) returned 0x0 [0245.460] SetErrorMode (uMode=0x0) returned 0x1 [0245.460] GetFileType (hFile=0x18c) returned 0x1 [0245.462] SetErrorMode (uMode=0x1) returned 0x0 [0245.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.463] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.463] SetErrorMode (uMode=0x0) returned 0x1 [0245.464] SetErrorMode (uMode=0x1) returned 0x0 [0245.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.464] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.464] SetErrorMode (uMode=0x0) returned 0x1 [0245.465] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.465] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.465] CoTaskMemFree (pv=0xfe030) [0245.465] SetErrorMode (uMode=0x1) returned 0x0 [0245.466] SetErrorMode (uMode=0x0) returned 0x1 [0245.466] GetFileType (hFile=0x18c) returned 0x1 [0245.467] SetErrorMode (uMode=0x1) returned 0x0 [0245.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.468] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.468] SetErrorMode (uMode=0x0) returned 0x1 [0245.468] SetErrorMode (uMode=0x1) returned 0x0 [0245.468] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.469] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.469] SetErrorMode (uMode=0x0) returned 0x1 [0245.469] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.469] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.470] CoTaskMemFree (pv=0xfe030) [0245.470] SetErrorMode (uMode=0x1) returned 0x0 [0245.470] SetErrorMode (uMode=0x0) returned 0x1 [0245.470] GetFileType (hFile=0x18c) returned 0x1 [0245.472] SetErrorMode (uMode=0x1) returned 0x0 [0245.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.473] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.473] SetErrorMode (uMode=0x0) returned 0x1 [0245.474] SetErrorMode (uMode=0x1) returned 0x0 [0245.474] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.474] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.474] SetErrorMode (uMode=0x0) returned 0x1 [0245.475] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.475] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.475] CoTaskMemFree (pv=0xfe030) [0245.475] SetErrorMode (uMode=0x1) returned 0x0 [0245.476] SetErrorMode (uMode=0x0) returned 0x1 [0245.476] GetFileType (hFile=0x18c) returned 0x1 [0245.477] SetErrorMode (uMode=0x1) returned 0x0 [0245.477] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.478] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.478] SetErrorMode (uMode=0x0) returned 0x1 [0245.478] SetErrorMode (uMode=0x1) returned 0x0 [0245.479] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.479] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.479] SetErrorMode (uMode=0x0) returned 0x1 [0245.479] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.479] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.480] CoTaskMemFree (pv=0xfe030) [0245.483] SetErrorMode (uMode=0x1) returned 0x0 [0245.484] SetErrorMode (uMode=0x0) returned 0x1 [0245.484] GetFileType (hFile=0x18c) returned 0x1 [0245.485] SetErrorMode (uMode=0x1) returned 0x0 [0245.485] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.486] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.487] SetErrorMode (uMode=0x0) returned 0x1 [0245.487] SetErrorMode (uMode=0x1) returned 0x0 [0245.487] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.487] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.488] SetErrorMode (uMode=0x0) returned 0x1 [0245.488] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.488] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.488] CoTaskMemFree (pv=0xfe030) [0245.489] SetErrorMode (uMode=0x1) returned 0x0 [0245.489] SetErrorMode (uMode=0x0) returned 0x1 [0245.489] GetFileType (hFile=0x18c) returned 0x1 [0245.490] SetErrorMode (uMode=0x1) returned 0x0 [0245.491] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.491] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.491] SetErrorMode (uMode=0x0) returned 0x1 [0245.492] SetErrorMode (uMode=0x1) returned 0x0 [0245.492] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.492] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.492] SetErrorMode (uMode=0x0) returned 0x1 [0245.493] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.493] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.493] CoTaskMemFree (pv=0xfe030) [0245.493] SetErrorMode (uMode=0x1) returned 0x0 [0245.494] SetErrorMode (uMode=0x0) returned 0x1 [0245.494] GetFileType (hFile=0x18c) returned 0x1 [0245.495] SetErrorMode (uMode=0x1) returned 0x0 [0245.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.496] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.497] SetErrorMode (uMode=0x0) returned 0x1 [0245.497] SetErrorMode (uMode=0x1) returned 0x0 [0245.497] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.498] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.498] SetErrorMode (uMode=0x0) returned 0x1 [0245.498] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.498] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.498] CoTaskMemFree (pv=0xfe030) [0245.499] SetErrorMode (uMode=0x1) returned 0x0 [0245.499] SetErrorMode (uMode=0x0) returned 0x1 [0245.499] GetFileType (hFile=0x18c) returned 0x1 [0245.501] SetErrorMode (uMode=0x1) returned 0x0 [0245.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.501] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.501] SetErrorMode (uMode=0x0) returned 0x1 [0245.502] SetErrorMode (uMode=0x1) returned 0x0 [0245.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.502] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.503] SetErrorMode (uMode=0x0) returned 0x1 [0245.503] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.503] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.503] CoTaskMemFree (pv=0xfe030) [0245.503] SetErrorMode (uMode=0x1) returned 0x0 [0245.504] SetErrorMode (uMode=0x0) returned 0x1 [0245.504] GetFileType (hFile=0x18c) returned 0x1 [0245.505] SetErrorMode (uMode=0x1) returned 0x0 [0245.505] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.507] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.507] SetErrorMode (uMode=0x0) returned 0x1 [0245.507] SetErrorMode (uMode=0x1) returned 0x0 [0245.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.508] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.508] SetErrorMode (uMode=0x0) returned 0x1 [0245.508] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.508] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.508] CoTaskMemFree (pv=0xfe030) [0245.509] SetErrorMode (uMode=0x1) returned 0x0 [0245.509] SetErrorMode (uMode=0x0) returned 0x1 [0245.509] GetFileType (hFile=0x18c) returned 0x1 [0245.511] SetErrorMode (uMode=0x1) returned 0x0 [0245.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.511] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.511] SetErrorMode (uMode=0x0) returned 0x1 [0245.512] SetErrorMode (uMode=0x1) returned 0x0 [0245.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.512] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.513] SetErrorMode (uMode=0x0) returned 0x1 [0245.513] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.513] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.513] CoTaskMemFree (pv=0xfe030) [0245.513] SetErrorMode (uMode=0x1) returned 0x0 [0245.514] SetErrorMode (uMode=0x0) returned 0x1 [0245.514] GetFileType (hFile=0x18c) returned 0x1 [0245.515] SetErrorMode (uMode=0x1) returned 0x0 [0245.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.517] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.517] SetErrorMode (uMode=0x0) returned 0x1 [0245.517] SetErrorMode (uMode=0x1) returned 0x0 [0245.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.518] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.518] SetErrorMode (uMode=0x0) returned 0x1 [0245.518] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.518] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.519] CoTaskMemFree (pv=0xfe030) [0245.519] SetErrorMode (uMode=0x1) returned 0x0 [0245.519] SetErrorMode (uMode=0x0) returned 0x1 [0245.519] GetFileType (hFile=0x18c) returned 0x1 [0245.521] SetErrorMode (uMode=0x1) returned 0x0 [0245.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.521] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.521] SetErrorMode (uMode=0x0) returned 0x1 [0245.522] SetErrorMode (uMode=0x1) returned 0x0 [0245.522] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.523] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.523] SetErrorMode (uMode=0x0) returned 0x1 [0245.523] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.523] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.523] CoTaskMemFree (pv=0xfe030) [0245.524] SetErrorMode (uMode=0x1) returned 0x0 [0245.524] SetErrorMode (uMode=0x0) returned 0x1 [0245.524] GetFileType (hFile=0x18c) returned 0x1 [0245.525] SetErrorMode (uMode=0x1) returned 0x0 [0245.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.527] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.527] SetErrorMode (uMode=0x0) returned 0x1 [0245.527] SetErrorMode (uMode=0x1) returned 0x0 [0245.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.528] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.528] SetErrorMode (uMode=0x0) returned 0x1 [0245.529] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.529] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.529] CoTaskMemFree (pv=0xfe030) [0245.529] SetErrorMode (uMode=0x1) returned 0x0 [0245.530] SetErrorMode (uMode=0x0) returned 0x1 [0245.530] GetFileType (hFile=0x18c) returned 0x1 [0245.531] SetErrorMode (uMode=0x1) returned 0x0 [0245.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.532] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.532] SetErrorMode (uMode=0x0) returned 0x1 [0245.532] SetErrorMode (uMode=0x1) returned 0x0 [0245.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.533] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.533] SetErrorMode (uMode=0x0) returned 0x1 [0245.533] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.533] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.534] CoTaskMemFree (pv=0xfe030) [0245.534] SetErrorMode (uMode=0x1) returned 0x0 [0245.534] SetErrorMode (uMode=0x0) returned 0x1 [0245.534] GetFileType (hFile=0x18c) returned 0x1 [0245.536] SetErrorMode (uMode=0x1) returned 0x0 [0245.536] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.537] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.537] SetErrorMode (uMode=0x0) returned 0x1 [0245.538] SetErrorMode (uMode=0x1) returned 0x0 [0245.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.538] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.538] SetErrorMode (uMode=0x0) returned 0x1 [0245.539] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.539] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.539] CoTaskMemFree (pv=0xfe030) [0245.539] SetErrorMode (uMode=0x1) returned 0x0 [0245.540] SetErrorMode (uMode=0x0) returned 0x1 [0245.540] GetFileType (hFile=0x18c) returned 0x1 [0245.541] SetErrorMode (uMode=0x1) returned 0x0 [0245.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.542] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.542] SetErrorMode (uMode=0x0) returned 0x1 [0245.542] SetErrorMode (uMode=0x1) returned 0x0 [0245.543] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.543] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.543] SetErrorMode (uMode=0x0) returned 0x1 [0245.544] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.544] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.544] CoTaskMemFree (pv=0xfe030) [0245.544] SetErrorMode (uMode=0x1) returned 0x0 [0245.544] SetErrorMode (uMode=0x0) returned 0x1 [0245.544] GetFileType (hFile=0x18c) returned 0x1 [0245.546] SetErrorMode (uMode=0x1) returned 0x0 [0245.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.547] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.547] SetErrorMode (uMode=0x0) returned 0x1 [0245.548] SetErrorMode (uMode=0x1) returned 0x0 [0245.548] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.548] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.548] SetErrorMode (uMode=0x0) returned 0x1 [0245.549] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.549] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.549] CoTaskMemFree (pv=0xfe030) [0245.549] SetErrorMode (uMode=0x1) returned 0x0 [0245.550] SetErrorMode (uMode=0x0) returned 0x1 [0245.550] GetFileType (hFile=0x18c) returned 0x1 [0245.551] SetErrorMode (uMode=0x1) returned 0x0 [0245.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.552] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.552] SetErrorMode (uMode=0x0) returned 0x1 [0245.553] SetErrorMode (uMode=0x1) returned 0x0 [0245.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.553] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.553] SetErrorMode (uMode=0x0) returned 0x1 [0245.554] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.554] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.554] CoTaskMemFree (pv=0xfe030) [0245.554] SetErrorMode (uMode=0x1) returned 0x0 [0245.555] SetErrorMode (uMode=0x0) returned 0x1 [0245.555] GetFileType (hFile=0x18c) returned 0x1 [0245.556] SetErrorMode (uMode=0x1) returned 0x0 [0245.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.558] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.558] SetErrorMode (uMode=0x0) returned 0x1 [0245.558] SetErrorMode (uMode=0x1) returned 0x0 [0245.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.559] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.559] SetErrorMode (uMode=0x0) returned 0x1 [0245.559] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.559] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.559] CoTaskMemFree (pv=0xfe030) [0245.560] SetErrorMode (uMode=0x1) returned 0x0 [0245.560] SetErrorMode (uMode=0x0) returned 0x1 [0245.560] GetFileType (hFile=0x18c) returned 0x1 [0245.562] SetErrorMode (uMode=0x1) returned 0x0 [0245.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.562] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.562] SetErrorMode (uMode=0x0) returned 0x1 [0245.563] SetErrorMode (uMode=0x1) returned 0x0 [0245.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.563] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.564] SetErrorMode (uMode=0x0) returned 0x1 [0245.564] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.564] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.564] CoTaskMemFree (pv=0xfe030) [0245.564] SetErrorMode (uMode=0x1) returned 0x0 [0245.565] SetErrorMode (uMode=0x0) returned 0x1 [0245.565] GetFileType (hFile=0x18c) returned 0x1 [0245.566] SetErrorMode (uMode=0x1) returned 0x0 [0245.567] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.568] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.568] SetErrorMode (uMode=0x0) returned 0x1 [0245.568] SetErrorMode (uMode=0x1) returned 0x0 [0245.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.569] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.569] SetErrorMode (uMode=0x0) returned 0x1 [0245.569] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.569] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.570] CoTaskMemFree (pv=0xfe030) [0245.570] SetErrorMode (uMode=0x1) returned 0x0 [0245.570] SetErrorMode (uMode=0x0) returned 0x1 [0245.570] GetFileType (hFile=0x18c) returned 0x1 [0245.572] SetErrorMode (uMode=0x1) returned 0x0 [0245.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.573] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.575] SetErrorMode (uMode=0x0) returned 0x1 [0245.575] SetErrorMode (uMode=0x1) returned 0x0 [0245.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0245.576] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0245.576] SetErrorMode (uMode=0x0) returned 0x1 [0245.576] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.576] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.576] CoTaskMemFree (pv=0xfe030) [0245.577] SetErrorMode (uMode=0x1) returned 0x0 [0245.577] SetErrorMode (uMode=0x0) returned 0x1 [0245.577] GetFileType (hFile=0x18c) returned 0x1 [0245.581] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.581] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.581] CoTaskMemFree (pv=0xfe030) [0245.583] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.583] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.583] CoTaskMemFree (pv=0xfe030) [0245.588] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.588] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.588] CoTaskMemFree (pv=0xfe030) [0245.590] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.590] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.590] CoTaskMemFree (pv=0xfe030) [0245.592] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.592] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.592] CoTaskMemFree (pv=0xfe030) [0245.594] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.594] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.594] CoTaskMemFree (pv=0xfe030) [0245.597] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.597] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.597] CoTaskMemFree (pv=0xfe030) [0245.599] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.599] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.599] CoTaskMemFree (pv=0xfe030) [0245.601] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.601] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.601] CoTaskMemFree (pv=0xfe030) [0245.605] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0245.605] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.606] CoTaskMemFree (pv=0xfe030) [0245.616] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xd4e [0245.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e)) returned 1 [0245.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0245.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63051190, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0245.694] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\4Lp5vLXMZA86tq1p_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\4lp5vlxmza86tq1p_encrypted_by.whiterose")) returned 1 [0245.803] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.803] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.804] CoTaskMemFree (pv=0xffa70) [0245.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.809] CoTaskMemFree (pv=0xffa70) [0245.811] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.811] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.811] CoTaskMemFree (pv=0xffa70) [0245.813] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.813] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.813] CoTaskMemFree (pv=0xffa70) [0245.816] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.816] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.816] CoTaskMemFree (pv=0xffa70) [0245.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.822] CoTaskMemFree (pv=0xffa70) [0245.824] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.824] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.824] CoTaskMemFree (pv=0xffa70) [0245.826] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.826] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.826] CoTaskMemFree (pv=0xffa70) [0245.828] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.828] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.829] CoTaskMemFree (pv=0xffa70) [0245.833] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.833] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.833] CoTaskMemFree (pv=0xffa70) [0245.835] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.835] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.835] CoTaskMemFree (pv=0xffa70) [0245.837] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.837] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.837] CoTaskMemFree (pv=0xffa70) [0245.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.841] CoTaskMemFree (pv=0xffa70) [0245.843] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.843] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.843] CoTaskMemFree (pv=0xffa70) [0245.845] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.845] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.846] CoTaskMemFree (pv=0xffa70) [0245.847] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.847] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.847] CoTaskMemFree (pv=0xffa70) [0245.850] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.850] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.850] CoTaskMemFree (pv=0xffa70) [0245.852] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.852] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.852] CoTaskMemFree (pv=0xffa70) [0245.854] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.854] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.854] CoTaskMemFree (pv=0xffa70) [0245.856] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.856] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.856] CoTaskMemFree (pv=0xffa70) [0245.858] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.858] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.859] CoTaskMemFree (pv=0xffa70) [0245.860] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.860] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.860] CoTaskMemFree (pv=0xffa70) [0245.863] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.863] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.863] CoTaskMemFree (pv=0xffa70) [0245.865] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.865] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.865] CoTaskMemFree (pv=0xffa70) [0245.867] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.867] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.867] CoTaskMemFree (pv=0xffa70) [0245.871] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.871] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.872] CoTaskMemFree (pv=0xffa70) [0245.874] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.874] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.874] CoTaskMemFree (pv=0xffa70) [0245.876] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.876] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.876] CoTaskMemFree (pv=0xffa70) [0245.878] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.878] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.878] CoTaskMemFree (pv=0xffa70) [0245.880] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.880] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.880] CoTaskMemFree (pv=0xffa70) [0245.883] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.883] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.883] CoTaskMemFree (pv=0xffa70) [0245.885] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.885] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.885] CoTaskMemFree (pv=0xffa70) [0245.887] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.887] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.888] CoTaskMemFree (pv=0xffa70) [0245.889] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.889] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.889] CoTaskMemFree (pv=0xffa70) [0245.892] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.892] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.892] CoTaskMemFree (pv=0xffa70) [0245.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.894] CoTaskMemFree (pv=0xffa70) [0245.896] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.896] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.896] CoTaskMemFree (pv=0xffa70) [0245.898] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.898] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.898] CoTaskMemFree (pv=0xffa70) [0245.900] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.900] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.900] CoTaskMemFree (pv=0xffa70) [0245.902] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.902] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.902] CoTaskMemFree (pv=0xffa70) [0245.905] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0245.905] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0245.906] CoTaskMemFree (pv=0xffa70) [0245.915] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xd47 [0245.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47)) returned 1 [0245.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63324bb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0245.999] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\4iuFnqKiADYEXKog_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\4iufnqkiadyexkog_encrypted_by.whiterose")) returned 1 [0246.101] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x9d [0246.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d)) returned 1 [0246.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63513d90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0246.195] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\KaczOQw8IBKEv3h4_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\kaczoqw8ibkev3h4_encrypted_by.whiterose")) returned 1 [0246.303] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5c [0246.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0246.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63702f70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0246.403] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\NK7UseuXQsi95EnP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\nk7useuxqsi95enp_encrypted_by.whiterose")) returned 1 [0246.506] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5f [0246.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0246.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x638cbff0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0246.589] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\RiZe8DrNXjRCCftB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\rize8drnxjrccftb_encrypted_by.whiterose")) returned 1 [0246.693] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.693] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.693] CoTaskMemFree (pv=0xffa70) [0246.699] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.699] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.700] CoTaskMemFree (pv=0xffa70) [0246.702] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.702] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.703] CoTaskMemFree (pv=0xffa70) [0246.704] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.704] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.704] CoTaskMemFree (pv=0xffa70) [0246.707] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.707] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.707] CoTaskMemFree (pv=0xffa70) [0246.709] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.709] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.709] CoTaskMemFree (pv=0xffa70) [0246.715] WriteFile (in: hFile=0x18c, lpBuffer=0x272d1d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x272d1d8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0246.717] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.717] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.717] CoTaskMemFree (pv=0xffa70) [0246.719] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.719] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.719] CoTaskMemFree (pv=0xffa70) [0246.721] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.722] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.722] CoTaskMemFree (pv=0xffa70) [0246.723] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.723] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.724] CoTaskMemFree (pv=0xffa70) [0246.726] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.726] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.726] CoTaskMemFree (pv=0xffa70) [0246.728] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.728] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.728] CoTaskMemFree (pv=0xffa70) [0246.730] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.730] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.730] CoTaskMemFree (pv=0xffa70) [0246.732] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.733] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.733] CoTaskMemFree (pv=0xffa70) [0246.735] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.735] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.735] CoTaskMemFree (pv=0xffa70) [0246.737] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.737] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.737] CoTaskMemFree (pv=0xffa70) [0246.766] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.766] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.766] CoTaskMemFree (pv=0xffa70) [0246.768] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.768] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.768] CoTaskMemFree (pv=0xffa70) [0246.770] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.770] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.771] CoTaskMemFree (pv=0xffa70) [0246.772] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.772] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.773] CoTaskMemFree (pv=0xffa70) [0246.781] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.781] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.781] CoTaskMemFree (pv=0xffa70) [0246.783] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.783] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.783] CoTaskMemFree (pv=0xffa70) [0246.786] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.786] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.786] CoTaskMemFree (pv=0xffa70) [0246.787] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.788] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.788] CoTaskMemFree (pv=0xffa70) [0246.790] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.790] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.790] CoTaskMemFree (pv=0xffa70) [0246.792] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.792] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.792] CoTaskMemFree (pv=0xffa70) [0246.797] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.797] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.797] CoTaskMemFree (pv=0xffa70) [0246.799] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.799] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.799] CoTaskMemFree (pv=0xffa70) [0246.802] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.802] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.802] CoTaskMemFree (pv=0xffa70) [0246.804] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.804] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.804] CoTaskMemFree (pv=0xffa70) [0246.806] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.806] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.806] CoTaskMemFree (pv=0xffa70) [0246.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.808] CoTaskMemFree (pv=0xffa70) [0246.810] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.810] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.811] CoTaskMemFree (pv=0xffa70) [0246.812] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.812] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.812] CoTaskMemFree (pv=0xffa70) [0246.815] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.815] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.815] CoTaskMemFree (pv=0xffa70) [0246.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.827] CoTaskMemFree (pv=0xffa70) [0246.829] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.829] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.830] CoTaskMemFree (pv=0xffa70) [0246.831] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.831] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.832] CoTaskMemFree (pv=0xffa70) [0246.834] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.834] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.834] CoTaskMemFree (pv=0xffa70) [0246.836] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.836] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.836] CoTaskMemFree (pv=0xffa70) [0246.838] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.839] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.839] CoTaskMemFree (pv=0xffa70) [0246.840] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.840] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.841] CoTaskMemFree (pv=0xffa70) [0246.842] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.842] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.843] CoTaskMemFree (pv=0xffa70) [0246.847] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.847] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.847] CoTaskMemFree (pv=0xffa70) [0246.847] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0246.847] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.848] CoTaskMemFree (pv=0xffa70) [0246.865] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x1378 [0246.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0246.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63c11e30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1480)) returned 1 [0246.929] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\SldEKuQoejB8Jv5b_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\sldekuqoejb8jv5b_encrypted_by.whiterose")) returned 1 [0247.036] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x1103 [0247.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0247.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63db4d50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0247.104] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\JOsmoOUGwKjoY1sB_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\josmoougwkjoy1sb_encrypted_by.whiterose")) returned 1 [0247.207] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.207] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.208] CoTaskMemFree (pv=0xffa70) [0247.208] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x5b6c [0247.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0247.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63fca090, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x5c70)) returned 1 [0247.330] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AhG548ZZNa3GctR2_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ahg548zzna3gctr2_encrypted_by.whiterose")) returned 1 [0247.425] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0247.426] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.426] CoTaskMemFree (pv=0xfe030) [0247.426] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xe0 [0247.435] CloseHandle (hObject=0x18c) returned 1 [0247.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0247.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x641b9270, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0247.524] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\tf5BtDElLyES5Tra_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\tf5btdellyes5tra_encrypted_by.whiterose")) returned 1 [0247.636] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.636] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.636] CoTaskMemFree (pv=0xffa70) [0247.639] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.639] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.639] CoTaskMemFree (pv=0xffa70) [0247.646] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.646] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.646] CoTaskMemFree (pv=0xffa70) [0247.648] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.648] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.648] CoTaskMemFree (pv=0xffa70) [0247.650] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.650] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.650] CoTaskMemFree (pv=0xffa70) [0247.652] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.652] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.652] CoTaskMemFree (pv=0xffa70) [0247.655] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.655] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.655] CoTaskMemFree (pv=0xffa70) [0247.657] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.657] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.657] CoTaskMemFree (pv=0xffa70) [0247.659] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.660] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.660] CoTaskMemFree (pv=0xffa70) [0247.663] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.663] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.663] CoTaskMemFree (pv=0xffa70) [0247.666] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.666] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.666] CoTaskMemFree (pv=0xffa70) [0247.668] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.668] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.668] CoTaskMemFree (pv=0xffa70) [0247.670] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.670] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.670] CoTaskMemFree (pv=0xffa70) [0247.672] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.672] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.672] CoTaskMemFree (pv=0xffa70) [0247.674] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.674] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.675] CoTaskMemFree (pv=0xffa70) [0247.676] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.676] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.676] CoTaskMemFree (pv=0xffa70) [0247.679] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.679] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.679] CoTaskMemFree (pv=0xffa70) [0247.680] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.681] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.681] CoTaskMemFree (pv=0xffa70) [0247.692] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.692] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.692] CoTaskMemFree (pv=0xffa70) [0247.695] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.695] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.695] CoTaskMemFree (pv=0xffa70) [0247.697] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.697] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.697] CoTaskMemFree (pv=0xffa70) [0247.702] WriteFile (in: hFile=0x18c, lpBuffer=0x272f540*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x272f540*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0247.705] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.705] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.705] CoTaskMemFree (pv=0xffa70) [0247.707] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.707] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.707] CoTaskMemFree (pv=0xffa70) [0247.710] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.710] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.710] CoTaskMemFree (pv=0xffa70) [0247.712] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.712] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.712] CoTaskMemFree (pv=0xffa70) [0247.714] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.714] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.715] CoTaskMemFree (pv=0xffa70) [0247.717] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.717] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.717] CoTaskMemFree (pv=0xffa70) [0247.719] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.719] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.719] CoTaskMemFree (pv=0xffa70) [0247.721] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.721] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.721] CoTaskMemFree (pv=0xffa70) [0247.724] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.724] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.724] CoTaskMemFree (pv=0xffa70) [0247.725] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.726] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.726] CoTaskMemFree (pv=0xffa70) [0247.767] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.767] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.767] CoTaskMemFree (pv=0xffa70) [0247.769] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.769] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.769] CoTaskMemFree (pv=0xffa70) [0247.771] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.771] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.772] CoTaskMemFree (pv=0xffa70) [0247.774] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.774] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.774] CoTaskMemFree (pv=0xffa70) [0247.776] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.776] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.776] CoTaskMemFree (pv=0xffa70) [0247.778] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.778] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.778] CoTaskMemFree (pv=0xffa70) [0247.782] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.782] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.782] CoTaskMemFree (pv=0xffa70) [0247.784] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.784] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.785] CoTaskMemFree (pv=0xffa70) [0247.787] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.787] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.787] CoTaskMemFree (pv=0xffa70) [0247.789] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.789] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.789] CoTaskMemFree (pv=0xffa70) [0247.793] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.793] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.794] CoTaskMemFree (pv=0xffa70) [0247.795] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.795] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.796] CoTaskMemFree (pv=0xffa70) [0247.797] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.797] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.798] CoTaskMemFree (pv=0xffa70) [0247.800] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.800] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.800] CoTaskMemFree (pv=0xffa70) [0247.803] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.803] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.804] CoTaskMemFree (pv=0xffa70) [0247.805] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.805] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.805] CoTaskMemFree (pv=0xffa70) [0247.808] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.808] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.808] CoTaskMemFree (pv=0xffa70) [0247.810] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.810] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.810] CoTaskMemFree (pv=0xffa70) [0247.812] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.812] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.812] CoTaskMemFree (pv=0xffa70) [0247.814] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.814] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.814] CoTaskMemFree (pv=0xffa70) [0247.817] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.817] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.817] CoTaskMemFree (pv=0xffa70) [0247.819] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.819] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.819] CoTaskMemFree (pv=0xffa70) [0247.821] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.821] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.821] CoTaskMemFree (pv=0xffa70) [0247.823] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.823] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.823] CoTaskMemFree (pv=0xffa70) [0247.825] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.825] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.826] CoTaskMemFree (pv=0xffa70) [0247.827] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.827] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.828] CoTaskMemFree (pv=0xffa70) [0247.830] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.830] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.830] CoTaskMemFree (pv=0xffa70) [0247.832] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.832] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.832] CoTaskMemFree (pv=0xffa70) [0247.835] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.835] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.835] CoTaskMemFree (pv=0xffa70) [0247.837] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.837] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.837] CoTaskMemFree (pv=0xffa70) [0247.841] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.841] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.841] CoTaskMemFree (pv=0xffa70) [0247.844] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.844] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.845] CoTaskMemFree (pv=0xffa70) [0247.847] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.847] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.847] CoTaskMemFree (pv=0xffa70) [0247.849] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.849] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.849] CoTaskMemFree (pv=0xffa70) [0247.851] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.851] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.851] CoTaskMemFree (pv=0xffa70) [0247.853] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.853] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.853] CoTaskMemFree (pv=0xffa70) [0247.855] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.855] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.856] CoTaskMemFree (pv=0xffa70) [0247.857] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.857] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.858] CoTaskMemFree (pv=0xffa70) [0247.861] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.861] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.861] CoTaskMemFree (pv=0xffa70) [0247.861] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0247.861] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.862] CoTaskMemFree (pv=0xffa70) [0247.873] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x32a2e [0247.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1 [0247.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x645e38f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x32b30)) returned 1 [0247.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\MtwSMwsAPIA4uek6_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\mtwsmwsapia4uek6_encrypted_by.whiterose")) returned 1 [0248.066] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x3b059 [0248.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1 [0251.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0251.559] SetErrorMode (uMode=0x1) returned 0x0 [0251.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0251.561] GetFileType (hFile=0x18c) returned 0x1 [0251.561] SetErrorMode (uMode=0x0) returned 0x1 [0251.561] GetFileType (hFile=0x18c) returned 0x1 [0251.562] WriteFile (in: hFile=0x18c, lpBuffer=0x341bd5e0*, nNumberOfBytesToWrite=0x3b160, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x341bd5e0*, lpNumberOfBytesWritten=0x27e3a8*=0x3b160, lpOverlapped=0x0) returned 1 [0251.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0251.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\Q3pcqVpqXy0x3RqR_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\Q3pcqVpqXy0x3RqR_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xa9 [0251.577] SetErrorMode (uMode=0x1) returned 0x0 [0251.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x66841690, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3b160)) returned 1 [0251.577] SetErrorMode (uMode=0x0) returned 0x1 [0251.578] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\Q3pcqVpqXy0x3RqR_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\q3pcqvpqxy0x3rqr_encrypted_by.whiterose")) returned 1 [0251.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", lpFilePart=0x0) returned 0x8f [0251.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", lpFilePart=0x0) returned 0x8f [0251.685] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0251.685] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0251.686] CoTaskMemFree (pv=0xffa70) [0251.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0251.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0251.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0251.687] SetErrorMode (uMode=0x1) returned 0x0 [0251.687] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0251.688] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0251.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0 [0251.690] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0251.690] SetErrorMode (uMode=0x0) returned 0x1 [0251.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0251.690] SetErrorMode (uMode=0x1) returned 0x0 [0251.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0251.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.691] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0251.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0 [0251.692] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0251.692] SetErrorMode (uMode=0x0) returned 0x1 [0251.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0251.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0251.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0251.693] SetErrorMode (uMode=0x1) returned 0x0 [0251.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0251.694] GetFileType (hFile=0x18c) returned 0x1 [0251.694] SetErrorMode (uMode=0x0) returned 0x1 [0251.694] GetFileType (hFile=0x18c) returned 0x1 [0251.694] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x6cd [0251.694] ReadFile (in: hFile=0x18c, lpBuffer=0x26feff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x26feff0*, lpNumberOfBytesRead=0x27e288*=0x6cd, lpOverlapped=0x0) returned 1 [0251.699] CloseHandle (hObject=0x18c) returned 1 [0251.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0251.701] SetErrorMode (uMode=0x1) returned 0x0 [0251.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd)) returned 1 [0251.701] SetErrorMode (uMode=0x0) returned 0x1 [0251.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0251.849] SetErrorMode (uMode=0x1) returned 0x0 [0251.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0251.852] GetFileType (hFile=0x18c) returned 0x1 [0251.852] SetErrorMode (uMode=0x0) returned 0x1 [0251.852] GetFileType (hFile=0x18c) returned 0x1 [0251.852] WriteFile (in: hFile=0x18c, lpBuffer=0x275fdd0*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x275fdd0*, lpNumberOfBytesWritten=0x27e228*=0x7d0, lpOverlapped=0x0) returned 1 [0251.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0251.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\uV4ElyV2G6nWVFD1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\uV4ElyV2G6nWVFD1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xad [0251.854] SetErrorMode (uMode=0x1) returned 0x0 [0251.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x66aeef50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0251.854] SetErrorMode (uMode=0x0) returned 0x1 [0251.854] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\uV4ElyV2G6nWVFD1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\uv4elyv2g6nwvfd1_encrypted_by.whiterose")) returned 1 [0251.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x9f [0251.967] SetErrorMode (uMode=0x1) returned 0x0 [0251.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0251.968] GetFileType (hFile=0x18c) returned 0x1 [0251.968] SetErrorMode (uMode=0x0) returned 0x1 [0251.968] GetFileType (hFile=0x18c) returned 0x1 [0251.970] WriteFile (in: hFile=0x18c, lpBuffer=0x2773610*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e248, lpOverlapped=0x0 | out: lpBuffer=0x2773610*, lpNumberOfBytesWritten=0x27e248*=0x1000, lpOverlapped=0x0) returned 1 [0251.971] WriteFile (in: hFile=0x18c, lpBuffer=0x2773610*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e2a8, lpOverlapped=0x0 | out: lpBuffer=0x2773610*, lpNumberOfBytesWritten=0x27e2a8*=0xb14, lpOverlapped=0x0) returned 1 [0251.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0251.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0251.973] SetErrorMode (uMode=0x1) returned 0x0 [0251.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0251.974] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.974] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0 [0251.975] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0251.975] SetErrorMode (uMode=0x0) returned 0x1 [0251.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0251.976] SetErrorMode (uMode=0x1) returned 0x0 [0251.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0251.976] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0 [0251.978] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0251.978] SetErrorMode (uMode=0x0) returned 0x1 [0251.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0251.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0251.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0251.979] SetErrorMode (uMode=0x1) returned 0x0 [0251.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0251.981] GetFileType (hFile=0x18c) returned 0x1 [0251.981] SetErrorMode (uMode=0x0) returned 0x1 [0251.981] GetFileType (hFile=0x18c) returned 0x1 [0251.981] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x32a [0251.981] ReadFile (in: hFile=0x18c, lpBuffer=0x277c120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x277c120*, lpNumberOfBytesRead=0x27e288*=0x32a, lpOverlapped=0x0) returned 1 [0251.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0251.983] SetErrorMode (uMode=0x1) returned 0x0 [0251.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a)) returned 1 [0251.983] SetErrorMode (uMode=0x0) returned 0x1 [0252.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0252.046] SetErrorMode (uMode=0x1) returned 0x0 [0252.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.047] GetFileType (hFile=0x18c) returned 0x1 [0252.047] SetErrorMode (uMode=0x0) returned 0x1 [0252.047] GetFileType (hFile=0x18c) returned 0x1 [0252.047] WriteFile (in: hFile=0x18c, lpBuffer=0x27dc670*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x27dc670*, lpNumberOfBytesWritten=0x27e228*=0x430, lpOverlapped=0x0) returned 1 [0252.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0252.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\hmsDd9P1rHoj7Rju_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\hmsDd9P1rHoj7Rju_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0252.049] SetErrorMode (uMode=0x1) returned 0x0 [0252.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x66cde130, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0252.049] SetErrorMode (uMode=0x0) returned 0x1 [0252.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\hmsDd9P1rHoj7Rju_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\hmsdd9p1rhoj7rju_encrypted_by.whiterose")) returned 1 [0252.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa0 [0252.154] SetErrorMode (uMode=0x1) returned 0x0 [0252.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0252.155] GetFileType (hFile=0x18c) returned 0x1 [0252.155] SetErrorMode (uMode=0x0) returned 0x1 [0252.155] GetFileType (hFile=0x18c) returned 0x1 [0252.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0252.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0252.159] SetErrorMode (uMode=0x1) returned 0x0 [0252.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0252.161] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0252.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0252.162] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0252.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0252.163] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0252.164] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0252.164] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0252.164] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0252.165] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0 [0252.165] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0252.166] SetErrorMode (uMode=0x0) returned 0x1 [0252.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0252.166] SetErrorMode (uMode=0x1) returned 0x0 [0252.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0252.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.168] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0252.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0252.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0252.169] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0252.170] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0252.170] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0252.170] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0252.171] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0252.171] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0 [0252.172] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0252.172] SetErrorMode (uMode=0x0) returned 0x1 [0252.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x94 [0252.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x94 [0252.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x94 [0252.173] SetErrorMode (uMode=0x1) returned 0x0 [0252.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.174] GetFileType (hFile=0x18c) returned 0x1 [0252.174] SetErrorMode (uMode=0x0) returned 0x1 [0252.175] GetFileType (hFile=0x18c) returned 0x1 [0252.175] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x112dc [0252.175] ReadFile (in: hFile=0x18c, lpBuffer=0x27f9848, nNumberOfBytesToRead=0x112dc, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x27f9848*, lpNumberOfBytesRead=0x27e288*=0x112dc, lpOverlapped=0x0) returned 1 [0252.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x94 [0252.177] SetErrorMode (uMode=0x1) returned 0x0 [0252.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1 [0252.178] SetErrorMode (uMode=0x0) returned 0x1 [0252.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x94 [0252.243] SetErrorMode (uMode=0x1) returned 0x0 [0252.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.244] GetFileType (hFile=0x18c) returned 0x1 [0252.244] SetErrorMode (uMode=0x0) returned 0x1 [0252.245] GetFileType (hFile=0x18c) returned 0x1 [0252.245] WriteFile (in: hFile=0x18c, lpBuffer=0x28ad0b8*, nNumberOfBytesToWrite=0x113e0, lpNumberOfBytesWritten=0x27e308, lpOverlapped=0x0 | out: lpBuffer=0x28ad0b8*, lpNumberOfBytesWritten=0x27e308*=0x113e0, lpOverlapped=0x0) returned 1 [0252.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x94 [0252.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\PDFKqEkkqad2YWIE_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\PDFKqEkkqad2YWIE_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0252.247] SetErrorMode (uMode=0x1) returned 0x0 [0252.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x66ecd310, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x113e0)) returned 1 [0252.248] SetErrorMode (uMode=0x0) returned 0x1 [0252.248] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\PDFKqEkkqad2YWIE_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\pdfkqekkqad2ywie_encrypted_by.whiterose")) returned 1 [0252.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0252.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0252.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0252.356] SetErrorMode (uMode=0x1) returned 0x0 [0252.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.356] GetFileType (hFile=0x18c) returned 0x1 [0252.356] SetErrorMode (uMode=0x0) returned 0x1 [0252.356] GetFileType (hFile=0x18c) returned 0x1 [0252.356] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x1109 [0252.356] ReadFile (in: hFile=0x18c, lpBuffer=0x28c0360, nNumberOfBytesToRead=0x1109, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x28c0360*, lpNumberOfBytesRead=0x27e288*=0x1109, lpOverlapped=0x0) returned 1 [0252.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0252.368] SetErrorMode (uMode=0x1) returned 0x0 [0252.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1 [0252.368] SetErrorMode (uMode=0x0) returned 0x1 [0252.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0252.437] SetErrorMode (uMode=0x1) returned 0x0 [0252.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.438] GetFileType (hFile=0x18c) returned 0x1 [0252.438] SetErrorMode (uMode=0x0) returned 0x1 [0252.438] GetFileType (hFile=0x18c) returned 0x1 [0252.438] WriteFile (in: hFile=0x18c, lpBuffer=0x27232e8*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x27e308, lpOverlapped=0x0 | out: lpBuffer=0x27232e8*, lpNumberOfBytesWritten=0x27e308*=0x1210, lpOverlapped=0x0) returned 1 [0252.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0252.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3O5SiXzEHvJNcKj5_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3O5SiXzEHvJNcKj5_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0252.440] SetErrorMode (uMode=0x1) returned 0x0 [0252.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67096390, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0252.440] SetErrorMode (uMode=0x0) returned 0x1 [0252.440] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3O5SiXzEHvJNcKj5_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3o5sixzehvjnckj5_encrypted_by.whiterose")) returned 1 [0252.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0252.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0252.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0252.543] SetErrorMode (uMode=0x1) returned 0x0 [0252.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.545] GetFileType (hFile=0x18c) returned 0x1 [0252.545] SetErrorMode (uMode=0x0) returned 0x1 [0252.545] GetFileType (hFile=0x18c) returned 0x1 [0252.545] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x22c [0252.545] ReadFile (in: hFile=0x18c, lpBuffer=0x27265f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x27265f8*, lpNumberOfBytesRead=0x27e288*=0x22c, lpOverlapped=0x0) returned 1 [0252.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0252.546] SetErrorMode (uMode=0x1) returned 0x0 [0252.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1 [0252.547] SetErrorMode (uMode=0x0) returned 0x1 [0252.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0252.612] SetErrorMode (uMode=0x1) returned 0x0 [0252.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.616] GetFileType (hFile=0x18c) returned 0x1 [0252.616] SetErrorMode (uMode=0x0) returned 0x1 [0252.616] GetFileType (hFile=0x18c) returned 0x1 [0252.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0252.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\JFMNJmmsPsuNL3cQ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\JFMNJmmsPsuNL3cQ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0252.619] SetErrorMode (uMode=0x1) returned 0x0 [0252.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x672392b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0252.620] SetErrorMode (uMode=0x0) returned 0x1 [0252.620] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\JFMNJmmsPsuNL3cQ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\jfmnjmmspsunl3cq_encrypted_by.whiterose")) returned 1 [0252.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.730] SetErrorMode (uMode=0x1) returned 0x0 [0252.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.731] GetFileType (hFile=0x18c) returned 0x1 [0252.731] SetErrorMode (uMode=0x0) returned 0x1 [0252.731] GetFileType (hFile=0x18c) returned 0x1 [0252.731] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0xa0 [0252.731] ReadFile (in: hFile=0x18c, lpBuffer=0x2785628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x2785628*, lpNumberOfBytesRead=0x27e288*=0xa0, lpOverlapped=0x0) returned 1 [0252.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.733] SetErrorMode (uMode=0x1) returned 0x0 [0252.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0252.733] SetErrorMode (uMode=0x0) returned 0x1 [0252.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.806] SetErrorMode (uMode=0x1) returned 0x0 [0252.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.807] GetFileType (hFile=0x18c) returned 0x1 [0252.807] SetErrorMode (uMode=0x0) returned 0x1 [0252.807] GetFileType (hFile=0x18c) returned 0x1 [0252.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\qxuH*M0hYpfMjk7C_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\qxuH*M0hYpfMjk7C_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0252.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x27baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0252.823] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 1 [0252.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0252.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0252.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0252.825] SetErrorMode (uMode=0x1) returned 0x0 [0252.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0252.826] GetFileType (hFile=0x18c) returned 0x1 [0252.826] SetErrorMode (uMode=0x0) returned 0x1 [0252.826] GetFileType (hFile=0x18c) returned 0x1 [0252.826] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0xfc [0252.826] ReadFile (in: hFile=0x18c, lpBuffer=0x27e50f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x27e50f8*, lpNumberOfBytesRead=0x27e288*=0xfc, lpOverlapped=0x0) returned 1 [0252.827] CloseHandle (hObject=0x18c) returned 1 [0252.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0252.828] SetErrorMode (uMode=0x1) returned 0x0 [0252.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0252.828] SetErrorMode (uMode=0x0) returned 0x1 [0253.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0253.014] SetErrorMode (uMode=0x1) returned 0x0 [0253.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.016] GetFileType (hFile=0x18c) returned 0x1 [0253.016] SetErrorMode (uMode=0x0) returned 0x1 [0253.016] GetFileType (hFile=0x18c) returned 0x1 [0253.016] WriteFile (in: hFile=0x18c, lpBuffer=0x2841fa0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x2841fa0*, lpNumberOfBytesWritten=0x27e228*=0x200, lpOverlapped=0x0) returned 1 [0253.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0253.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\x9bLBWgrA6vaWdUk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\x9bLBWgrA6vaWdUk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0253.018] SetErrorMode (uMode=0x1) returned 0x0 [0253.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67617670, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0253.018] SetErrorMode (uMode=0x0) returned 0x1 [0253.019] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\x9bLBWgrA6vaWdUk_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\x9blbwgra6vawduk_encrypted_by.whiterose")) returned 1 [0253.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0253.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0253.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0253.120] SetErrorMode (uMode=0x1) returned 0x0 [0253.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.120] GetFileType (hFile=0x18c) returned 0x1 [0253.120] SetErrorMode (uMode=0x0) returned 0x1 [0253.120] GetFileType (hFile=0x18c) returned 0x1 [0253.120] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0xa0 [0253.120] ReadFile (in: hFile=0x18c, lpBuffer=0x2844c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x2844c70*, lpNumberOfBytesRead=0x27e288*=0xa0, lpOverlapped=0x0) returned 1 [0253.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0253.122] SetErrorMode (uMode=0x1) returned 0x0 [0253.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0253.122] SetErrorMode (uMode=0x0) returned 0x1 [0253.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0253.258] SetErrorMode (uMode=0x1) returned 0x0 [0253.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.259] GetFileType (hFile=0x18c) returned 0x1 [0253.259] SetErrorMode (uMode=0x0) returned 0x1 [0253.259] GetFileType (hFile=0x18c) returned 0x1 [0253.259] WriteFile (in: hFile=0x18c, lpBuffer=0x28a1668*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x28a1668*, lpNumberOfBytesWritten=0x27e228*=0x1b0, lpOverlapped=0x0) returned 1 [0253.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0253.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\aZ7XeBTWceAgpd7b_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\aZ7XeBTWceAgpd7b_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0253.261] SetErrorMode (uMode=0x1) returned 0x0 [0253.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67878c70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0253.261] SetErrorMode (uMode=0x0) returned 0x1 [0253.261] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\aZ7XeBTWceAgpd7b_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\az7xebtwceagpd7b_encrypted_by.whiterose")) returned 1 [0253.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0253.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0253.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0253.369] SetErrorMode (uMode=0x1) returned 0x0 [0253.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.378] GetFileType (hFile=0x18c) returned 0x1 [0253.378] SetErrorMode (uMode=0x0) returned 0x1 [0253.378] GetFileType (hFile=0x18c) returned 0x1 [0253.378] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0xa6 [0253.378] ReadFile (in: hFile=0x18c, lpBuffer=0x28a4358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x28a4358*, lpNumberOfBytesRead=0x27e288*=0xa6, lpOverlapped=0x0) returned 1 [0253.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0253.380] SetErrorMode (uMode=0x1) returned 0x0 [0253.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1 [0253.380] SetErrorMode (uMode=0x0) returned 0x1 [0253.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0253.483] SetErrorMode (uMode=0x1) returned 0x0 [0253.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.484] GetFileType (hFile=0x18c) returned 0x1 [0253.484] SetErrorMode (uMode=0x0) returned 0x1 [0253.484] GetFileType (hFile=0x18c) returned 0x1 [0253.484] WriteFile (in: hFile=0x18c, lpBuffer=0x2900e60*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x2900e60*, lpNumberOfBytesWritten=0x27e228*=0x1b0, lpOverlapped=0x0) returned 1 [0253.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0253.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\MkQi86Ul0pLrhh6j_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\MkQi86Ul0pLrhh6j_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0253.486] SetErrorMode (uMode=0x1) returned 0x0 [0253.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67a8dfb0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0253.486] SetErrorMode (uMode=0x0) returned 0x1 [0253.486] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\MkQi86Ul0pLrhh6j_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\mkqi86ul0plrhh6j_encrypted_by.whiterose")) returned 1 [0253.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0253.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0253.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0253.588] SetErrorMode (uMode=0x1) returned 0x0 [0253.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.589] GetFileType (hFile=0x18c) returned 0x1 [0253.589] SetErrorMode (uMode=0x0) returned 0x1 [0253.589] GetFileType (hFile=0x18c) returned 0x1 [0253.589] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0xa0 [0253.590] ReadFile (in: hFile=0x18c, lpBuffer=0x2903b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x2903b40*, lpNumberOfBytesRead=0x27e288*=0xa0, lpOverlapped=0x0) returned 1 [0253.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0253.592] SetErrorMode (uMode=0x1) returned 0x0 [0253.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0253.592] SetErrorMode (uMode=0x0) returned 0x1 [0253.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0253.711] SetErrorMode (uMode=0x1) returned 0x0 [0253.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0253.713] GetFileType (hFile=0x18c) returned 0x1 [0253.713] SetErrorMode (uMode=0x0) returned 0x1 [0253.713] GetFileType (hFile=0x18c) returned 0x1 [0253.713] WriteFile (in: hFile=0x18c, lpBuffer=0x2760618*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x2760618*, lpNumberOfBytesWritten=0x27e228*=0x1b0, lpOverlapped=0x0) returned 1 [0253.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0253.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\FidQwAzJ8OnD0HGs_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\FidQwAzJ8OnD0HGs_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb0 [0253.714] SetErrorMode (uMode=0x1) returned 0x0 [0253.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67cc9450, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0253.714] SetErrorMode (uMode=0x0) returned 0x1 [0253.715] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\FidQwAzJ8OnD0HGs_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\fidqwazj8ond0hgs_encrypted_by.whiterose")) returned 1 [0253.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa2 [0253.822] SetErrorMode (uMode=0x1) returned 0x0 [0253.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.823] GetFileType (hFile=0x18c) returned 0x1 [0253.823] SetErrorMode (uMode=0x0) returned 0x1 [0253.823] GetFileType (hFile=0x18c) returned 0x1 [0253.825] WriteFile (in: hFile=0x18c, lpBuffer=0x2773ed0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e248, lpOverlapped=0x0 | out: lpBuffer=0x2773ed0*, lpNumberOfBytesWritten=0x27e248*=0x1000, lpOverlapped=0x0) returned 1 [0253.827] WriteFile (in: hFile=0x18c, lpBuffer=0x2773ed0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e2a8, lpOverlapped=0x0 | out: lpBuffer=0x2773ed0*, lpNumberOfBytesWritten=0x27e2a8*=0xb14, lpOverlapped=0x0) returned 1 [0253.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0253.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0253.829] SetErrorMode (uMode=0x1) returned 0x0 [0253.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0253.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0253.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0253.833] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0253.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0253.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0253.834] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0253.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0253.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0253.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0253.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0253.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0253.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0253.837] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0253.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0253.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0253.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0253.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0253.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0253.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0253.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0253.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0253.841] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0253.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0253.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0253.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0253.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0253.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0253.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0253.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0253.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0253.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0253.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0253.846] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0253.846] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0253.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0253.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0253.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0253.848] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0253.848] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0253.849] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0253.849] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.850] SetErrorMode (uMode=0x0) returned 0x1 [0253.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0253.850] SetErrorMode (uMode=0x1) returned 0x0 [0253.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0253.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0253.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0253.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0253.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0253.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0253.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0253.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0253.855] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0253.856] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0253.856] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0253.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0253.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0253.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0253.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0253.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0253.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0253.859] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0253.860] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0253.860] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0253.860] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0253.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0253.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0253.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0253.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0253.862] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0253.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0253.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0253.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0253.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0253.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0253.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0253.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0253.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0253.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0253.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0253.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0253.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0253.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0253.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0253.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0253.869] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.870] SetErrorMode (uMode=0x0) returned 0x1 [0253.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0253.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0253.871] SetErrorMode (uMode=0x1) returned 0x0 [0253.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.873] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.874] SetErrorMode (uMode=0x0) returned 0x1 [0253.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0253.874] SetErrorMode (uMode=0x1) returned 0x0 [0253.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.876] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.876] SetErrorMode (uMode=0x0) returned 0x1 [0253.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x9b [0253.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x9b [0253.876] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.876] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.877] CoTaskMemFree (pv=0xfe030) [0253.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.878] SetErrorMode (uMode=0x1) returned 0x0 [0253.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.878] GetFileType (hFile=0x18c) returned 0x1 [0253.878] SetErrorMode (uMode=0x0) returned 0x1 [0253.878] GetFileType (hFile=0x18c) returned 0x1 [0253.880] WriteFile (in: hFile=0x18c, lpBuffer=0x2795700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x2795700*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0253.882] WriteFile (in: hFile=0x18c, lpBuffer=0x2795700*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x2795700*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0253.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0253.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0253.883] SetErrorMode (uMode=0x1) returned 0x0 [0253.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.884] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.885] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.885] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.886] SetErrorMode (uMode=0x0) returned 0x1 [0253.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0253.886] SetErrorMode (uMode=0x1) returned 0x0 [0253.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.887] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.887] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.888] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.888] SetErrorMode (uMode=0x0) returned 0x1 [0253.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x9b [0253.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x9b [0253.888] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.888] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.889] CoTaskMemFree (pv=0xfe030) [0253.889] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.889] SetErrorMode (uMode=0x1) returned 0x0 [0253.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.890] GetFileType (hFile=0x18c) returned 0x1 [0253.890] SetErrorMode (uMode=0x0) returned 0x1 [0253.890] GetFileType (hFile=0x18c) returned 0x1 [0253.892] WriteFile (in: hFile=0x18c, lpBuffer=0x27af8a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x27af8a0*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0253.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0253.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0253.894] SetErrorMode (uMode=0x1) returned 0x0 [0253.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.895] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.895] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.896] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.896] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.896] SetErrorMode (uMode=0x0) returned 0x1 [0253.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0253.897] SetErrorMode (uMode=0x1) returned 0x0 [0253.897] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.897] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.899] SetErrorMode (uMode=0x0) returned 0x1 [0253.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x9b [0253.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x9b [0253.899] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.899] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.900] CoTaskMemFree (pv=0xfe030) [0253.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.900] SetErrorMode (uMode=0x1) returned 0x0 [0253.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.901] GetFileType (hFile=0x18c) returned 0x1 [0253.901] SetErrorMode (uMode=0x0) returned 0x1 [0253.901] GetFileType (hFile=0x18c) returned 0x1 [0253.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0253.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0253.903] SetErrorMode (uMode=0x1) returned 0x0 [0253.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.904] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.905] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.906] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.906] SetErrorMode (uMode=0x0) returned 0x1 [0253.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0253.906] SetErrorMode (uMode=0x1) returned 0x0 [0253.906] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.907] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.907] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.908] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.908] SetErrorMode (uMode=0x0) returned 0x1 [0253.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x9b [0253.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x9b [0253.909] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.909] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.909] CoTaskMemFree (pv=0xfe030) [0253.909] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.910] SetErrorMode (uMode=0x1) returned 0x0 [0253.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.910] GetFileType (hFile=0x18c) returned 0x1 [0253.910] SetErrorMode (uMode=0x0) returned 0x1 [0253.910] GetFileType (hFile=0x18c) returned 0x1 [0253.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0253.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0253.912] SetErrorMode (uMode=0x1) returned 0x0 [0253.912] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.913] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.913] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.914] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.914] SetErrorMode (uMode=0x0) returned 0x1 [0253.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0253.915] SetErrorMode (uMode=0x1) returned 0x0 [0253.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.915] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.917] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.917] SetErrorMode (uMode=0x0) returned 0x1 [0253.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x9b [0253.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x9b [0253.917] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.917] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.918] CoTaskMemFree (pv=0xfe030) [0253.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.918] SetErrorMode (uMode=0x1) returned 0x0 [0253.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.919] GetFileType (hFile=0x18c) returned 0x1 [0253.919] SetErrorMode (uMode=0x0) returned 0x1 [0253.919] GetFileType (hFile=0x18c) returned 0x1 [0253.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0253.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0253.921] SetErrorMode (uMode=0x1) returned 0x0 [0253.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.931] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.931] SetErrorMode (uMode=0x0) returned 0x1 [0253.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0253.932] SetErrorMode (uMode=0x1) returned 0x0 [0253.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.933] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.934] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.934] SetErrorMode (uMode=0x0) returned 0x1 [0253.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x9b [0253.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x9b [0253.934] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.934] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.935] CoTaskMemFree (pv=0xfe030) [0253.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.935] SetErrorMode (uMode=0x1) returned 0x0 [0253.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.936] GetFileType (hFile=0x18c) returned 0x1 [0253.936] SetErrorMode (uMode=0x0) returned 0x1 [0253.936] GetFileType (hFile=0x18c) returned 0x1 [0253.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0253.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0253.938] SetErrorMode (uMode=0x1) returned 0x0 [0253.938] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.940] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.940] SetErrorMode (uMode=0x0) returned 0x1 [0253.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0253.941] SetErrorMode (uMode=0x1) returned 0x0 [0253.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.941] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.942] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.942] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.942] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.943] SetErrorMode (uMode=0x0) returned 0x1 [0253.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x9b [0253.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x9b [0253.943] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.943] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.944] CoTaskMemFree (pv=0xfe030) [0253.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.944] SetErrorMode (uMode=0x1) returned 0x0 [0253.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.945] GetFileType (hFile=0x18c) returned 0x1 [0253.945] SetErrorMode (uMode=0x0) returned 0x1 [0253.945] GetFileType (hFile=0x18c) returned 0x1 [0253.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0253.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0253.946] SetErrorMode (uMode=0x1) returned 0x0 [0253.947] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.948] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.949] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.950] SetErrorMode (uMode=0x0) returned 0x1 [0253.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0253.950] SetErrorMode (uMode=0x1) returned 0x0 [0253.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.951] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.952] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.952] SetErrorMode (uMode=0x0) returned 0x1 [0253.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x9e [0253.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x9e [0253.952] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.952] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.953] CoTaskMemFree (pv=0xfe030) [0253.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xaa [0253.953] SetErrorMode (uMode=0x1) returned 0x0 [0253.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.954] GetFileType (hFile=0x18c) returned 0x1 [0253.954] SetErrorMode (uMode=0x0) returned 0x1 [0253.954] GetFileType (hFile=0x18c) returned 0x1 [0253.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0253.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0253.956] SetErrorMode (uMode=0x1) returned 0x0 [0253.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.958] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.958] SetErrorMode (uMode=0x0) returned 0x1 [0253.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0253.958] SetErrorMode (uMode=0x1) returned 0x0 [0253.958] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.959] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.960] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.960] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.960] SetErrorMode (uMode=0x0) returned 0x1 [0253.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x9b [0253.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x9b [0253.961] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.961] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.961] CoTaskMemFree (pv=0xfe030) [0253.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.962] SetErrorMode (uMode=0x1) returned 0x0 [0253.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.963] SetErrorMode (uMode=0x0) returned 0x1 [0253.963] GetFileType (hFile=0x18c) returned 0x1 [0253.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0253.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0253.965] SetErrorMode (uMode=0x1) returned 0x0 [0253.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.966] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.966] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.967] SetErrorMode (uMode=0x0) returned 0x1 [0253.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0253.967] SetErrorMode (uMode=0x1) returned 0x0 [0253.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.967] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.968] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.968] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.968] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.968] SetErrorMode (uMode=0x0) returned 0x1 [0253.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x9f [0253.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x9f [0253.969] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.969] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.969] CoTaskMemFree (pv=0xfe030) [0253.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xab [0253.970] SetErrorMode (uMode=0x1) returned 0x0 [0253.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.970] SetErrorMode (uMode=0x0) returned 0x1 [0253.970] GetFileType (hFile=0x18c) returned 0x1 [0253.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0253.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0253.972] SetErrorMode (uMode=0x1) returned 0x0 [0253.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.973] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.974] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.974] SetErrorMode (uMode=0x0) returned 0x1 [0253.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0253.975] SetErrorMode (uMode=0x1) returned 0x0 [0253.975] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.975] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.975] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.975] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.976] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.976] SetErrorMode (uMode=0x0) returned 0x1 [0253.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x9b [0253.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x9b [0253.977] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.977] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.977] CoTaskMemFree (pv=0xfe030) [0253.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.978] SetErrorMode (uMode=0x1) returned 0x0 [0253.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.978] SetErrorMode (uMode=0x0) returned 0x1 [0253.978] GetFileType (hFile=0x18c) returned 0x1 [0253.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0253.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0253.980] SetErrorMode (uMode=0x1) returned 0x0 [0253.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.982] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.983] SetErrorMode (uMode=0x0) returned 0x1 [0253.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0253.983] SetErrorMode (uMode=0x1) returned 0x0 [0253.983] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.984] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.984] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.984] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.984] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.985] SetErrorMode (uMode=0x0) returned 0x1 [0253.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x9b [0253.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x9b [0253.986] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.986] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.986] CoTaskMemFree (pv=0xfe030) [0253.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0253.986] SetErrorMode (uMode=0x1) returned 0x0 [0253.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.987] SetErrorMode (uMode=0x0) returned 0x1 [0253.987] GetFileType (hFile=0x18c) returned 0x1 [0253.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0253.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0253.989] SetErrorMode (uMode=0x1) returned 0x0 [0253.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.990] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.990] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.990] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.991] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.991] SetErrorMode (uMode=0x0) returned 0x1 [0253.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0253.991] SetErrorMode (uMode=0x1) returned 0x0 [0253.991] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.992] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.992] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.992] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.993] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.993] SetErrorMode (uMode=0x0) returned 0x1 [0253.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x9c [0253.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x9c [0253.994] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0253.994] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.994] CoTaskMemFree (pv=0xfe030) [0253.994] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0253.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa8 [0253.994] SetErrorMode (uMode=0x1) returned 0x0 [0253.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0253.995] SetErrorMode (uMode=0x0) returned 0x1 [0253.995] GetFileType (hFile=0x18c) returned 0x1 [0253.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0253.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0253.997] SetErrorMode (uMode=0x1) returned 0x0 [0253.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0253.998] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.999] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.999] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0253.999] SetErrorMode (uMode=0x0) returned 0x1 [0254.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0254.000] SetErrorMode (uMode=0x1) returned 0x0 [0254.000] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.000] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.001] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.001] SetErrorMode (uMode=0x0) returned 0x1 [0254.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x9b [0254.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x9b [0254.002] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.002] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.002] CoTaskMemFree (pv=0xfe030) [0254.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.003] SetErrorMode (uMode=0x1) returned 0x0 [0254.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.004] SetErrorMode (uMode=0x0) returned 0x1 [0254.004] GetFileType (hFile=0x18c) returned 0x1 [0254.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0254.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0254.006] SetErrorMode (uMode=0x1) returned 0x0 [0254.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.006] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.006] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.007] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.007] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.007] SetErrorMode (uMode=0x0) returned 0x1 [0254.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0254.008] SetErrorMode (uMode=0x1) returned 0x0 [0254.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.009] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.009] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.009] SetErrorMode (uMode=0x0) returned 0x1 [0254.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x9b [0254.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x9b [0254.010] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.010] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.010] CoTaskMemFree (pv=0xfe030) [0254.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.011] SetErrorMode (uMode=0x1) returned 0x0 [0254.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.012] SetErrorMode (uMode=0x0) returned 0x1 [0254.012] GetFileType (hFile=0x18c) returned 0x1 [0254.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0254.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0254.022] SetErrorMode (uMode=0x1) returned 0x0 [0254.022] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.023] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.024] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.024] SetErrorMode (uMode=0x0) returned 0x1 [0254.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0254.025] SetErrorMode (uMode=0x1) returned 0x0 [0254.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.025] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.026] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.026] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.026] SetErrorMode (uMode=0x0) returned 0x1 [0254.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x9b [0254.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x9b [0254.027] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.027] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.028] CoTaskMemFree (pv=0xfe030) [0254.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.045] SetErrorMode (uMode=0x1) returned 0x0 [0254.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.046] SetErrorMode (uMode=0x0) returned 0x1 [0254.046] GetFileType (hFile=0x18c) returned 0x1 [0254.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0254.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0254.048] SetErrorMode (uMode=0x1) returned 0x0 [0254.048] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.049] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.049] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.050] SetErrorMode (uMode=0x0) returned 0x1 [0254.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0254.050] SetErrorMode (uMode=0x1) returned 0x0 [0254.050] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.051] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.051] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.052] SetErrorMode (uMode=0x0) returned 0x1 [0254.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x9b [0254.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x9b [0254.052] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.052] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.053] CoTaskMemFree (pv=0xfe030) [0254.053] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.053] SetErrorMode (uMode=0x1) returned 0x0 [0254.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.054] SetErrorMode (uMode=0x0) returned 0x1 [0254.054] GetFileType (hFile=0x18c) returned 0x1 [0254.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0254.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0254.056] SetErrorMode (uMode=0x1) returned 0x0 [0254.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.057] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.058] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.058] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.058] SetErrorMode (uMode=0x0) returned 0x1 [0254.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0254.059] SetErrorMode (uMode=0x1) returned 0x0 [0254.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.059] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.059] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.060] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.060] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.060] SetErrorMode (uMode=0x0) returned 0x1 [0254.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x9b [0254.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x9b [0254.061] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.061] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.061] CoTaskMemFree (pv=0xfe030) [0254.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.062] SetErrorMode (uMode=0x1) returned 0x0 [0254.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.063] SetErrorMode (uMode=0x0) returned 0x1 [0254.063] GetFileType (hFile=0x18c) returned 0x1 [0254.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0254.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0254.064] SetErrorMode (uMode=0x1) returned 0x0 [0254.065] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.065] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.065] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.066] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.066] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.066] SetErrorMode (uMode=0x0) returned 0x1 [0254.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0254.067] SetErrorMode (uMode=0x1) returned 0x0 [0254.067] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.067] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.068] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.068] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.069] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.069] SetErrorMode (uMode=0x0) returned 0x1 [0254.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x9b [0254.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x9b [0254.070] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.070] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.070] CoTaskMemFree (pv=0xfe030) [0254.070] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.071] SetErrorMode (uMode=0x1) returned 0x0 [0254.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.072] SetErrorMode (uMode=0x0) returned 0x1 [0254.072] GetFileType (hFile=0x18c) returned 0x1 [0254.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0254.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0254.074] SetErrorMode (uMode=0x1) returned 0x0 [0254.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.077] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.077] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.078] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.078] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.078] SetErrorMode (uMode=0x0) returned 0x1 [0254.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0254.079] SetErrorMode (uMode=0x1) returned 0x0 [0254.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.079] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.079] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.080] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.080] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.080] SetErrorMode (uMode=0x0) returned 0x1 [0254.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x9b [0254.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x9b [0254.081] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.081] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.081] CoTaskMemFree (pv=0xfe030) [0254.081] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.082] SetErrorMode (uMode=0x1) returned 0x0 [0254.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.082] SetErrorMode (uMode=0x0) returned 0x1 [0254.083] GetFileType (hFile=0x18c) returned 0x1 [0254.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0254.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0254.084] SetErrorMode (uMode=0x1) returned 0x0 [0254.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.085] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.085] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.085] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.086] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.086] SetErrorMode (uMode=0x0) returned 0x1 [0254.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0254.087] SetErrorMode (uMode=0x1) returned 0x0 [0254.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.087] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.087] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.088] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.088] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.088] SetErrorMode (uMode=0x0) returned 0x1 [0254.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x9b [0254.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x9b [0254.089] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.089] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.089] CoTaskMemFree (pv=0xfe030) [0254.089] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.090] SetErrorMode (uMode=0x1) returned 0x0 [0254.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.090] SetErrorMode (uMode=0x0) returned 0x1 [0254.091] GetFileType (hFile=0x18c) returned 0x1 [0254.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0254.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0254.092] SetErrorMode (uMode=0x1) returned 0x0 [0254.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.094] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.095] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.095] SetErrorMode (uMode=0x0) returned 0x1 [0254.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0254.095] SetErrorMode (uMode=0x1) returned 0x0 [0254.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.096] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.097] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.097] SetErrorMode (uMode=0x0) returned 0x1 [0254.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x9b [0254.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x9b [0254.098] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.098] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.098] CoTaskMemFree (pv=0xfe030) [0254.098] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.098] SetErrorMode (uMode=0x1) returned 0x0 [0254.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.099] SetErrorMode (uMode=0x0) returned 0x1 [0254.099] GetFileType (hFile=0x18c) returned 0x1 [0254.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0254.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0254.101] SetErrorMode (uMode=0x1) returned 0x0 [0254.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.101] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.102] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.102] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.102] SetErrorMode (uMode=0x0) returned 0x1 [0254.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0254.103] SetErrorMode (uMode=0x1) returned 0x0 [0254.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.103] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.104] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.104] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.104] SetErrorMode (uMode=0x0) returned 0x1 [0254.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x9b [0254.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x9b [0254.105] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.105] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.106] CoTaskMemFree (pv=0xfe030) [0254.106] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.106] SetErrorMode (uMode=0x1) returned 0x0 [0254.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.107] SetErrorMode (uMode=0x0) returned 0x1 [0254.107] GetFileType (hFile=0x18c) returned 0x1 [0254.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0254.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0254.109] SetErrorMode (uMode=0x1) returned 0x0 [0254.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.110] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.110] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.111] SetErrorMode (uMode=0x0) returned 0x1 [0254.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0254.111] SetErrorMode (uMode=0x1) returned 0x0 [0254.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.112] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.112] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.113] SetErrorMode (uMode=0x0) returned 0x1 [0254.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x9b [0254.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x9b [0254.113] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.114] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.114] CoTaskMemFree (pv=0xfe030) [0254.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.114] SetErrorMode (uMode=0x1) returned 0x0 [0254.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.115] SetErrorMode (uMode=0x0) returned 0x1 [0254.115] GetFileType (hFile=0x18c) returned 0x1 [0254.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0254.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0254.117] SetErrorMode (uMode=0x1) returned 0x0 [0254.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.118] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.118] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.119] SetErrorMode (uMode=0x0) returned 0x1 [0254.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0254.119] SetErrorMode (uMode=0x1) returned 0x0 [0254.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.120] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.120] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.120] SetErrorMode (uMode=0x0) returned 0x1 [0254.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x9b [0254.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x9b [0254.121] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.121] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.122] CoTaskMemFree (pv=0xfe030) [0254.122] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.122] SetErrorMode (uMode=0x1) returned 0x0 [0254.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.123] SetErrorMode (uMode=0x0) returned 0x1 [0254.123] GetFileType (hFile=0x18c) returned 0x1 [0254.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0254.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0254.125] SetErrorMode (uMode=0x1) returned 0x0 [0254.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.127] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.127] SetErrorMode (uMode=0x0) returned 0x1 [0254.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0254.127] SetErrorMode (uMode=0x1) returned 0x0 [0254.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.129] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.129] SetErrorMode (uMode=0x0) returned 0x1 [0254.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x9b [0254.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x9b [0254.130] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.130] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.130] CoTaskMemFree (pv=0xfe030) [0254.130] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.130] SetErrorMode (uMode=0x1) returned 0x0 [0254.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.131] SetErrorMode (uMode=0x0) returned 0x1 [0254.131] GetFileType (hFile=0x18c) returned 0x1 [0254.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0254.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0254.133] SetErrorMode (uMode=0x1) returned 0x0 [0254.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.134] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.135] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.135] SetErrorMode (uMode=0x0) returned 0x1 [0254.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0254.135] SetErrorMode (uMode=0x1) returned 0x0 [0254.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.136] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.137] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.137] SetErrorMode (uMode=0x0) returned 0x1 [0254.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9e [0254.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9e [0254.138] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.138] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.138] CoTaskMemFree (pv=0xfe030) [0254.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xaa [0254.138] SetErrorMode (uMode=0x1) returned 0x0 [0254.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.139] SetErrorMode (uMode=0x0) returned 0x1 [0254.139] GetFileType (hFile=0x18c) returned 0x1 [0254.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0254.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0254.141] SetErrorMode (uMode=0x1) returned 0x0 [0254.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.143] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.143] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.143] SetErrorMode (uMode=0x0) returned 0x1 [0254.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0254.144] SetErrorMode (uMode=0x1) returned 0x0 [0254.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.145] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.145] SetErrorMode (uMode=0x0) returned 0x1 [0254.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9e [0254.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9e [0254.146] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.146] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.146] CoTaskMemFree (pv=0xfe030) [0254.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xaa [0254.147] SetErrorMode (uMode=0x1) returned 0x0 [0254.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.148] SetErrorMode (uMode=0x0) returned 0x1 [0254.148] GetFileType (hFile=0x18c) returned 0x1 [0254.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0254.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0254.150] SetErrorMode (uMode=0x1) returned 0x0 [0254.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.150] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.151] SetErrorMode (uMode=0x0) returned 0x1 [0254.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0254.151] SetErrorMode (uMode=0x1) returned 0x0 [0254.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.152] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.152] SetErrorMode (uMode=0x0) returned 0x1 [0254.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x9b [0254.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x9b [0254.153] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.153] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.153] CoTaskMemFree (pv=0xfe030) [0254.153] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.154] SetErrorMode (uMode=0x1) returned 0x0 [0254.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.154] SetErrorMode (uMode=0x0) returned 0x1 [0254.154] GetFileType (hFile=0x18c) returned 0x1 [0254.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0254.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0254.156] SetErrorMode (uMode=0x1) returned 0x0 [0254.156] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.157] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.158] SetErrorMode (uMode=0x0) returned 0x1 [0254.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0254.158] SetErrorMode (uMode=0x1) returned 0x0 [0254.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.159] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.159] SetErrorMode (uMode=0x0) returned 0x1 [0254.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x9b [0254.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x9b [0254.160] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.160] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.160] CoTaskMemFree (pv=0xfe030) [0254.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.161] SetErrorMode (uMode=0x1) returned 0x0 [0254.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.161] SetErrorMode (uMode=0x0) returned 0x1 [0254.161] GetFileType (hFile=0x18c) returned 0x1 [0254.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0254.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0254.163] SetErrorMode (uMode=0x1) returned 0x0 [0254.163] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.164] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.164] SetErrorMode (uMode=0x0) returned 0x1 [0254.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0254.165] SetErrorMode (uMode=0x1) returned 0x0 [0254.165] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.165] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.165] SetErrorMode (uMode=0x0) returned 0x1 [0254.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x9b [0254.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x9b [0254.166] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.166] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.166] CoTaskMemFree (pv=0xfe030) [0254.166] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.167] SetErrorMode (uMode=0x1) returned 0x0 [0254.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.168] SetErrorMode (uMode=0x0) returned 0x1 [0254.168] GetFileType (hFile=0x18c) returned 0x1 [0254.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0254.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0254.169] SetErrorMode (uMode=0x1) returned 0x0 [0254.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.171] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.171] SetErrorMode (uMode=0x0) returned 0x1 [0254.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0254.171] SetErrorMode (uMode=0x1) returned 0x0 [0254.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.172] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.172] SetErrorMode (uMode=0x0) returned 0x1 [0254.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x9b [0254.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x9b [0254.173] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.173] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.173] CoTaskMemFree (pv=0xfe030) [0254.173] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.174] SetErrorMode (uMode=0x1) returned 0x0 [0254.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.174] SetErrorMode (uMode=0x0) returned 0x1 [0254.174] GetFileType (hFile=0x18c) returned 0x1 [0254.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0254.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0254.176] SetErrorMode (uMode=0x1) returned 0x0 [0254.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.177] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.177] SetErrorMode (uMode=0x0) returned 0x1 [0254.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0254.178] SetErrorMode (uMode=0x1) returned 0x0 [0254.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.178] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.178] SetErrorMode (uMode=0x0) returned 0x1 [0254.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x9b [0254.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x9b [0254.179] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.179] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.179] CoTaskMemFree (pv=0xfe030) [0254.179] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.180] SetErrorMode (uMode=0x1) returned 0x0 [0254.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.181] SetErrorMode (uMode=0x0) returned 0x1 [0254.181] GetFileType (hFile=0x18c) returned 0x1 [0254.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0254.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0254.183] SetErrorMode (uMode=0x1) returned 0x0 [0254.183] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.184] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.184] SetErrorMode (uMode=0x0) returned 0x1 [0254.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0254.185] SetErrorMode (uMode=0x1) returned 0x0 [0254.185] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.185] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.185] SetErrorMode (uMode=0x0) returned 0x1 [0254.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x9b [0254.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x9b [0254.186] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.186] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.186] CoTaskMemFree (pv=0xfe030) [0254.186] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa7 [0254.187] SetErrorMode (uMode=0x1) returned 0x0 [0254.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.188] SetErrorMode (uMode=0x0) returned 0x1 [0254.188] GetFileType (hFile=0x18c) returned 0x1 [0254.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0254.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0254.189] SetErrorMode (uMode=0x1) returned 0x0 [0254.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.190] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.190] SetErrorMode (uMode=0x0) returned 0x1 [0254.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0254.191] SetErrorMode (uMode=0x1) returned 0x0 [0254.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.191] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.191] SetErrorMode (uMode=0x0) returned 0x1 [0254.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x9b [0254.192] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.192] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.193] CoTaskMemFree (pv=0xfe030) [0254.193] SetErrorMode (uMode=0x1) returned 0x0 [0254.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.193] SetErrorMode (uMode=0x0) returned 0x1 [0254.194] GetFileType (hFile=0x18c) returned 0x1 [0254.195] SetErrorMode (uMode=0x1) returned 0x0 [0254.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.196] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.196] SetErrorMode (uMode=0x0) returned 0x1 [0254.197] SetErrorMode (uMode=0x1) returned 0x0 [0254.197] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.197] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.197] SetErrorMode (uMode=0x0) returned 0x1 [0254.198] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.198] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.198] CoTaskMemFree (pv=0xfe030) [0254.214] SetErrorMode (uMode=0x1) returned 0x0 [0254.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.215] SetErrorMode (uMode=0x0) returned 0x1 [0254.215] GetFileType (hFile=0x18c) returned 0x1 [0254.216] SetErrorMode (uMode=0x1) returned 0x0 [0254.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.217] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.217] SetErrorMode (uMode=0x0) returned 0x1 [0254.217] SetErrorMode (uMode=0x1) returned 0x0 [0254.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.218] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.218] SetErrorMode (uMode=0x0) returned 0x1 [0254.218] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.218] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.219] CoTaskMemFree (pv=0xfe030) [0254.219] SetErrorMode (uMode=0x1) returned 0x0 [0254.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.220] SetErrorMode (uMode=0x0) returned 0x1 [0254.220] GetFileType (hFile=0x18c) returned 0x1 [0254.221] SetErrorMode (uMode=0x1) returned 0x0 [0254.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.222] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.222] SetErrorMode (uMode=0x0) returned 0x1 [0254.223] SetErrorMode (uMode=0x1) returned 0x0 [0254.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.223] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.223] SetErrorMode (uMode=0x0) returned 0x1 [0254.224] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.224] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.224] CoTaskMemFree (pv=0xfe030) [0254.224] SetErrorMode (uMode=0x1) returned 0x0 [0254.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.225] SetErrorMode (uMode=0x0) returned 0x1 [0254.225] GetFileType (hFile=0x18c) returned 0x1 [0254.226] SetErrorMode (uMode=0x1) returned 0x0 [0254.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.227] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.227] SetErrorMode (uMode=0x0) returned 0x1 [0254.228] SetErrorMode (uMode=0x1) returned 0x0 [0254.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.228] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.228] SetErrorMode (uMode=0x0) returned 0x1 [0254.229] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.229] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.229] CoTaskMemFree (pv=0xfe030) [0254.229] SetErrorMode (uMode=0x1) returned 0x0 [0254.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.230] SetErrorMode (uMode=0x0) returned 0x1 [0254.230] GetFileType (hFile=0x18c) returned 0x1 [0254.231] SetErrorMode (uMode=0x1) returned 0x0 [0254.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.232] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.232] SetErrorMode (uMode=0x0) returned 0x1 [0254.232] SetErrorMode (uMode=0x1) returned 0x0 [0254.232] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.233] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.233] SetErrorMode (uMode=0x0) returned 0x1 [0254.233] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.233] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.233] CoTaskMemFree (pv=0xfe030) [0254.234] SetErrorMode (uMode=0x1) returned 0x0 [0254.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.234] SetErrorMode (uMode=0x0) returned 0x1 [0254.234] GetFileType (hFile=0x18c) returned 0x1 [0254.236] SetErrorMode (uMode=0x1) returned 0x0 [0254.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.236] SetErrorMode (uMode=0x0) returned 0x1 [0254.237] GetFileType (hFile=0x18c) returned 0x1 [0254.238] SetErrorMode (uMode=0x1) returned 0x0 [0254.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.238] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.239] SetErrorMode (uMode=0x0) returned 0x1 [0254.239] SetErrorMode (uMode=0x1) returned 0x0 [0254.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.239] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.240] SetErrorMode (uMode=0x0) returned 0x1 [0254.240] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.240] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.240] CoTaskMemFree (pv=0xfe030) [0254.241] SetErrorMode (uMode=0x1) returned 0x0 [0254.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.241] SetErrorMode (uMode=0x0) returned 0x1 [0254.241] GetFileType (hFile=0x18c) returned 0x1 [0254.243] SetErrorMode (uMode=0x1) returned 0x0 [0254.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.243] SetErrorMode (uMode=0x0) returned 0x1 [0254.243] GetFileType (hFile=0x18c) returned 0x1 [0254.245] SetErrorMode (uMode=0x1) returned 0x0 [0254.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.246] SetErrorMode (uMode=0x0) returned 0x1 [0254.246] GetFileType (hFile=0x18c) returned 0x1 [0254.247] SetErrorMode (uMode=0x1) returned 0x0 [0254.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.248] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.250] SetErrorMode (uMode=0x0) returned 0x1 [0254.251] SetErrorMode (uMode=0x1) returned 0x0 [0254.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.251] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.251] SetErrorMode (uMode=0x0) returned 0x1 [0254.252] SetErrorMode (uMode=0x1) returned 0x0 [0254.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.254] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.255] SetErrorMode (uMode=0x0) returned 0x1 [0254.255] SetErrorMode (uMode=0x1) returned 0x0 [0254.255] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.256] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.257] SetErrorMode (uMode=0x0) returned 0x1 [0254.257] SetErrorMode (uMode=0x1) returned 0x0 [0254.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0254.259] SetErrorMode (uMode=0x0) returned 0x1 [0254.259] GetFileType (hFile=0x18c) returned 0x1 [0254.259] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x180f [0254.262] SetErrorMode (uMode=0x1) returned 0x0 [0254.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1 [0254.262] SetErrorMode (uMode=0x0) returned 0x1 [0254.375] SetErrorMode (uMode=0x1) returned 0x0 [0254.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0254.377] SetErrorMode (uMode=0x0) returned 0x1 [0254.377] GetFileType (hFile=0x18c) returned 0x1 [0254.377] WriteFile (in: hFile=0x18c, lpBuffer=0x285c160*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x285c160*, lpNumberOfBytesWritten=0x27e3a8*=0x1910, lpOverlapped=0x0) returned 1 [0254.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x27bb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0254.389] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 1 [0254.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", lpFilePart=0x0) returned 0x8b [0254.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", lpFilePart=0x0) returned 0x8b [0254.392] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.392] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.392] CoTaskMemFree (pv=0xfe030) [0254.392] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0254.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0254.393] SetErrorMode (uMode=0x1) returned 0x0 [0254.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.403] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0254.404] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0254.405] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0254.406] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0254.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0254.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0254.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0254.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0254.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0254.407] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0254.407] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.408] SetErrorMode (uMode=0x0) returned 0x1 [0254.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0254.408] SetErrorMode (uMode=0x1) returned 0x0 [0254.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0254.409] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0254.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0254.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0254.410] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0254.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0254.411] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0254.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0254.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0254.412] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0254.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0254.413] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0254.414] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0254.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0254.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0254.415] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0254.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0254.416] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0254.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0254.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0254.417] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0254.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0254.418] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0254.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0254.419] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0254.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0254.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0254.420] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0254.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0254.421] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0254.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0254.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0254.422] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0254.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0254.423] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0254.424] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.424] SetErrorMode (uMode=0x0) returned 0x1 [0254.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0254.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0254.425] SetErrorMode (uMode=0x1) returned 0x0 [0254.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.427] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.428] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.428] SetErrorMode (uMode=0x0) returned 0x1 [0254.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0254.428] SetErrorMode (uMode=0x1) returned 0x0 [0254.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.429] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.430] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.430] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.430] SetErrorMode (uMode=0x0) returned 0x1 [0254.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x97 [0254.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x97 [0254.431] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.431] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.431] CoTaskMemFree (pv=0xfe030) [0254.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.433] SetErrorMode (uMode=0x1) returned 0x0 [0254.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.433] GetFileType (hFile=0x18c) returned 0x1 [0254.433] SetErrorMode (uMode=0x0) returned 0x1 [0254.433] GetFileType (hFile=0x18c) returned 0x1 [0254.435] WriteFile (in: hFile=0x18c, lpBuffer=0x287c7d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x287c7d8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.436] WriteFile (in: hFile=0x18c, lpBuffer=0x287c7d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x287c7d8*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.437] CloseHandle (hObject=0x18c) returned 1 [0254.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0254.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0254.438] SetErrorMode (uMode=0x1) returned 0x0 [0254.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.438] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.440] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.440] SetErrorMode (uMode=0x0) returned 0x1 [0254.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0254.440] SetErrorMode (uMode=0x1) returned 0x0 [0254.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.441] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.442] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.442] SetErrorMode (uMode=0x0) returned 0x1 [0254.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x97 [0254.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x97 [0254.442] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.442] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.443] CoTaskMemFree (pv=0xfe030) [0254.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.444] SetErrorMode (uMode=0x1) returned 0x0 [0254.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.444] GetFileType (hFile=0x18c) returned 0x1 [0254.445] SetErrorMode (uMode=0x0) returned 0x1 [0254.445] GetFileType (hFile=0x18c) returned 0x1 [0254.446] WriteFile (in: hFile=0x18c, lpBuffer=0x28968d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28968d8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.448] WriteFile (in: hFile=0x18c, lpBuffer=0x28968d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28968d8*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.448] CloseHandle (hObject=0x18c) returned 1 [0254.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0254.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0254.449] SetErrorMode (uMode=0x1) returned 0x0 [0254.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.450] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.451] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.452] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.452] SetErrorMode (uMode=0x0) returned 0x1 [0254.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0254.452] SetErrorMode (uMode=0x1) returned 0x0 [0254.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.453] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.453] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.453] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.454] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.454] SetErrorMode (uMode=0x0) returned 0x1 [0254.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x97 [0254.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x97 [0254.454] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.454] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.455] CoTaskMemFree (pv=0xfe030) [0254.455] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.456] SetErrorMode (uMode=0x1) returned 0x0 [0254.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.456] GetFileType (hFile=0x18c) returned 0x1 [0254.456] SetErrorMode (uMode=0x0) returned 0x1 [0254.457] GetFileType (hFile=0x18c) returned 0x1 [0254.457] WriteFile (in: hFile=0x18c, lpBuffer=0x28b09d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28b09d8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.458] WriteFile (in: hFile=0x18c, lpBuffer=0x28b09d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28b09d8*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.459] CloseHandle (hObject=0x18c) returned 1 [0254.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0254.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0254.460] SetErrorMode (uMode=0x1) returned 0x0 [0254.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.461] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.462] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.462] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.463] SetErrorMode (uMode=0x0) returned 0x1 [0254.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0254.463] SetErrorMode (uMode=0x1) returned 0x0 [0254.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.463] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.464] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.464] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.465] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.465] SetErrorMode (uMode=0x0) returned 0x1 [0254.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x97 [0254.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x97 [0254.465] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.465] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.466] CoTaskMemFree (pv=0xfe030) [0254.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.467] SetErrorMode (uMode=0x1) returned 0x0 [0254.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.467] GetFileType (hFile=0x18c) returned 0x1 [0254.467] SetErrorMode (uMode=0x0) returned 0x1 [0254.467] GetFileType (hFile=0x18c) returned 0x1 [0254.468] WriteFile (in: hFile=0x18c, lpBuffer=0x28caad8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28caad8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.469] WriteFile (in: hFile=0x18c, lpBuffer=0x28caad8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28caad8*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.470] CloseHandle (hObject=0x18c) returned 1 [0254.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0254.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0254.470] SetErrorMode (uMode=0x1) returned 0x0 [0254.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.472] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.473] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.473] SetErrorMode (uMode=0x0) returned 0x1 [0254.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0254.473] SetErrorMode (uMode=0x1) returned 0x0 [0254.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.474] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.475] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.475] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.475] SetErrorMode (uMode=0x0) returned 0x1 [0254.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x97 [0254.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x97 [0254.476] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.476] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.476] CoTaskMemFree (pv=0xfe030) [0254.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.477] SetErrorMode (uMode=0x1) returned 0x0 [0254.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.478] GetFileType (hFile=0x18c) returned 0x1 [0254.478] SetErrorMode (uMode=0x0) returned 0x1 [0254.478] GetFileType (hFile=0x18c) returned 0x1 [0254.478] WriteFile (in: hFile=0x18c, lpBuffer=0x28e4bd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28e4bd8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.479] WriteFile (in: hFile=0x18c, lpBuffer=0x28e4bd8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28e4bd8*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.480] CloseHandle (hObject=0x18c) returned 1 [0254.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0254.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0254.480] SetErrorMode (uMode=0x1) returned 0x0 [0254.480] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.482] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.482] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.483] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.483] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.483] SetErrorMode (uMode=0x0) returned 0x1 [0254.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0254.483] SetErrorMode (uMode=0x1) returned 0x0 [0254.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.484] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.485] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.485] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.485] SetErrorMode (uMode=0x0) returned 0x1 [0254.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x97 [0254.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x97 [0254.486] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.486] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.486] CoTaskMemFree (pv=0xfe030) [0254.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.487] SetErrorMode (uMode=0x1) returned 0x0 [0254.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.488] GetFileType (hFile=0x18c) returned 0x1 [0254.488] SetErrorMode (uMode=0x0) returned 0x1 [0254.488] GetFileType (hFile=0x18c) returned 0x1 [0254.488] WriteFile (in: hFile=0x18c, lpBuffer=0x28fecd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x28fecd8*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.489] WriteFile (in: hFile=0x18c, lpBuffer=0x28fecd8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x28fecd8*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.490] CloseHandle (hObject=0x18c) returned 1 [0254.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0254.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0254.491] SetErrorMode (uMode=0x1) returned 0x0 [0254.491] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.492] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.493] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.493] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.494] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.494] SetErrorMode (uMode=0x0) returned 0x1 [0254.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0254.494] SetErrorMode (uMode=0x1) returned 0x0 [0254.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.495] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.496] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.496] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.496] SetErrorMode (uMode=0x0) returned 0x1 [0254.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x97 [0254.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x97 [0254.497] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.497] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.497] CoTaskMemFree (pv=0xfe030) [0254.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.517] SetErrorMode (uMode=0x1) returned 0x0 [0254.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.518] GetFileType (hFile=0x18c) returned 0x1 [0254.518] SetErrorMode (uMode=0x0) returned 0x1 [0254.518] GetFileType (hFile=0x18c) returned 0x1 [0254.518] WriteFile (in: hFile=0x18c, lpBuffer=0x2728c68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x2728c68*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.519] WriteFile (in: hFile=0x18c, lpBuffer=0x2728c68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x2728c68*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0254.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0254.522] SetErrorMode (uMode=0x1) returned 0x0 [0254.522] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.522] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.523] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.524] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.524] SetErrorMode (uMode=0x0) returned 0x1 [0254.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0254.524] SetErrorMode (uMode=0x1) returned 0x0 [0254.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.525] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.526] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.527] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.527] SetErrorMode (uMode=0x0) returned 0x1 [0254.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x97 [0254.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x97 [0254.527] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.527] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.528] CoTaskMemFree (pv=0xfe030) [0254.528] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.529] SetErrorMode (uMode=0x1) returned 0x0 [0254.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.530] GetFileType (hFile=0x18c) returned 0x1 [0254.530] SetErrorMode (uMode=0x0) returned 0x1 [0254.530] GetFileType (hFile=0x18c) returned 0x1 [0254.530] WriteFile (in: hFile=0x18c, lpBuffer=0x2742d68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x2742d68*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.531] WriteFile (in: hFile=0x18c, lpBuffer=0x2742d68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e208, lpOverlapped=0x0 | out: lpBuffer=0x2742d68*, lpNumberOfBytesWritten=0x27e208*=0xb14, lpOverlapped=0x0) returned 1 [0254.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0254.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0254.533] SetErrorMode (uMode=0x1) returned 0x0 [0254.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.533] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.534] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.534] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.534] SetErrorMode (uMode=0x0) returned 0x1 [0254.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0254.534] SetErrorMode (uMode=0x1) returned 0x0 [0254.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.535] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.536] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.536] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.536] SetErrorMode (uMode=0x0) returned 0x1 [0254.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x97 [0254.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x97 [0254.537] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.537] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.537] CoTaskMemFree (pv=0xfe030) [0254.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.538] SetErrorMode (uMode=0x1) returned 0x0 [0254.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.539] SetErrorMode (uMode=0x0) returned 0x1 [0254.539] GetFileType (hFile=0x18c) returned 0x1 [0254.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0254.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0254.541] SetErrorMode (uMode=0x1) returned 0x0 [0254.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.542] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.543] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.543] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.543] SetErrorMode (uMode=0x0) returned 0x1 [0254.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0254.544] SetErrorMode (uMode=0x1) returned 0x0 [0254.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.544] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.545] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.545] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.545] SetErrorMode (uMode=0x0) returned 0x1 [0254.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x97 [0254.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x97 [0254.546] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.546] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.546] CoTaskMemFree (pv=0xfe030) [0254.546] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.547] SetErrorMode (uMode=0x1) returned 0x0 [0254.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.548] SetErrorMode (uMode=0x0) returned 0x1 [0254.548] GetFileType (hFile=0x18c) returned 0x1 [0254.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0254.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0254.550] SetErrorMode (uMode=0x1) returned 0x0 [0254.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.551] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.552] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.552] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.552] SetErrorMode (uMode=0x0) returned 0x1 [0254.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0254.553] SetErrorMode (uMode=0x1) returned 0x0 [0254.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.553] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.554] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.554] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.554] SetErrorMode (uMode=0x0) returned 0x1 [0254.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x98 [0254.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x98 [0254.555] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.555] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.555] CoTaskMemFree (pv=0xfe030) [0254.555] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa4 [0254.555] SetErrorMode (uMode=0x1) returned 0x0 [0254.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.556] SetErrorMode (uMode=0x0) returned 0x1 [0254.556] GetFileType (hFile=0x18c) returned 0x1 [0254.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0254.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0254.558] SetErrorMode (uMode=0x1) returned 0x0 [0254.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.559] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.560] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.560] SetErrorMode (uMode=0x0) returned 0x1 [0254.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0254.560] SetErrorMode (uMode=0x1) returned 0x0 [0254.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.561] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.562] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.562] SetErrorMode (uMode=0x0) returned 0x1 [0254.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.562] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.562] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.563] CoTaskMemFree (pv=0xfe030) [0254.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.563] SetErrorMode (uMode=0x1) returned 0x0 [0254.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.564] SetErrorMode (uMode=0x0) returned 0x1 [0254.564] GetFileType (hFile=0x18c) returned 0x1 [0254.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0254.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0254.566] SetErrorMode (uMode=0x1) returned 0x0 [0254.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.567] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.567] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.567] SetErrorMode (uMode=0x0) returned 0x1 [0254.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0254.568] SetErrorMode (uMode=0x1) returned 0x0 [0254.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.569] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.569] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.570] SetErrorMode (uMode=0x0) returned 0x1 [0254.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x97 [0254.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x97 [0254.571] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.571] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.571] CoTaskMemFree (pv=0xfe030) [0254.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.571] SetErrorMode (uMode=0x1) returned 0x0 [0254.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.572] SetErrorMode (uMode=0x0) returned 0x1 [0254.572] GetFileType (hFile=0x18c) returned 0x1 [0254.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0254.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0254.574] SetErrorMode (uMode=0x1) returned 0x0 [0254.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.575] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.575] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.575] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.576] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.576] SetErrorMode (uMode=0x0) returned 0x1 [0254.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0254.576] SetErrorMode (uMode=0x1) returned 0x0 [0254.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.577] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.578] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.578] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.578] SetErrorMode (uMode=0x0) returned 0x1 [0254.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.579] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.579] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.579] CoTaskMemFree (pv=0xfe030) [0254.579] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.580] SetErrorMode (uMode=0x1) returned 0x0 [0254.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.580] SetErrorMode (uMode=0x0) returned 0x1 [0254.580] GetFileType (hFile=0x18c) returned 0x1 [0254.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0254.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0254.582] SetErrorMode (uMode=0x1) returned 0x0 [0254.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.583] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.583] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.584] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.584] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.584] SetErrorMode (uMode=0x0) returned 0x1 [0254.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0254.585] SetErrorMode (uMode=0x1) returned 0x0 [0254.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.585] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.586] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.586] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.586] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.586] SetErrorMode (uMode=0x0) returned 0x1 [0254.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x97 [0254.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x97 [0254.587] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.587] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.587] CoTaskMemFree (pv=0xfe030) [0254.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.588] SetErrorMode (uMode=0x1) returned 0x0 [0254.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.589] SetErrorMode (uMode=0x0) returned 0x1 [0254.589] GetFileType (hFile=0x18c) returned 0x1 [0254.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0254.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0254.600] SetErrorMode (uMode=0x1) returned 0x0 [0254.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.601] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.601] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.602] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.602] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.603] SetErrorMode (uMode=0x0) returned 0x1 [0254.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0254.603] SetErrorMode (uMode=0x1) returned 0x0 [0254.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.605] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.605] SetErrorMode (uMode=0x0) returned 0x1 [0254.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x97 [0254.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x97 [0254.606] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.606] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.607] CoTaskMemFree (pv=0xfe030) [0254.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.608] SetErrorMode (uMode=0x1) returned 0x0 [0254.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.611] SetErrorMode (uMode=0x0) returned 0x1 [0254.611] GetFileType (hFile=0x18c) returned 0x1 [0254.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0254.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0254.613] SetErrorMode (uMode=0x1) returned 0x0 [0254.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.614] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.614] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.614] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.615] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.615] SetErrorMode (uMode=0x0) returned 0x1 [0254.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0254.616] SetErrorMode (uMode=0x1) returned 0x0 [0254.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.616] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.617] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.617] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.617] SetErrorMode (uMode=0x0) returned 0x1 [0254.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x97 [0254.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x97 [0254.618] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.618] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.618] CoTaskMemFree (pv=0xfe030) [0254.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.619] SetErrorMode (uMode=0x1) returned 0x0 [0254.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.620] SetErrorMode (uMode=0x0) returned 0x1 [0254.620] GetFileType (hFile=0x18c) returned 0x1 [0254.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0254.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0254.622] SetErrorMode (uMode=0x1) returned 0x0 [0254.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.622] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.623] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.623] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.623] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.623] SetErrorMode (uMode=0x0) returned 0x1 [0254.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0254.624] SetErrorMode (uMode=0x1) returned 0x0 [0254.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.624] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.625] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.625] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.625] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.625] SetErrorMode (uMode=0x0) returned 0x1 [0254.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x97 [0254.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x97 [0254.626] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.626] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.626] CoTaskMemFree (pv=0xfe030) [0254.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.627] SetErrorMode (uMode=0x1) returned 0x0 [0254.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.628] SetErrorMode (uMode=0x0) returned 0x1 [0254.628] GetFileType (hFile=0x18c) returned 0x1 [0254.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0254.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0254.630] SetErrorMode (uMode=0x1) returned 0x0 [0254.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.630] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.631] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.631] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.631] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.631] SetErrorMode (uMode=0x0) returned 0x1 [0254.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0254.632] SetErrorMode (uMode=0x1) returned 0x0 [0254.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.633] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.634] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.634] SetErrorMode (uMode=0x0) returned 0x1 [0254.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x97 [0254.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x97 [0254.635] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.635] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.635] CoTaskMemFree (pv=0xfe030) [0254.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.635] SetErrorMode (uMode=0x1) returned 0x0 [0254.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.636] SetErrorMode (uMode=0x0) returned 0x1 [0254.636] GetFileType (hFile=0x18c) returned 0x1 [0254.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0254.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0254.638] SetErrorMode (uMode=0x1) returned 0x0 [0254.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.639] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.639] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.639] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.640] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.640] SetErrorMode (uMode=0x0) returned 0x1 [0254.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0254.640] SetErrorMode (uMode=0x1) returned 0x0 [0254.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.641] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.641] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.641] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.642] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.642] SetErrorMode (uMode=0x0) returned 0x1 [0254.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x97 [0254.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x97 [0254.643] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.643] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.643] CoTaskMemFree (pv=0xfe030) [0254.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.644] SetErrorMode (uMode=0x1) returned 0x0 [0254.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.644] SetErrorMode (uMode=0x0) returned 0x1 [0254.644] GetFileType (hFile=0x18c) returned 0x1 [0254.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0254.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0254.646] SetErrorMode (uMode=0x1) returned 0x0 [0254.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.647] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.648] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.648] SetErrorMode (uMode=0x0) returned 0x1 [0254.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0254.649] SetErrorMode (uMode=0x1) returned 0x0 [0254.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.649] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.650] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.650] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.650] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.650] SetErrorMode (uMode=0x0) returned 0x1 [0254.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x97 [0254.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x97 [0254.651] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.651] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.651] CoTaskMemFree (pv=0xfe030) [0254.651] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.652] SetErrorMode (uMode=0x1) returned 0x0 [0254.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.653] SetErrorMode (uMode=0x0) returned 0x1 [0254.653] GetFileType (hFile=0x18c) returned 0x1 [0254.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0254.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0254.655] SetErrorMode (uMode=0x1) returned 0x0 [0254.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.655] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.656] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.656] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.656] SetErrorMode (uMode=0x0) returned 0x1 [0254.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0254.657] SetErrorMode (uMode=0x1) returned 0x0 [0254.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.657] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.658] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.658] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.658] SetErrorMode (uMode=0x0) returned 0x1 [0254.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x97 [0254.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x97 [0254.659] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.659] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.659] CoTaskMemFree (pv=0xfe030) [0254.660] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.660] SetErrorMode (uMode=0x1) returned 0x0 [0254.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.661] SetErrorMode (uMode=0x0) returned 0x1 [0254.661] GetFileType (hFile=0x18c) returned 0x1 [0254.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0254.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0254.663] SetErrorMode (uMode=0x1) returned 0x0 [0254.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.664] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.664] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.664] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.664] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.665] SetErrorMode (uMode=0x0) returned 0x1 [0254.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0254.665] SetErrorMode (uMode=0x1) returned 0x0 [0254.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.666] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.667] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.667] SetErrorMode (uMode=0x0) returned 0x1 [0254.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x97 [0254.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x97 [0254.668] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.668] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.668] CoTaskMemFree (pv=0xfe030) [0254.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.668] SetErrorMode (uMode=0x1) returned 0x0 [0254.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.669] SetErrorMode (uMode=0x0) returned 0x1 [0254.669] GetFileType (hFile=0x18c) returned 0x1 [0254.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0254.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0254.671] SetErrorMode (uMode=0x1) returned 0x0 [0254.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.672] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.672] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.673] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.673] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.673] SetErrorMode (uMode=0x0) returned 0x1 [0254.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0254.674] SetErrorMode (uMode=0x1) returned 0x0 [0254.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.674] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.675] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.675] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.675] SetErrorMode (uMode=0x0) returned 0x1 [0254.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x97 [0254.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x97 [0254.676] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.676] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.676] CoTaskMemFree (pv=0xfe030) [0254.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.677] SetErrorMode (uMode=0x1) returned 0x0 [0254.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.678] SetErrorMode (uMode=0x0) returned 0x1 [0254.678] GetFileType (hFile=0x18c) returned 0x1 [0254.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0254.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0254.680] SetErrorMode (uMode=0x1) returned 0x0 [0254.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.681] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.682] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.682] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.682] SetErrorMode (uMode=0x0) returned 0x1 [0254.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0254.683] SetErrorMode (uMode=0x1) returned 0x0 [0254.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.683] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.684] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.684] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.684] SetErrorMode (uMode=0x0) returned 0x1 [0254.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9a [0254.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9a [0254.685] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.685] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.685] CoTaskMemFree (pv=0xfe030) [0254.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0254.686] SetErrorMode (uMode=0x1) returned 0x0 [0254.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.687] SetErrorMode (uMode=0x0) returned 0x1 [0254.687] GetFileType (hFile=0x18c) returned 0x1 [0254.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0254.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0254.689] SetErrorMode (uMode=0x1) returned 0x0 [0254.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.690] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.690] SetErrorMode (uMode=0x0) returned 0x1 [0254.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0254.691] SetErrorMode (uMode=0x1) returned 0x0 [0254.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.692] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.692] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.692] SetErrorMode (uMode=0x0) returned 0x1 [0254.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9a [0254.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9a [0254.693] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.693] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.694] CoTaskMemFree (pv=0xfe030) [0254.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa6 [0254.694] SetErrorMode (uMode=0x1) returned 0x0 [0254.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.695] SetErrorMode (uMode=0x0) returned 0x1 [0254.695] GetFileType (hFile=0x18c) returned 0x1 [0254.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0254.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0254.697] SetErrorMode (uMode=0x1) returned 0x0 [0254.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.698] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.699] SetErrorMode (uMode=0x0) returned 0x1 [0254.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0254.699] SetErrorMode (uMode=0x1) returned 0x0 [0254.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.701] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.701] SetErrorMode (uMode=0x0) returned 0x1 [0254.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x97 [0254.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x97 [0254.702] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.702] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.702] CoTaskMemFree (pv=0xfe030) [0254.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.722] SetErrorMode (uMode=0x1) returned 0x0 [0254.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.723] SetErrorMode (uMode=0x0) returned 0x1 [0254.723] GetFileType (hFile=0x18c) returned 0x1 [0254.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0254.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0254.725] SetErrorMode (uMode=0x1) returned 0x0 [0254.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.726] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.726] SetErrorMode (uMode=0x0) returned 0x1 [0254.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0254.727] SetErrorMode (uMode=0x1) returned 0x0 [0254.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.729] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.729] SetErrorMode (uMode=0x0) returned 0x1 [0254.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x97 [0254.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x97 [0254.730] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.730] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.730] CoTaskMemFree (pv=0xfe030) [0254.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.731] SetErrorMode (uMode=0x1) returned 0x0 [0254.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0254.731] SetErrorMode (uMode=0x0) returned 0x1 [0254.731] GetFileType (hFile=0x18c) returned 0x1 [0254.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0254.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0254.733] SetErrorMode (uMode=0x1) returned 0x0 [0254.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.735] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.735] SetErrorMode (uMode=0x0) returned 0x1 [0254.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0254.736] SetErrorMode (uMode=0x1) returned 0x0 [0254.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.736] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.736] SetErrorMode (uMode=0x0) returned 0x1 [0254.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", lpFilePart=0x0) returned 0x97 [0254.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", lpFilePart=0x0) returned 0x97 [0254.737] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.737] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.738] CoTaskMemFree (pv=0xfe030) [0254.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.738] SetErrorMode (uMode=0x1) returned 0x0 [0254.739] SetErrorMode (uMode=0x0) returned 0x1 [0254.739] GetFileType (hFile=0x18c) returned 0x1 [0254.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0254.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0254.741] SetErrorMode (uMode=0x1) returned 0x0 [0254.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.753] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.753] SetErrorMode (uMode=0x0) returned 0x1 [0254.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0254.754] SetErrorMode (uMode=0x1) returned 0x0 [0254.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.754] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.755] SetErrorMode (uMode=0x0) returned 0x1 [0254.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x97 [0254.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x97 [0254.756] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.756] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.756] CoTaskMemFree (pv=0xfe030) [0254.756] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.756] SetErrorMode (uMode=0x1) returned 0x0 [0254.757] SetErrorMode (uMode=0x0) returned 0x1 [0254.757] GetFileType (hFile=0x18c) returned 0x1 [0254.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0254.759] SetErrorMode (uMode=0x1) returned 0x0 [0254.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.760] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.760] SetErrorMode (uMode=0x0) returned 0x1 [0254.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0254.760] SetErrorMode (uMode=0x1) returned 0x0 [0254.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.761] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.761] SetErrorMode (uMode=0x0) returned 0x1 [0254.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x97 [0254.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x97 [0254.762] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.762] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.762] CoTaskMemFree (pv=0xfe030) [0254.762] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.763] SetErrorMode (uMode=0x1) returned 0x0 [0254.763] SetErrorMode (uMode=0x0) returned 0x1 [0254.764] GetFileType (hFile=0x18c) returned 0x1 [0254.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0254.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0254.765] SetErrorMode (uMode=0x1) returned 0x0 [0254.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.766] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.766] SetErrorMode (uMode=0x0) returned 0x1 [0254.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0254.767] SetErrorMode (uMode=0x1) returned 0x0 [0254.767] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.768] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.768] SetErrorMode (uMode=0x0) returned 0x1 [0254.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.769] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.769] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.769] CoTaskMemFree (pv=0xfe030) [0254.769] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.769] SetErrorMode (uMode=0x1) returned 0x0 [0254.770] SetErrorMode (uMode=0x0) returned 0x1 [0254.770] GetFileType (hFile=0x18c) returned 0x1 [0254.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0254.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0254.772] SetErrorMode (uMode=0x1) returned 0x0 [0254.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.773] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.773] SetErrorMode (uMode=0x0) returned 0x1 [0254.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0254.774] SetErrorMode (uMode=0x1) returned 0x0 [0254.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.774] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.774] SetErrorMode (uMode=0x0) returned 0x1 [0254.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x97 [0254.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x97 [0254.775] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.775] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.776] CoTaskMemFree (pv=0xfe030) [0254.776] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.776] SetErrorMode (uMode=0x1) returned 0x0 [0254.777] SetErrorMode (uMode=0x0) returned 0x1 [0254.777] GetFileType (hFile=0x18c) returned 0x1 [0254.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0254.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0254.778] SetErrorMode (uMode=0x1) returned 0x0 [0254.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.779] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.779] SetErrorMode (uMode=0x0) returned 0x1 [0254.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0254.780] SetErrorMode (uMode=0x1) returned 0x0 [0254.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.781] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.781] SetErrorMode (uMode=0x0) returned 0x1 [0254.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x97 [0254.782] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.782] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.782] CoTaskMemFree (pv=0xfe030) [0254.782] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0254.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xa3 [0254.783] SetErrorMode (uMode=0x1) returned 0x0 [0254.783] SetErrorMode (uMode=0x0) returned 0x1 [0254.783] GetFileType (hFile=0x18c) returned 0x1 [0254.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0254.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0254.785] SetErrorMode (uMode=0x1) returned 0x0 [0254.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.786] SetErrorMode (uMode=0x0) returned 0x1 [0254.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0254.787] SetErrorMode (uMode=0x1) returned 0x0 [0254.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.787] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.787] SetErrorMode (uMode=0x0) returned 0x1 [0254.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x97 [0254.789] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.789] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.789] CoTaskMemFree (pv=0xfe030) [0254.789] SetErrorMode (uMode=0x1) returned 0x0 [0254.790] SetErrorMode (uMode=0x0) returned 0x1 [0254.790] GetFileType (hFile=0x18c) returned 0x1 [0254.791] SetErrorMode (uMode=0x1) returned 0x0 [0254.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.792] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.792] SetErrorMode (uMode=0x0) returned 0x1 [0254.792] SetErrorMode (uMode=0x1) returned 0x0 [0254.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.793] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.793] SetErrorMode (uMode=0x0) returned 0x1 [0254.794] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.794] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.794] CoTaskMemFree (pv=0xfe030) [0254.794] SetErrorMode (uMode=0x1) returned 0x0 [0254.795] SetErrorMode (uMode=0x0) returned 0x1 [0254.795] GetFileType (hFile=0x18c) returned 0x1 [0254.796] SetErrorMode (uMode=0x1) returned 0x0 [0254.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.797] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.797] SetErrorMode (uMode=0x0) returned 0x1 [0254.797] SetErrorMode (uMode=0x1) returned 0x0 [0254.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.798] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.798] SetErrorMode (uMode=0x0) returned 0x1 [0254.799] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.799] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.799] CoTaskMemFree (pv=0xfe030) [0254.799] SetErrorMode (uMode=0x1) returned 0x0 [0254.800] SetErrorMode (uMode=0x0) returned 0x1 [0254.800] GetFileType (hFile=0x18c) returned 0x1 [0254.801] SetErrorMode (uMode=0x1) returned 0x0 [0254.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.802] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.802] SetErrorMode (uMode=0x0) returned 0x1 [0254.802] SetErrorMode (uMode=0x1) returned 0x0 [0254.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.803] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.803] SetErrorMode (uMode=0x0) returned 0x1 [0254.804] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.804] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.804] CoTaskMemFree (pv=0xfe030) [0254.805] SetErrorMode (uMode=0x1) returned 0x0 [0254.805] SetErrorMode (uMode=0x0) returned 0x1 [0254.805] GetFileType (hFile=0x18c) returned 0x1 [0254.806] SetErrorMode (uMode=0x1) returned 0x0 [0254.807] SetErrorMode (uMode=0x0) returned 0x1 [0254.807] GetFileType (hFile=0x18c) returned 0x1 [0254.808] SetErrorMode (uMode=0x1) returned 0x0 [0254.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.810] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.810] SetErrorMode (uMode=0x0) returned 0x1 [0254.810] SetErrorMode (uMode=0x1) returned 0x0 [0254.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.811] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.811] SetErrorMode (uMode=0x0) returned 0x1 [0254.812] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0254.812] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.812] CoTaskMemFree (pv=0xfe030) [0254.812] SetErrorMode (uMode=0x1) returned 0x0 [0254.813] SetErrorMode (uMode=0x0) returned 0x1 [0254.813] GetFileType (hFile=0x18c) returned 0x1 [0254.814] SetErrorMode (uMode=0x1) returned 0x0 [0254.814] SetErrorMode (uMode=0x0) returned 0x1 [0254.815] GetFileType (hFile=0x18c) returned 0x1 [0254.816] SetErrorMode (uMode=0x1) returned 0x0 [0254.817] SetErrorMode (uMode=0x0) returned 0x1 [0254.817] GetFileType (hFile=0x18c) returned 0x1 [0254.818] SetErrorMode (uMode=0x1) returned 0x0 [0254.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.819] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.820] SetErrorMode (uMode=0x0) returned 0x1 [0254.820] SetErrorMode (uMode=0x1) returned 0x0 [0254.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.821] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.821] SetErrorMode (uMode=0x0) returned 0x1 [0254.821] SetErrorMode (uMode=0x1) returned 0x0 [0254.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.824] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.825] SetErrorMode (uMode=0x0) returned 0x1 [0254.826] SetErrorMode (uMode=0x1) returned 0x0 [0254.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0254.827] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0254.828] SetErrorMode (uMode=0x0) returned 0x1 [0254.828] SetErrorMode (uMode=0x1) returned 0x0 [0254.830] SetErrorMode (uMode=0x0) returned 0x1 [0254.830] GetFileType (hFile=0x18c) returned 0x1 [0254.830] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x8c0bf [0254.847] SetErrorMode (uMode=0x1) returned 0x0 [0254.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1 [0254.847] SetErrorMode (uMode=0x0) returned 0x1 [0255.348] SetErrorMode (uMode=0x1) returned 0x0 [0255.350] SetErrorMode (uMode=0x0) returned 0x1 [0255.350] GetFileType (hFile=0x18c) returned 0x1 [0255.350] WriteFile (in: hFile=0x18c, lpBuffer=0x341e93a0*, nNumberOfBytesToWrite=0x8c1c0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x341e93a0*, lpNumberOfBytesWritten=0x27e3a8*=0x8c1c0, lpOverlapped=0x0) returned 1 [0255.361] SetErrorMode (uMode=0x1) returned 0x0 [0255.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x68c684b0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x8c1c0)) returned 1 [0255.361] SetErrorMode (uMode=0x0) returned 0x1 [0255.361] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\iNnNLdANw83t6F4S_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\innnldanw83t6f4s_encrypted_by.whiterose")) returned 1 [0255.460] SetErrorMode (uMode=0x1) returned 0x0 [0255.461] SetErrorMode (uMode=0x0) returned 0x1 [0255.461] GetFileType (hFile=0x18c) returned 0x1 [0255.461] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xa89c [0255.464] SetErrorMode (uMode=0x1) returned 0x0 [0255.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1 [0255.465] SetErrorMode (uMode=0x0) returned 0x1 [0255.523] SetErrorMode (uMode=0x1) returned 0x0 [0255.524] SetErrorMode (uMode=0x0) returned 0x1 [0255.524] GetFileType (hFile=0x18c) returned 0x1 [0255.524] WriteFile (in: hFile=0x18c, lpBuffer=0x278c6b8*, nNumberOfBytesToWrite=0xa9a0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x278c6b8*, lpNumberOfBytesWritten=0x27e3a8*=0xa9a0, lpOverlapped=0x0) returned 1 [0255.526] SetErrorMode (uMode=0x1) returned 0x0 [0255.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x68e0b3d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xa9a0)) returned 1 [0255.527] SetErrorMode (uMode=0x0) returned 0x1 [0255.527] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\EzJoIwkSI8x04C3z_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ezjoiwksi8x04c3z_encrypted_by.whiterose")) returned 1 [0255.631] SetErrorMode (uMode=0x1) returned 0x0 [0255.631] SetErrorMode (uMode=0x0) returned 0x1 [0255.631] GetFileType (hFile=0x18c) returned 0x1 [0255.631] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x181aa [0255.635] SetErrorMode (uMode=0x1) returned 0x0 [0255.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1 [0255.635] SetErrorMode (uMode=0x0) returned 0x1 [0255.695] SetErrorMode (uMode=0x1) returned 0x0 [0255.697] SetErrorMode (uMode=0x0) returned 0x1 [0255.697] GetFileType (hFile=0x18c) returned 0x1 [0255.697] WriteFile (in: hFile=0x18c, lpBuffer=0x126d2418*, nNumberOfBytesToWrite=0x182b0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesWritten=0x27e3a8*=0x182b0, lpOverlapped=0x0) returned 1 [0255.699] SetErrorMode (uMode=0x1) returned 0x0 [0255.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x68fae2f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x182b0)) returned 1 [0255.700] SetErrorMode (uMode=0x0) returned 0x1 [0255.700] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\v4X8mQpaZxfpi8pZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\v4x8mqpazxfpi8pz_encrypted_by.whiterose")) returned 1 [0255.802] SetErrorMode (uMode=0x1) returned 0x0 [0255.803] SetErrorMode (uMode=0x0) returned 0x1 [0255.803] GetFileType (hFile=0x18c) returned 0x1 [0255.803] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x111e1 [0255.805] SetErrorMode (uMode=0x1) returned 0x0 [0255.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1 [0255.806] SetErrorMode (uMode=0x0) returned 0x1 [0255.863] SetErrorMode (uMode=0x1) returned 0x0 [0255.865] SetErrorMode (uMode=0x0) returned 0x1 [0255.865] GetFileType (hFile=0x18c) returned 0x1 [0255.865] WriteFile (in: hFile=0x18c, lpBuffer=0x28a7478*, nNumberOfBytesToWrite=0x112f0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x28a7478*, lpNumberOfBytesWritten=0x27e3a8*=0x112f0, lpOverlapped=0x0) returned 1 [0255.867] SetErrorMode (uMode=0x1) returned 0x0 [0255.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69151210, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x112f0)) returned 1 [0255.867] SetErrorMode (uMode=0x0) returned 0x1 [0255.868] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\QdtCzg2X0AeVQ58M_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\qdtczg2x0aevq58m_encrypted_by.whiterose")) returned 1 [0255.975] SetErrorMode (uMode=0x1) returned 0x0 [0255.975] SetErrorMode (uMode=0x0) returned 0x1 [0255.975] GetFileType (hFile=0x18c) returned 0x1 [0255.975] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x3a258 [0255.983] SetErrorMode (uMode=0x1) returned 0x0 [0255.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1 [0255.983] SetErrorMode (uMode=0x0) returned 0x1 [0256.177] SetErrorMode (uMode=0x1) returned 0x0 [0256.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.182] GetFileType (hFile=0x18c) returned 0x1 [0256.182] SetErrorMode (uMode=0x0) returned 0x1 [0256.182] GetFileType (hFile=0x18c) returned 0x1 [0256.182] WriteFile (in: hFile=0x18c, lpBuffer=0x1282fd30*, nNumberOfBytesToWrite=0x3a360, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x1282fd30*, lpNumberOfBytesWritten=0x27e3a8*=0x3a360, lpOverlapped=0x0) returned 1 [0256.187] CloseHandle (hObject=0x18c) returned 1 [0256.191] SetErrorMode (uMode=0x1) returned 0x0 [0256.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6944ad90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x3a360)) returned 1 [0256.191] SetErrorMode (uMode=0x0) returned 0x1 [0256.191] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\HGIjdA7eq2Xc7yvb_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\hgijda7eq2xc7yvb_encrypted_by.whiterose")) returned 1 [0256.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0256.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0256.302] SetErrorMode (uMode=0x1) returned 0x0 [0256.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.304] GetFileType (hFile=0x18c) returned 0x1 [0256.304] SetErrorMode (uMode=0x0) returned 0x1 [0256.304] GetFileType (hFile=0x18c) returned 0x1 [0256.304] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xce17 [0256.305] ReadFile (in: hFile=0x18c, lpBuffer=0x26fc428, nNumberOfBytesToRead=0xce17, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x26fc428*, lpNumberOfBytesRead=0x27e328*=0xce17, lpOverlapped=0x0) returned 1 [0256.321] CloseHandle (hObject=0x18c) returned 1 [0256.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0256.322] SetErrorMode (uMode=0x1) returned 0x0 [0256.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1 [0256.322] SetErrorMode (uMode=0x0) returned 0x1 [0256.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0256.585] SetErrorMode (uMode=0x1) returned 0x0 [0256.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.587] GetFileType (hFile=0x18c) returned 0x1 [0256.587] SetErrorMode (uMode=0x0) returned 0x1 [0256.587] GetFileType (hFile=0x18c) returned 0x1 [0256.587] WriteFile (in: hFile=0x18c, lpBuffer=0x2798218*, nNumberOfBytesToWrite=0xcf20, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x2798218*, lpNumberOfBytesWritten=0x27e3a8*=0xcf20, lpOverlapped=0x0) returned 1 [0256.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0256.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\wDg9RlBiSBRuTGop_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\wDg9RlBiSBRuTGop_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0256.590] SetErrorMode (uMode=0x1) returned 0x0 [0256.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69829150, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xcf20)) returned 1 [0256.590] SetErrorMode (uMode=0x0) returned 0x1 [0256.591] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\wDg9RlBiSBRuTGop_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\wdg9rlbisbrutgop_encrypted_by.whiterose")) returned 1 [0256.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.692] SetErrorMode (uMode=0x1) returned 0x0 [0256.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.693] GetFileType (hFile=0x18c) returned 0x1 [0256.694] SetErrorMode (uMode=0x0) returned 0x1 [0256.694] GetFileType (hFile=0x18c) returned 0x1 [0256.694] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xc878 [0256.694] ReadFile (in: hFile=0x18c, lpBuffer=0x27a6fb0, nNumberOfBytesToRead=0xc878, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x27a6fb0*, lpNumberOfBytesRead=0x27e328*=0xc878, lpOverlapped=0x0) returned 1 [0256.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.696] SetErrorMode (uMode=0x1) returned 0x0 [0256.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1 [0256.696] SetErrorMode (uMode=0x0) returned 0x1 [0256.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.774] SetErrorMode (uMode=0x1) returned 0x0 [0256.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.775] GetFileType (hFile=0x18c) returned 0x1 [0256.775] SetErrorMode (uMode=0x0) returned 0x1 [0256.775] GetFileType (hFile=0x18c) returned 0x1 [0256.775] WriteFile (in: hFile=0x18c, lpBuffer=0x2841220*, nNumberOfBytesToWrite=0xc980, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x2841220*, lpNumberOfBytesWritten=0x27e3a8*=0xc980, lpOverlapped=0x0) returned 1 [0256.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\g5TmW*lX9pbYZzoZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\g5TmW*lX9pbYZzoZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0256.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x27bb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0256.789] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js")) returned 1 [0256.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0256.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0256.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0256.792] SetErrorMode (uMode=0x1) returned 0x0 [0256.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.793] GetFileType (hFile=0x18c) returned 0x1 [0256.793] SetErrorMode (uMode=0x0) returned 0x1 [0256.793] GetFileType (hFile=0x18c) returned 0x1 [0256.793] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0xc26 [0256.793] ReadFile (in: hFile=0x18c, lpBuffer=0x2850b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x2850b28*, lpNumberOfBytesRead=0x27e328*=0xc26, lpOverlapped=0x0) returned 1 [0256.796] CloseHandle (hObject=0x18c) returned 1 [0256.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0256.797] SetErrorMode (uMode=0x1) returned 0x0 [0256.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1 [0256.797] SetErrorMode (uMode=0x0) returned 0x1 [0256.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0256.949] SetErrorMode (uMode=0x1) returned 0x0 [0256.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0256.951] GetFileType (hFile=0x18c) returned 0x1 [0256.951] SetErrorMode (uMode=0x0) returned 0x1 [0256.951] GetFileType (hFile=0x18c) returned 0x1 [0256.951] WriteFile (in: hFile=0x18c, lpBuffer=0x28b3048*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x27e2c8, lpOverlapped=0x0 | out: lpBuffer=0x28b3048*, lpNumberOfBytesWritten=0x27e2c8*=0xd30, lpOverlapped=0x0) returned 1 [0256.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0256.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\nEAqnjs8L6rmCtbG_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\nEAqnjs8L6rmCtbG_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0256.954] SetErrorMode (uMode=0x1) returned 0x0 [0256.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b950f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0256.954] SetErrorMode (uMode=0x0) returned 0x1 [0256.954] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\nEAqnjs8L6rmCtbG_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\neaqnjs8l6rmctbg_encrypted_by.whiterose")) returned 1 [0257.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0257.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0257.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0257.051] SetErrorMode (uMode=0x1) returned 0x0 [0257.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.052] GetFileType (hFile=0x18c) returned 0x1 [0257.052] SetErrorMode (uMode=0x0) returned 0x1 [0257.052] GetFileType (hFile=0x18c) returned 0x1 [0257.052] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x38a8 [0257.052] ReadFile (in: hFile=0x18c, lpBuffer=0x28b5af8, nNumberOfBytesToRead=0x38a8, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x28b5af8*, lpNumberOfBytesRead=0x27e328*=0x38a8, lpOverlapped=0x0) returned 1 [0257.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0257.055] SetErrorMode (uMode=0x1) returned 0x0 [0257.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1 [0257.055] SetErrorMode (uMode=0x0) returned 0x1 [0257.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0257.200] SetErrorMode (uMode=0x1) returned 0x0 [0257.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.202] GetFileType (hFile=0x18c) returned 0x1 [0257.202] SetErrorMode (uMode=0x0) returned 0x1 [0257.202] GetFileType (hFile=0x18c) returned 0x1 [0257.202] WriteFile (in: hFile=0x18c, lpBuffer=0x272bbf8*, nNumberOfBytesToWrite=0x39b0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x272bbf8*, lpNumberOfBytesWritten=0x27e3a8*=0x39b0, lpOverlapped=0x0) returned 1 [0257.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0257.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PpPZ3Tc5xNFfNlGa_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PpPZ3Tc5xNFfNlGa_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0257.204] SetErrorMode (uMode=0x1) returned 0x0 [0257.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69df66f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x39b0)) returned 1 [0257.204] SetErrorMode (uMode=0x0) returned 0x1 [0257.205] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PpPZ3Tc5xNFfNlGa_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\pppz3tc5xnffnlga_encrypted_by.whiterose")) returned 1 [0257.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0257.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0257.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0257.364] SetErrorMode (uMode=0x1) returned 0x0 [0257.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.365] GetFileType (hFile=0x18c) returned 0x1 [0257.365] SetErrorMode (uMode=0x0) returned 0x1 [0257.365] GetFileType (hFile=0x18c) returned 0x1 [0257.365] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x2b20 [0257.365] ReadFile (in: hFile=0x18c, lpBuffer=0x2731480, nNumberOfBytesToRead=0x2b20, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x2731480*, lpNumberOfBytesRead=0x27e328*=0x2b20, lpOverlapped=0x0) returned 1 [0257.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0257.368] SetErrorMode (uMode=0x1) returned 0x0 [0257.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1 [0257.368] SetErrorMode (uMode=0x0) returned 0x1 [0257.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0257.457] SetErrorMode (uMode=0x1) returned 0x0 [0257.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.459] GetFileType (hFile=0x18c) returned 0x1 [0257.459] SetErrorMode (uMode=0x0) returned 0x1 [0257.459] GetFileType (hFile=0x18c) returned 0x1 [0257.459] WriteFile (in: hFile=0x18c, lpBuffer=0x27a6dd8*, nNumberOfBytesToWrite=0x2c30, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x27a6dd8*, lpNumberOfBytesWritten=0x27e3a8*=0x2c30, lpOverlapped=0x0) returned 1 [0257.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0257.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PXUATy1A0QxQgF53_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PXUATy1A0QxQgF53_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0257.463] SetErrorMode (uMode=0x1) returned 0x0 [0257.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a07de50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2c30)) returned 1 [0257.463] SetErrorMode (uMode=0x0) returned 0x1 [0257.463] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PXUATy1A0QxQgF53_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\pxuaty1a0qxqgf53_encrypted_by.whiterose")) returned 1 [0257.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", lpFilePart=0x0) returned 0x94 [0257.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", lpFilePart=0x0) returned 0x94 [0257.566] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0257.566] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0257.567] CoTaskMemFree (pv=0xffa70) [0257.567] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0257.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.568] SetErrorMode (uMode=0x1) returned 0x0 [0257.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.568] GetFileType (hFile=0x18c) returned 0x1 [0257.568] SetErrorMode (uMode=0x0) returned 0x1 [0257.568] GetFileType (hFile=0x18c) returned 0x1 [0257.568] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x46039 [0257.569] ReadFile (in: hFile=0x18c, lpBuffer=0x1289d220, nNumberOfBytesToRead=0x46039, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x1289d220*, lpNumberOfBytesRead=0x27e328*=0x46039, lpOverlapped=0x0) returned 1 [0257.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.577] SetErrorMode (uMode=0x1) returned 0x0 [0257.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1 [0257.577] SetErrorMode (uMode=0x0) returned 0x1 [0257.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.666] SetErrorMode (uMode=0x1) returned 0x0 [0257.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.670] GetFileType (hFile=0x18c) returned 0x1 [0257.670] SetErrorMode (uMode=0x0) returned 0x1 [0257.670] GetFileType (hFile=0x18c) returned 0x1 [0257.670] WriteFile (in: hFile=0x18c, lpBuffer=0x12a41950*, nNumberOfBytesToWrite=0x46140, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x12a41950*, lpNumberOfBytesWritten=0x27e3a8*=0x46140, lpOverlapped=0x0) returned 1 [0257.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\SvNUxXXqfH7jPh*O_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\SvNUxXXqfH7jPh*O_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0257.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x27bb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0257.681] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css")) returned 1 [0257.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0257.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0257.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0257.688] SetErrorMode (uMode=0x1) returned 0x0 [0257.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.688] GetFileType (hFile=0x18c) returned 0x1 [0257.688] SetErrorMode (uMode=0x0) returned 0x1 [0257.689] GetFileType (hFile=0x18c) returned 0x1 [0257.689] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x7c33 [0257.689] ReadFile (in: hFile=0x18c, lpBuffer=0x2806888, nNumberOfBytesToRead=0x7c33, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x2806888*, lpNumberOfBytesRead=0x27e328*=0x7c33, lpOverlapped=0x0) returned 1 [0257.690] CloseHandle (hObject=0x18c) returned 1 [0257.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0257.691] SetErrorMode (uMode=0x1) returned 0x0 [0257.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1 [0257.692] SetErrorMode (uMode=0x0) returned 0x1 [0257.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0257.882] SetErrorMode (uMode=0x1) returned 0x0 [0257.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.883] GetFileType (hFile=0x18c) returned 0x1 [0257.883] SetErrorMode (uMode=0x0) returned 0x1 [0257.883] GetFileType (hFile=0x18c) returned 0x1 [0257.884] WriteFile (in: hFile=0x18c, lpBuffer=0x286eca8*, nNumberOfBytesToWrite=0x7d40, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x286eca8*, lpNumberOfBytesWritten=0x27e3a8*=0x7d40, lpOverlapped=0x0) returned 1 [0257.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0257.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PuZaKcN8KTopLZsT_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PuZaKcN8KTopLZsT_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0257.887] SetErrorMode (uMode=0x1) returned 0x0 [0257.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a482370, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7d40)) returned 1 [0257.887] SetErrorMode (uMode=0x0) returned 0x1 [0257.887] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\PuZaKcN8KTopLZsT_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\puzakcn8ktoplzst_encrypted_by.whiterose")) returned 1 [0257.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0257.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0257.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0257.987] SetErrorMode (uMode=0x1) returned 0x0 [0257.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0257.987] GetFileType (hFile=0x18c) returned 0x1 [0257.987] SetErrorMode (uMode=0x0) returned 0x1 [0257.988] GetFileType (hFile=0x18c) returned 0x1 [0257.988] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x2adeb [0257.988] ReadFile (in: hFile=0x18c, lpBuffer=0x126d2418, nNumberOfBytesToRead=0x2adeb, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x126d2418*, lpNumberOfBytesRead=0x27e328*=0x2adeb, lpOverlapped=0x0) returned 1 [0258.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0258.007] SetErrorMode (uMode=0x1) returned 0x0 [0258.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1 [0258.007] SetErrorMode (uMode=0x0) returned 0x1 [0258.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0258.085] SetErrorMode (uMode=0x1) returned 0x0 [0258.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.087] GetFileType (hFile=0x18c) returned 0x1 [0258.087] SetErrorMode (uMode=0x0) returned 0x1 [0258.087] GetFileType (hFile=0x18c) returned 0x1 [0258.087] WriteFile (in: hFile=0x18c, lpBuffer=0x127d3d68*, nNumberOfBytesToWrite=0x2aef0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x127d3d68*, lpNumberOfBytesWritten=0x27e3a8*=0x2aef0, lpOverlapped=0x0) returned 1 [0258.090] CloseHandle (hObject=0x18c) returned 1 [0258.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0258.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\O46MCRADkWf1eiRJ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\O46MCRADkWf1eiRJ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0258.093] SetErrorMode (uMode=0x1) returned 0x0 [0258.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a671550, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x2aef0)) returned 1 [0258.093] SetErrorMode (uMode=0x0) returned 0x1 [0258.093] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\O46MCRADkWf1eiRJ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\o46mcradkwf1eirj_encrypted_by.whiterose")) returned 1 [0258.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0258.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0258.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0258.190] SetErrorMode (uMode=0x1) returned 0x0 [0258.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.191] GetFileType (hFile=0x18c) returned 0x1 [0258.191] SetErrorMode (uMode=0x0) returned 0x1 [0258.191] GetFileType (hFile=0x18c) returned 0x1 [0258.191] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x794cf [0258.192] ReadFile (in: hFile=0x18c, lpBuffer=0x127fec88, nNumberOfBytesToRead=0x794cf, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x127fec88*, lpNumberOfBytesRead=0x27e328*=0x794cf, lpOverlapped=0x0) returned 1 [0258.199] CloseHandle (hObject=0x18c) returned 1 [0258.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0258.204] SetErrorMode (uMode=0x1) returned 0x0 [0258.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1 [0258.205] SetErrorMode (uMode=0x0) returned 0x1 [0258.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0258.330] SetErrorMode (uMode=0x1) returned 0x0 [0258.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.334] GetFileType (hFile=0x18c) returned 0x1 [0258.334] SetErrorMode (uMode=0x0) returned 0x1 [0258.334] GetFileType (hFile=0x18c) returned 0x1 [0258.334] WriteFile (in: hFile=0x18c, lpBuffer=0x127c4fc8*, nNumberOfBytesToWrite=0x795d0, lpNumberOfBytesWritten=0x27e3a8, lpOverlapped=0x0 | out: lpBuffer=0x127c4fc8*, lpNumberOfBytesWritten=0x27e3a8*=0x795d0, lpOverlapped=0x0) returned 1 [0258.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0258.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\SBY7ggxtsNOuNVXv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\SBY7ggxtsNOuNVXv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0258.344] SetErrorMode (uMode=0x1) returned 0x0 [0258.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a8d2b50, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x795d0)) returned 1 [0258.344] SetErrorMode (uMode=0x0) returned 0x1 [0258.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\SBY7ggxtsNOuNVXv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\sby7ggxtsnounvxv_encrypted_by.whiterose")) returned 1 [0258.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0258.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x27e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0258.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0258.456] SetErrorMode (uMode=0x1) returned 0x0 [0258.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.457] GetFileType (hFile=0x18c) returned 0x1 [0258.457] SetErrorMode (uMode=0x0) returned 0x1 [0258.457] GetFileType (hFile=0x18c) returned 0x1 [0258.457] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e448 | out: lpFileSizeHigh=0x27e448*=0x0) returned 0x941 [0258.457] ReadFile (in: hFile=0x18c, lpBuffer=0x26fcd40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e328, lpOverlapped=0x0 | out: lpBuffer=0x26fcd40*, lpNumberOfBytesRead=0x27e328*=0x941, lpOverlapped=0x0) returned 1 [0258.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x27e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0258.462] SetErrorMode (uMode=0x1) returned 0x0 [0258.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x27e330 | out: lpFileInformation=0x27e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1 [0258.462] SetErrorMode (uMode=0x0) returned 0x1 [0258.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x27ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0258.621] SetErrorMode (uMode=0x1) returned 0x0 [0258.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.623] GetFileType (hFile=0x18c) returned 0x1 [0258.623] SetErrorMode (uMode=0x0) returned 0x1 [0258.623] GetFileType (hFile=0x18c) returned 0x1 [0258.623] WriteFile (in: hFile=0x18c, lpBuffer=0x275dcf0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x27e2c8, lpOverlapped=0x0 | out: lpBuffer=0x275dcf0*, lpNumberOfBytesWritten=0x27e2c8*=0xa50, lpOverlapped=0x0) returned 1 [0258.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0258.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\jmcFVQgqew4nYNr2_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\jmcFVQgqew4nYNr2_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xae [0258.625] SetErrorMode (uMode=0x1) returned 0x0 [0258.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x27e2d0 | out: lpFileInformation=0x27e2d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6ab80410, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0258.625] SetErrorMode (uMode=0x0) returned 0x1 [0258.625] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\jmcFVQgqew4nYNr2_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\jmcfvqgqew4nynr2_encrypted_by.whiterose")) returned 1 [0258.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0258.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0258.743] SetErrorMode (uMode=0x1) returned 0x0 [0258.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0258.746] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.746] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0258.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0258.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0258.747] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0258.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0258.748] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0258.749] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0258.749] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0258.749] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0 [0258.750] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0258.763] SetErrorMode (uMode=0x0) returned 0x1 [0258.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0258.763] SetErrorMode (uMode=0x1) returned 0x0 [0258.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0258.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0258.765] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0258.766] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0258.766] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0258.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0258.767] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0258.768] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0258.768] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0258.768] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0 [0258.769] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0258.770] SetErrorMode (uMode=0x0) returned 0x1 [0258.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0258.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0258.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0258.771] SetErrorMode (uMode=0x1) returned 0x0 [0258.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.772] GetFileType (hFile=0x18c) returned 0x1 [0258.772] SetErrorMode (uMode=0x0) returned 0x1 [0258.772] GetFileType (hFile=0x18c) returned 0x1 [0258.772] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x1a1d [0258.772] ReadFile (in: hFile=0x18c, lpBuffer=0x2764c68, nNumberOfBytesToRead=0x1a1d, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x2764c68*, lpNumberOfBytesRead=0x27e288*=0x1a1d, lpOverlapped=0x0) returned 1 [0258.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0258.775] SetErrorMode (uMode=0x1) returned 0x0 [0258.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d)) returned 1 [0258.775] SetErrorMode (uMode=0x0) returned 0x1 [0258.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0258.832] SetErrorMode (uMode=0x1) returned 0x0 [0258.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.833] GetFileType (hFile=0x18c) returned 0x1 [0258.833] SetErrorMode (uMode=0x0) returned 0x1 [0258.834] GetFileType (hFile=0x18c) returned 0x1 [0258.834] WriteFile (in: hFile=0x18c, lpBuffer=0x27ceb68*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x27e308, lpOverlapped=0x0 | out: lpBuffer=0x27ceb68*, lpNumberOfBytesWritten=0x27e308*=0x1b20, lpOverlapped=0x0) returned 1 [0258.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0258.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\iUhfMv5XQzUXs8PR_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\iUhfMv5XQzUXs8PR_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0258.835] SetErrorMode (uMode=0x1) returned 0x0 [0258.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6ad95750, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1b20)) returned 1 [0258.835] SetErrorMode (uMode=0x0) returned 0x1 [0258.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\iUhfMv5XQzUXs8PR_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\iuhfmv5xqzuxs8pr_encrypted_by.whiterose")) returned 1 [0258.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0258.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0258.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0258.943] SetErrorMode (uMode=0x1) returned 0x0 [0258.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0258.945] GetFileType (hFile=0x18c) returned 0x1 [0258.945] SetErrorMode (uMode=0x0) returned 0x1 [0258.945] GetFileType (hFile=0x18c) returned 0x1 [0258.945] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x221da [0258.946] ReadFile (in: hFile=0x18c, lpBuffer=0x1283e5c8, nNumberOfBytesToRead=0x221da, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x1283e5c8*, lpNumberOfBytesRead=0x27e288*=0x221da, lpOverlapped=0x0) returned 1 [0258.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0258.953] SetErrorMode (uMode=0x1) returned 0x0 [0258.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1 [0258.953] SetErrorMode (uMode=0x0) returned 0x1 [0259.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0259.019] SetErrorMode (uMode=0x1) returned 0x0 [0259.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.023] GetFileType (hFile=0x18c) returned 0x1 [0259.023] SetErrorMode (uMode=0x0) returned 0x1 [0259.023] GetFileType (hFile=0x18c) returned 0x1 [0259.023] WriteFile (in: hFile=0x18c, lpBuffer=0x12a28920*, nNumberOfBytesToWrite=0x222e0, lpNumberOfBytesWritten=0x27e308, lpOverlapped=0x0 | out: lpBuffer=0x12a28920*, lpNumberOfBytesWritten=0x27e308*=0x222e0, lpOverlapped=0x0) returned 1 [0259.026] CloseHandle (hObject=0x18c) returned 1 [0259.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0259.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*nvYqO9e81CeHAdg_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*nvYqO9e81CeHAdg_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0259.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x27baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0259.041] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js")) returned 1 [0259.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0259.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0259.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0259.044] SetErrorMode (uMode=0x1) returned 0x0 [0259.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.046] GetFileType (hFile=0x18c) returned 0x1 [0259.047] SetErrorMode (uMode=0x0) returned 0x1 [0259.047] GetFileType (hFile=0x18c) returned 0x1 [0259.047] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0xf2 [0259.047] ReadFile (in: hFile=0x18c, lpBuffer=0x2833548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x2833548*, lpNumberOfBytesRead=0x27e288*=0xf2, lpOverlapped=0x0) returned 1 [0259.048] CloseHandle (hObject=0x18c) returned 1 [0259.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0259.049] SetErrorMode (uMode=0x1) returned 0x0 [0259.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0259.049] SetErrorMode (uMode=0x0) returned 0x1 [0259.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0259.273] SetErrorMode (uMode=0x1) returned 0x0 [0259.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.273] GetFileType (hFile=0x18c) returned 0x1 [0259.273] SetErrorMode (uMode=0x0) returned 0x1 [0259.273] GetFileType (hFile=0x18c) returned 0x1 [0259.273] WriteFile (in: hFile=0x18c, lpBuffer=0x2890d08*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x2890d08*, lpNumberOfBytesWritten=0x27e228*=0x200, lpOverlapped=0x0) returned 1 [0259.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0259.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\KFvPp6NTCh0QDYjm_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\KFvPp6NTCh0QDYjm_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0259.276] SetErrorMode (uMode=0x1) returned 0x0 [0259.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b1bfdd0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0259.276] SetErrorMode (uMode=0x0) returned 0x1 [0259.276] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\KFvPp6NTCh0QDYjm_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\kfvpp6ntch0qdyjm_encrypted_by.whiterose")) returned 1 [0259.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0259.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0259.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0259.375] SetErrorMode (uMode=0x1) returned 0x0 [0259.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.376] GetFileType (hFile=0x18c) returned 0x1 [0259.376] SetErrorMode (uMode=0x0) returned 0x1 [0259.376] GetFileType (hFile=0x18c) returned 0x1 [0259.376] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x1bef [0259.376] ReadFile (in: hFile=0x18c, lpBuffer=0x2893910, nNumberOfBytesToRead=0x1bef, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x2893910*, lpNumberOfBytesRead=0x27e288*=0x1bef, lpOverlapped=0x0) returned 1 [0259.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0259.379] SetErrorMode (uMode=0x1) returned 0x0 [0259.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1 [0259.379] SetErrorMode (uMode=0x0) returned 0x1 [0259.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0259.447] SetErrorMode (uMode=0x1) returned 0x0 [0259.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.449] GetFileType (hFile=0x18c) returned 0x1 [0259.449] SetErrorMode (uMode=0x0) returned 0x1 [0259.449] GetFileType (hFile=0x18c) returned 0x1 [0259.449] WriteFile (in: hFile=0x18c, lpBuffer=0x28fbab0*, nNumberOfBytesToWrite=0x1cf0, lpNumberOfBytesWritten=0x27e308, lpOverlapped=0x0 | out: lpBuffer=0x28fbab0*, lpNumberOfBytesWritten=0x27e308*=0x1cf0, lpOverlapped=0x0) returned 1 [0259.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0259.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\sBYeJIWta0zp8W8b_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\sBYeJIWta0zp8W8b_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0259.450] SetErrorMode (uMode=0x1) returned 0x0 [0259.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b362cf0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf0)) returned 1 [0259.451] SetErrorMode (uMode=0x0) returned 0x1 [0259.451] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\sBYeJIWta0zp8W8b_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\sbyejiwta0zp8w8b_encrypted_by.whiterose")) returned 1 [0259.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0259.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0259.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0259.547] SetErrorMode (uMode=0x1) returned 0x0 [0259.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.547] GetFileType (hFile=0x18c) returned 0x1 [0259.547] SetErrorMode (uMode=0x0) returned 0x1 [0259.547] GetFileType (hFile=0x18c) returned 0x1 [0259.548] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x3b [0259.548] ReadFile (in: hFile=0x18c, lpBuffer=0x28ff7b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x28ff7b8*, lpNumberOfBytesRead=0x27e288*=0x3b, lpOverlapped=0x0) returned 1 [0259.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0259.549] SetErrorMode (uMode=0x1) returned 0x0 [0259.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0259.550] SetErrorMode (uMode=0x0) returned 0x1 [0259.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0259.619] SetErrorMode (uMode=0x1) returned 0x0 [0259.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.623] GetFileType (hFile=0x18c) returned 0x1 [0259.623] SetErrorMode (uMode=0x0) returned 0x1 [0259.623] GetFileType (hFile=0x18c) returned 0x1 [0259.623] WriteFile (in: hFile=0x18c, lpBuffer=0x2760370*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x2760370*, lpNumberOfBytesWritten=0x27e228*=0x140, lpOverlapped=0x0) returned 1 [0259.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0259.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\NMuKW0yfkbyVFUOZ_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\NMuKW0yfkbyVFUOZ_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0259.626] SetErrorMode (uMode=0x1) returned 0x0 [0259.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b52bd70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0259.626] SetErrorMode (uMode=0x0) returned 0x1 [0259.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\NMuKW0yfkbyVFUOZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\nmukw0yfkbyvfuoz_encrypted_by.whiterose")) returned 1 [0259.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.734] SetErrorMode (uMode=0x1) returned 0x0 [0259.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.735] GetFileType (hFile=0x18c) returned 0x1 [0259.735] SetErrorMode (uMode=0x0) returned 0x1 [0259.735] GetFileType (hFile=0x18c) returned 0x1 [0259.735] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x828 [0259.735] ReadFile (in: hFile=0x18c, lpBuffer=0x27636f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x27636f0*, lpNumberOfBytesRead=0x27e288*=0x828, lpOverlapped=0x0) returned 1 [0259.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.740] SetErrorMode (uMode=0x1) returned 0x0 [0259.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1 [0259.740] SetErrorMode (uMode=0x0) returned 0x1 [0259.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.830] SetErrorMode (uMode=0x1) returned 0x0 [0259.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.831] GetFileType (hFile=0x18c) returned 0x1 [0259.831] SetErrorMode (uMode=0x0) returned 0x1 [0259.832] GetFileType (hFile=0x18c) returned 0x1 [0259.832] WriteFile (in: hFile=0x18c, lpBuffer=0x27c41f0*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x27c41f0*, lpNumberOfBytesWritten=0x27e228*=0x930, lpOverlapped=0x0) returned 1 [0259.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\uEcEmyk6t*jUdbHM_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\uEcEmyk6t*jUdbHM_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0259.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x27baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0259.841] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html")) returned 1 [0259.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0259.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0259.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0259.844] SetErrorMode (uMode=0x1) returned 0x0 [0259.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.846] GetFileType (hFile=0x18c) returned 0x1 [0259.846] SetErrorMode (uMode=0x0) returned 0x1 [0259.846] GetFileType (hFile=0x18c) returned 0x1 [0259.846] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x3b [0259.846] ReadFile (in: hFile=0x18c, lpBuffer=0x27c7268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x27c7268*, lpNumberOfBytesRead=0x27e288*=0x3b, lpOverlapped=0x0) returned 1 [0259.847] CloseHandle (hObject=0x18c) returned 1 [0259.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0259.848] SetErrorMode (uMode=0x1) returned 0x0 [0259.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0259.848] SetErrorMode (uMode=0x0) returned 0x1 [0259.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0259.986] SetErrorMode (uMode=0x1) returned 0x0 [0259.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0259.987] GetFileType (hFile=0x18c) returned 0x1 [0259.987] SetErrorMode (uMode=0x0) returned 0x1 [0259.987] GetFileType (hFile=0x18c) returned 0x1 [0259.987] WriteFile (in: hFile=0x18c, lpBuffer=0x2825728*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x2825728*, lpNumberOfBytesWritten=0x27e228*=0x140, lpOverlapped=0x0) returned 1 [0259.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0259.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\XV703HCg6ImNQqHt_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\XV703HCg6ImNQqHt_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0259.990] SetErrorMode (uMode=0x1) returned 0x0 [0259.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b897d10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0259.990] SetErrorMode (uMode=0x0) returned 0x1 [0259.990] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\XV703HCg6ImNQqHt_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\xv703hcg6imnqqht_encrypted_by.whiterose")) returned 1 [0260.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0260.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0260.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0260.094] SetErrorMode (uMode=0x1) returned 0x0 [0260.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0260.095] GetFileType (hFile=0x18c) returned 0x1 [0260.095] SetErrorMode (uMode=0x0) returned 0x1 [0260.095] GetFileType (hFile=0x18c) returned 0x1 [0260.095] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x3b [0260.095] ReadFile (in: hFile=0x18c, lpBuffer=0x28282c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x28282c0*, lpNumberOfBytesRead=0x27e288*=0x3b, lpOverlapped=0x0) returned 1 [0260.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0260.096] SetErrorMode (uMode=0x1) returned 0x0 [0260.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0260.096] SetErrorMode (uMode=0x0) returned 0x1 [0260.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0260.159] SetErrorMode (uMode=0x1) returned 0x0 [0260.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0260.161] GetFileType (hFile=0x18c) returned 0x1 [0260.161] SetErrorMode (uMode=0x0) returned 0x1 [0260.161] GetFileType (hFile=0x18c) returned 0x1 [0260.161] WriteFile (in: hFile=0x18c, lpBuffer=0x28855b8*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x28855b8*, lpNumberOfBytesWritten=0x27e228*=0x140, lpOverlapped=0x0) returned 1 [0260.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0260.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\4Z0hrhbaTxOb2Y1Y_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\4Z0hrhbaTxOb2Y1Y_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xb9 [0260.162] SetErrorMode (uMode=0x1) returned 0x0 [0260.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6ba3ac30, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0260.162] SetErrorMode (uMode=0x0) returned 0x1 [0260.162] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\4Z0hrhbaTxOb2Y1Y_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\4z0hrhbatxob2y1y_encrypted_by.whiterose")) returned 1 [0260.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xab [0260.266] SetErrorMode (uMode=0x1) returned 0x0 [0260.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.268] GetFileType (hFile=0x18c) returned 0x1 [0260.268] SetErrorMode (uMode=0x0) returned 0x1 [0260.268] GetFileType (hFile=0x18c) returned 0x1 [0260.269] WriteFile (in: hFile=0x18c, lpBuffer=0x2898e90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e248, lpOverlapped=0x0 | out: lpBuffer=0x2898e90*, lpNumberOfBytesWritten=0x27e248*=0x1000, lpOverlapped=0x0) returned 1 [0260.271] WriteFile (in: hFile=0x18c, lpBuffer=0x2898e90*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e2a8, lpOverlapped=0x0 | out: lpBuffer=0x2898e90*, lpNumberOfBytesWritten=0x27e2a8*=0xb14, lpOverlapped=0x0) returned 1 [0260.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0260.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0260.272] SetErrorMode (uMode=0x1) returned 0x0 [0260.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0260.274] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0260.275] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0 [0260.275] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.275] SetErrorMode (uMode=0x0) returned 0x1 [0260.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0260.276] SetErrorMode (uMode=0x1) returned 0x0 [0260.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0260.277] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0260.278] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0 [0260.278] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.278] SetErrorMode (uMode=0x0) returned 0x1 [0260.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.279] SetErrorMode (uMode=0x1) returned 0x0 [0260.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0260.280] GetFileType (hFile=0x18c) returned 0x1 [0260.280] SetErrorMode (uMode=0x0) returned 0x1 [0260.280] GetFileType (hFile=0x18c) returned 0x1 [0260.280] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x174c [0260.280] ReadFile (in: hFile=0x18c, lpBuffer=0x28a1a80, nNumberOfBytesToRead=0x174c, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x28a1a80*, lpNumberOfBytesRead=0x27e288*=0x174c, lpOverlapped=0x0) returned 1 [0260.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.284] SetErrorMode (uMode=0x1) returned 0x0 [0260.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1 [0260.284] SetErrorMode (uMode=0x0) returned 0x1 [0260.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.376] SetErrorMode (uMode=0x1) returned 0x0 [0260.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0260.377] GetFileType (hFile=0x18c) returned 0x1 [0260.377] SetErrorMode (uMode=0x0) returned 0x1 [0260.377] GetFileType (hFile=0x18c) returned 0x1 [0260.377] WriteFile (in: hFile=0x18c, lpBuffer=0x2908b60*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x27e308, lpOverlapped=0x0 | out: lpBuffer=0x2908b60*, lpNumberOfBytesWritten=0x27e308*=0x1850, lpOverlapped=0x0) returned 1 [0260.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\Urm17Bft*Xwtfroo_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\Urm17Bft*Xwtfroo_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xc2 [0260.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x27baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0260.389] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html")) returned 1 [0260.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0260.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x27e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0260.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0260.392] SetErrorMode (uMode=0x1) returned 0x0 [0260.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0260.393] GetFileType (hFile=0x18c) returned 0x1 [0260.393] SetErrorMode (uMode=0x0) returned 0x1 [0260.393] GetFileType (hFile=0x18c) returned 0x1 [0260.393] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e3a8 | out: lpFileSizeHigh=0x27e3a8*=0x0) returned 0x945 [0260.393] ReadFile (in: hFile=0x18c, lpBuffer=0x290d190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e288, lpOverlapped=0x0 | out: lpBuffer=0x290d190*, lpNumberOfBytesRead=0x27e288*=0x945, lpOverlapped=0x0) returned 1 [0260.395] CloseHandle (hObject=0x18c) returned 1 [0260.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x27e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0260.396] SetErrorMode (uMode=0x1) returned 0x0 [0260.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x27e290 | out: lpFileInformation=0x27e290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945)) returned 1 [0260.396] SetErrorMode (uMode=0x0) returned 0x1 [0260.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x27dd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0260.581] SetErrorMode (uMode=0x1) returned 0x0 [0260.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0260.583] GetFileType (hFile=0x18c) returned 0x1 [0260.583] SetErrorMode (uMode=0x0) returned 0x1 [0260.583] GetFileType (hFile=0x18c) returned 0x1 [0260.583] WriteFile (in: hFile=0x18c, lpBuffer=0x27714a0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x27e228, lpOverlapped=0x0 | out: lpBuffer=0x27714a0*, lpNumberOfBytesWritten=0x27e228*=0xa50, lpOverlapped=0x0) returned 1 [0260.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0260.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\c9KGxQfaD4C5btTs_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\c9KGxQfaD4C5btTs_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0xc2 [0260.585] SetErrorMode (uMode=0x1) returned 0x0 [0260.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x27e230 | out: lpFileInformation=0x27e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6be3f150, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0260.585] SetErrorMode (uMode=0x0) returned 0x1 [0260.585] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\c9KGxQfaD4C5btTs_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\c9kgxqfad4c5btts_encrypted_by.whiterose")) returned 1 [0260.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xb4 [0260.686] SetErrorMode (uMode=0x1) returned 0x0 [0260.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.687] GetFileType (hFile=0x18c) returned 0x1 [0260.687] SetErrorMode (uMode=0x0) returned 0x1 [0260.687] GetFileType (hFile=0x18c) returned 0x1 [0260.688] WriteFile (in: hFile=0x18c, lpBuffer=0x2784de8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e248, lpOverlapped=0x0 | out: lpBuffer=0x2784de8*, lpNumberOfBytesWritten=0x27e248*=0x1000, lpOverlapped=0x0) returned 1 [0260.691] WriteFile (in: hFile=0x18c, lpBuffer=0x2784de8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e2a8, lpOverlapped=0x0 | out: lpBuffer=0x2784de8*, lpNumberOfBytesWritten=0x27e2a8*=0xb14, lpOverlapped=0x0) returned 1 [0260.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0260.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0260.692] SetErrorMode (uMode=0x1) returned 0x0 [0260.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.694] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0260.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0260.695] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0260.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0260.696] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0260.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0260.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0260.697] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0260.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0260.698] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0260.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0260.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0260.699] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0260.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0260.700] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0260.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0260.701] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0260.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0260.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0260.702] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0260.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0260.703] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0260.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0260.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0260.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0260.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0260.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0260.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0260.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0260.706] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0260.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0260.707] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0260.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0260.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0260.708] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0260.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0260.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0260.709] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0260.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0260.710] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0260.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0260.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0260.711] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0260.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0260.712] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0260.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0260.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0260.713] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0260.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0260.714] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0260.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0260.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0260.715] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0260.716] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.717] SetErrorMode (uMode=0x0) returned 0x1 [0260.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x27deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0260.717] SetErrorMode (uMode=0x1) returned 0x0 [0260.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0260.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0260.719] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0260.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0260.720] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0260.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0260.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0260.721] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0260.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0260.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0260.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0260.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0260.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0260.724] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0260.724] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0260.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0260.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0260.725] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0260.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0260.726] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0260.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0260.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0260.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0260.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0260.728] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0260.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0260.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0260.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0260.730] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0260.730] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0260.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0260.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0260.731] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0260.732] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0260.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0260.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0260.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0260.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0260.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0260.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0260.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0260.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0260.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0260.736] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0260.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0260.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0260.737] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0260.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0260.738] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0260.739] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0260.739] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0260.739] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0260.740] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e060 | out: lpFindFileData=0x27e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0260.740] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.741] SetErrorMode (uMode=0x0) returned 0x1 [0260.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0260.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0260.741] SetErrorMode (uMode=0x1) returned 0x0 [0260.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.744] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.744] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.744] SetErrorMode (uMode=0x0) returned 0x1 [0260.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0260.744] SetErrorMode (uMode=0x1) returned 0x0 [0260.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.745] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.745] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.746] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.746] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.746] SetErrorMode (uMode=0x0) returned 0x1 [0260.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.747] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.747] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.761] CoTaskMemFree (pv=0xfe030) [0260.761] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.762] SetErrorMode (uMode=0x1) returned 0x0 [0260.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.763] GetFileType (hFile=0x18c) returned 0x1 [0260.763] SetErrorMode (uMode=0x0) returned 0x1 [0260.763] GetFileType (hFile=0x18c) returned 0x1 [0260.765] WriteFile (in: hFile=0x18c, lpBuffer=0x27a81a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e1a8, lpOverlapped=0x0 | out: lpBuffer=0x27a81a0*, lpNumberOfBytesWritten=0x27e1a8*=0x1000, lpOverlapped=0x0) returned 1 [0260.767] CloseHandle (hObject=0x18c) returned 1 [0260.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0260.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0260.768] SetErrorMode (uMode=0x1) returned 0x0 [0260.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.770] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.770] SetErrorMode (uMode=0x0) returned 0x1 [0260.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0260.771] SetErrorMode (uMode=0x1) returned 0x0 [0260.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.772] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.772] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.773] SetErrorMode (uMode=0x0) returned 0x1 [0260.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.773] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.773] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.773] CoTaskMemFree (pv=0xfe030) [0260.774] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.775] SetErrorMode (uMode=0x1) returned 0x0 [0260.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.775] GetFileType (hFile=0x18c) returned 0x1 [0260.775] SetErrorMode (uMode=0x0) returned 0x1 [0260.775] GetFileType (hFile=0x18c) returned 0x1 [0260.778] CloseHandle (hObject=0x18c) returned 1 [0260.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0260.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0260.778] SetErrorMode (uMode=0x1) returned 0x0 [0260.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.779] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.780] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.780] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.780] SetErrorMode (uMode=0x0) returned 0x1 [0260.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0260.781] SetErrorMode (uMode=0x1) returned 0x0 [0260.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.781] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.782] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.783] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.783] SetErrorMode (uMode=0x0) returned 0x1 [0260.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.783] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.783] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.784] CoTaskMemFree (pv=0xfe030) [0260.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.785] SetErrorMode (uMode=0x1) returned 0x0 [0260.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.785] GetFileType (hFile=0x18c) returned 0x1 [0260.785] SetErrorMode (uMode=0x0) returned 0x1 [0260.785] GetFileType (hFile=0x18c) returned 0x1 [0260.787] CloseHandle (hObject=0x18c) returned 1 [0260.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0260.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0260.788] SetErrorMode (uMode=0x1) returned 0x0 [0260.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.789] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.790] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.791] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.791] SetErrorMode (uMode=0x0) returned 0x1 [0260.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0260.791] SetErrorMode (uMode=0x1) returned 0x0 [0260.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.792] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.793] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.793] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.793] SetErrorMode (uMode=0x0) returned 0x1 [0260.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.794] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.794] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.794] CoTaskMemFree (pv=0xfe030) [0260.794] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.795] SetErrorMode (uMode=0x1) returned 0x0 [0260.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.796] GetFileType (hFile=0x18c) returned 0x1 [0260.796] SetErrorMode (uMode=0x0) returned 0x1 [0260.796] GetFileType (hFile=0x18c) returned 0x1 [0260.798] CloseHandle (hObject=0x18c) returned 1 [0260.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0260.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0260.799] SetErrorMode (uMode=0x1) returned 0x0 [0260.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.799] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.800] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.801] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.801] SetErrorMode (uMode=0x0) returned 0x1 [0260.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0260.801] SetErrorMode (uMode=0x1) returned 0x0 [0260.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.802] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.803] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.803] SetErrorMode (uMode=0x0) returned 0x1 [0260.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.804] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.804] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.804] CoTaskMemFree (pv=0xfe030) [0260.804] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.804] SetErrorMode (uMode=0x1) returned 0x0 [0260.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.805] SetErrorMode (uMode=0x0) returned 0x1 [0260.805] GetFileType (hFile=0x18c) returned 0x1 [0260.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0260.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0260.807] SetErrorMode (uMode=0x1) returned 0x0 [0260.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.808] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.809] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.809] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.809] SetErrorMode (uMode=0x0) returned 0x1 [0260.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0260.809] SetErrorMode (uMode=0x1) returned 0x0 [0260.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.810] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.811] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.811] SetErrorMode (uMode=0x0) returned 0x1 [0260.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.811] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.811] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.811] CoTaskMemFree (pv=0xfe030) [0260.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.812] SetErrorMode (uMode=0x1) returned 0x0 [0260.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.813] SetErrorMode (uMode=0x0) returned 0x1 [0260.813] GetFileType (hFile=0x18c) returned 0x1 [0260.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0260.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0260.815] SetErrorMode (uMode=0x1) returned 0x0 [0260.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.815] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.816] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.816] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.816] SetErrorMode (uMode=0x0) returned 0x1 [0260.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0260.816] SetErrorMode (uMode=0x1) returned 0x0 [0260.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.817] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.817] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.818] SetErrorMode (uMode=0x0) returned 0x1 [0260.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.818] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.818] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.818] CoTaskMemFree (pv=0xfe030) [0260.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.819] SetErrorMode (uMode=0x1) returned 0x0 [0260.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.820] SetErrorMode (uMode=0x0) returned 0x1 [0260.820] GetFileType (hFile=0x18c) returned 0x1 [0260.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0260.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0260.821] SetErrorMode (uMode=0x1) returned 0x0 [0260.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.823] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.823] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.823] SetErrorMode (uMode=0x0) returned 0x1 [0260.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0260.824] SetErrorMode (uMode=0x1) returned 0x0 [0260.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.825] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.825] SetErrorMode (uMode=0x0) returned 0x1 [0260.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.826] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.826] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.826] CoTaskMemFree (pv=0xfe030) [0260.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.827] SetErrorMode (uMode=0x1) returned 0x0 [0260.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.827] SetErrorMode (uMode=0x0) returned 0x1 [0260.827] GetFileType (hFile=0x18c) returned 0x1 [0260.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0260.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0260.829] SetErrorMode (uMode=0x1) returned 0x0 [0260.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.830] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.830] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.831] SetErrorMode (uMode=0x0) returned 0x1 [0260.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0260.831] SetErrorMode (uMode=0x1) returned 0x0 [0260.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.831] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.832] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.832] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.832] SetErrorMode (uMode=0x0) returned 0x1 [0260.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.833] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.833] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.833] CoTaskMemFree (pv=0xfe030) [0260.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.834] SetErrorMode (uMode=0x1) returned 0x0 [0260.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.834] SetErrorMode (uMode=0x0) returned 0x1 [0260.834] GetFileType (hFile=0x18c) returned 0x1 [0260.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0260.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0260.836] SetErrorMode (uMode=0x1) returned 0x0 [0260.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.838] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.838] SetErrorMode (uMode=0x0) returned 0x1 [0260.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0260.839] SetErrorMode (uMode=0x1) returned 0x0 [0260.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.840] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.840] SetErrorMode (uMode=0x0) returned 0x1 [0260.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.841] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.841] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.841] CoTaskMemFree (pv=0xfe030) [0260.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.841] SetErrorMode (uMode=0x1) returned 0x0 [0260.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.842] SetErrorMode (uMode=0x0) returned 0x1 [0260.842] GetFileType (hFile=0x18c) returned 0x1 [0260.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0260.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0260.844] SetErrorMode (uMode=0x1) returned 0x0 [0260.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.845] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.846] SetErrorMode (uMode=0x0) returned 0x1 [0260.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0260.846] SetErrorMode (uMode=0x1) returned 0x0 [0260.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.846] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.847] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.847] SetErrorMode (uMode=0x0) returned 0x1 [0260.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.848] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.848] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.848] CoTaskMemFree (pv=0xfe030) [0260.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.849] SetErrorMode (uMode=0x1) returned 0x0 [0260.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.849] SetErrorMode (uMode=0x0) returned 0x1 [0260.849] GetFileType (hFile=0x18c) returned 0x1 [0260.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0260.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0260.851] SetErrorMode (uMode=0x1) returned 0x0 [0260.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.853] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.855] SetErrorMode (uMode=0x0) returned 0x1 [0260.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0260.855] SetErrorMode (uMode=0x1) returned 0x0 [0260.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.856] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.856] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.856] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.856] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.857] SetErrorMode (uMode=0x0) returned 0x1 [0260.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.857] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.857] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.857] CoTaskMemFree (pv=0xfe030) [0260.857] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.858] SetErrorMode (uMode=0x1) returned 0x0 [0260.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.859] SetErrorMode (uMode=0x0) returned 0x1 [0260.859] GetFileType (hFile=0x18c) returned 0x1 [0260.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0260.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0260.860] SetErrorMode (uMode=0x1) returned 0x0 [0260.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.861] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.862] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.862] SetErrorMode (uMode=0x0) returned 0x1 [0260.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0260.862] SetErrorMode (uMode=0x1) returned 0x0 [0260.862] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.863] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.863] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.863] SetErrorMode (uMode=0x0) returned 0x1 [0260.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.864] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.864] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.864] CoTaskMemFree (pv=0xfe030) [0260.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.865] SetErrorMode (uMode=0x1) returned 0x0 [0260.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.867] SetErrorMode (uMode=0x0) returned 0x1 [0260.867] GetFileType (hFile=0x18c) returned 0x1 [0260.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0260.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0260.869] SetErrorMode (uMode=0x1) returned 0x0 [0260.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.870] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.871] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.871] SetErrorMode (uMode=0x0) returned 0x1 [0260.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0260.872] SetErrorMode (uMode=0x1) returned 0x0 [0260.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.873] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.873] SetErrorMode (uMode=0x0) returned 0x1 [0260.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.873] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.873] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.874] CoTaskMemFree (pv=0xfe030) [0260.874] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.874] SetErrorMode (uMode=0x1) returned 0x0 [0260.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.875] SetErrorMode (uMode=0x0) returned 0x1 [0260.875] GetFileType (hFile=0x18c) returned 0x1 [0260.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0260.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0260.877] SetErrorMode (uMode=0x1) returned 0x0 [0260.877] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.877] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.877] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.878] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.878] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.878] SetErrorMode (uMode=0x0) returned 0x1 [0260.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0260.878] SetErrorMode (uMode=0x1) returned 0x0 [0260.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.879] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.880] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.880] SetErrorMode (uMode=0x0) returned 0x1 [0260.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0xa1 [0260.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0xa1 [0260.881] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.881] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.881] CoTaskMemFree (pv=0xfe030) [0260.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xad [0260.881] SetErrorMode (uMode=0x1) returned 0x0 [0260.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.882] SetErrorMode (uMode=0x0) returned 0x1 [0260.882] GetFileType (hFile=0x18c) returned 0x1 [0260.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0260.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0260.899] SetErrorMode (uMode=0x1) returned 0x0 [0260.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.901] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.901] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.901] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.901] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.901] SetErrorMode (uMode=0x0) returned 0x1 [0260.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0260.902] SetErrorMode (uMode=0x1) returned 0x0 [0260.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.902] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.903] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.903] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.903] SetErrorMode (uMode=0x0) returned 0x1 [0260.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.904] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.904] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.904] CoTaskMemFree (pv=0xfe030) [0260.904] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.905] SetErrorMode (uMode=0x1) returned 0x0 [0260.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.906] SetErrorMode (uMode=0x0) returned 0x1 [0260.906] GetFileType (hFile=0x18c) returned 0x1 [0260.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0260.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0260.907] SetErrorMode (uMode=0x1) returned 0x0 [0260.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.908] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.908] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.908] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.909] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.909] SetErrorMode (uMode=0x0) returned 0x1 [0260.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0260.909] SetErrorMode (uMode=0x1) returned 0x0 [0260.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.910] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.911] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.911] SetErrorMode (uMode=0x0) returned 0x1 [0260.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.912] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.912] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.912] CoTaskMemFree (pv=0xfe030) [0260.912] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.912] SetErrorMode (uMode=0x1) returned 0x0 [0260.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.913] SetErrorMode (uMode=0x0) returned 0x1 [0260.913] GetFileType (hFile=0x18c) returned 0x1 [0260.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0260.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0260.915] SetErrorMode (uMode=0x1) returned 0x0 [0260.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.917] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.917] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.917] SetErrorMode (uMode=0x0) returned 0x1 [0260.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0260.918] SetErrorMode (uMode=0x1) returned 0x0 [0260.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.918] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.919] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.919] SetErrorMode (uMode=0x0) returned 0x1 [0260.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.920] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.920] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.920] CoTaskMemFree (pv=0xfe030) [0260.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.920] SetErrorMode (uMode=0x1) returned 0x0 [0260.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.921] SetErrorMode (uMode=0x0) returned 0x1 [0260.921] GetFileType (hFile=0x18c) returned 0x1 [0260.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0260.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0260.923] SetErrorMode (uMode=0x1) returned 0x0 [0260.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.924] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.924] SetErrorMode (uMode=0x0) returned 0x1 [0260.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0260.925] SetErrorMode (uMode=0x1) returned 0x0 [0260.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.925] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.926] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.926] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.926] SetErrorMode (uMode=0x0) returned 0x1 [0260.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.927] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.927] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.927] CoTaskMemFree (pv=0xfe030) [0260.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.928] SetErrorMode (uMode=0x1) returned 0x0 [0260.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.929] SetErrorMode (uMode=0x0) returned 0x1 [0260.929] GetFileType (hFile=0x18c) returned 0x1 [0260.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0260.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0260.931] SetErrorMode (uMode=0x1) returned 0x0 [0260.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.932] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.933] SetErrorMode (uMode=0x0) returned 0x1 [0260.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0260.933] SetErrorMode (uMode=0x1) returned 0x0 [0260.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.934] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.934] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.935] SetErrorMode (uMode=0x0) returned 0x1 [0260.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.936] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.936] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.936] CoTaskMemFree (pv=0xfe030) [0260.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.936] SetErrorMode (uMode=0x1) returned 0x0 [0260.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.937] SetErrorMode (uMode=0x0) returned 0x1 [0260.937] GetFileType (hFile=0x18c) returned 0x1 [0260.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0260.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0260.939] SetErrorMode (uMode=0x1) returned 0x0 [0260.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.939] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.940] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.940] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.940] SetErrorMode (uMode=0x0) returned 0x1 [0260.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0260.941] SetErrorMode (uMode=0x1) returned 0x0 [0260.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.941] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.941] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.942] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.942] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.942] SetErrorMode (uMode=0x0) returned 0x1 [0260.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.943] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.943] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.943] CoTaskMemFree (pv=0xfe030) [0260.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.944] SetErrorMode (uMode=0x1) returned 0x0 [0260.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.944] SetErrorMode (uMode=0x0) returned 0x1 [0260.944] GetFileType (hFile=0x18c) returned 0x1 [0260.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0260.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0260.946] SetErrorMode (uMode=0x1) returned 0x0 [0260.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.947] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.948] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.948] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.948] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.948] SetErrorMode (uMode=0x0) returned 0x1 [0260.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0260.949] SetErrorMode (uMode=0x1) returned 0x0 [0260.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.949] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.950] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.950] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.950] SetErrorMode (uMode=0x0) returned 0x1 [0260.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.951] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.951] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.951] CoTaskMemFree (pv=0xfe030) [0260.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.952] SetErrorMode (uMode=0x1) returned 0x0 [0260.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.953] SetErrorMode (uMode=0x0) returned 0x1 [0260.953] GetFileType (hFile=0x18c) returned 0x1 [0260.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0260.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0260.955] SetErrorMode (uMode=0x1) returned 0x0 [0260.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.956] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.956] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.956] SetErrorMode (uMode=0x0) returned 0x1 [0260.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0260.957] SetErrorMode (uMode=0x1) returned 0x0 [0260.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.957] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.958] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.958] SetErrorMode (uMode=0x0) returned 0x1 [0260.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.959] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.959] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.959] CoTaskMemFree (pv=0xfe030) [0260.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.959] SetErrorMode (uMode=0x1) returned 0x0 [0260.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.960] SetErrorMode (uMode=0x0) returned 0x1 [0260.960] GetFileType (hFile=0x18c) returned 0x1 [0260.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0260.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0260.962] SetErrorMode (uMode=0x1) returned 0x0 [0260.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.963] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0260.964] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27dfc0 | out: lpFindFileData=0x27dfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0260.964] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.964] SetErrorMode (uMode=0x0) returned 0x1 [0260.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0260.965] SetErrorMode (uMode=0x1) returned 0x0 [0260.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.966] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.966] SetErrorMode (uMode=0x0) returned 0x1 [0260.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.967] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.967] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.967] CoTaskMemFree (pv=0xfe030) [0260.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.967] SetErrorMode (uMode=0x1) returned 0x0 [0260.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.968] SetErrorMode (uMode=0x0) returned 0x1 [0260.968] GetFileType (hFile=0x18c) returned 0x1 [0260.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0260.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0260.970] SetErrorMode (uMode=0x1) returned 0x0 [0260.970] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.970] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.971] SetErrorMode (uMode=0x0) returned 0x1 [0260.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0260.971] SetErrorMode (uMode=0x1) returned 0x0 [0260.971] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.972] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.972] SetErrorMode (uMode=0x0) returned 0x1 [0260.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.973] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.973] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.973] CoTaskMemFree (pv=0xfe030) [0260.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.973] SetErrorMode (uMode=0x1) returned 0x0 [0260.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.974] SetErrorMode (uMode=0x0) returned 0x1 [0260.974] GetFileType (hFile=0x18c) returned 0x1 [0260.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0260.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0260.976] SetErrorMode (uMode=0x1) returned 0x0 [0260.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.983] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.984] SetErrorMode (uMode=0x0) returned 0x1 [0260.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0260.984] SetErrorMode (uMode=0x1) returned 0x0 [0260.984] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.985] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.985] SetErrorMode (uMode=0x0) returned 0x1 [0260.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.986] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.986] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.986] CoTaskMemFree (pv=0xfe030) [0260.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.986] SetErrorMode (uMode=0x1) returned 0x0 [0260.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.988] SetErrorMode (uMode=0x0) returned 0x1 [0260.988] GetFileType (hFile=0x18c) returned 0x1 [0260.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0260.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0260.990] SetErrorMode (uMode=0x1) returned 0x0 [0260.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.990] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.990] SetErrorMode (uMode=0x0) returned 0x1 [0260.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0260.991] SetErrorMode (uMode=0x1) returned 0x0 [0260.991] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.991] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.992] SetErrorMode (uMode=0x0) returned 0x1 [0260.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.992] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.992] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.993] CoTaskMemFree (pv=0xfe030) [0260.993] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0260.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0260.993] SetErrorMode (uMode=0x1) returned 0x0 [0260.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0260.994] SetErrorMode (uMode=0x0) returned 0x1 [0260.994] GetFileType (hFile=0x18c) returned 0x1 [0260.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0260.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0260.996] SetErrorMode (uMode=0x1) returned 0x0 [0260.996] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.997] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.997] SetErrorMode (uMode=0x0) returned 0x1 [0260.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0260.998] SetErrorMode (uMode=0x1) returned 0x0 [0260.998] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0260.998] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0260.998] SetErrorMode (uMode=0x0) returned 0x1 [0260.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0xa0 [0260.999] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0260.999] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0260.999] CoTaskMemFree (pv=0xfe030) [0260.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.000] SetErrorMode (uMode=0x1) returned 0x0 [0261.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.001] SetErrorMode (uMode=0x0) returned 0x1 [0261.001] GetFileType (hFile=0x18c) returned 0x1 [0261.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0261.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0261.003] SetErrorMode (uMode=0x1) returned 0x0 [0261.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.003] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.003] SetErrorMode (uMode=0x0) returned 0x1 [0261.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0261.004] SetErrorMode (uMode=0x1) returned 0x0 [0261.004] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.004] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.004] SetErrorMode (uMode=0x0) returned 0x1 [0261.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.005] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.005] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.006] CoTaskMemFree (pv=0xfe030) [0261.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.006] SetErrorMode (uMode=0x1) returned 0x0 [0261.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.007] SetErrorMode (uMode=0x0) returned 0x1 [0261.007] GetFileType (hFile=0x18c) returned 0x1 [0261.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0261.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0261.009] SetErrorMode (uMode=0x1) returned 0x0 [0261.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.010] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.010] SetErrorMode (uMode=0x0) returned 0x1 [0261.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0261.011] SetErrorMode (uMode=0x1) returned 0x0 [0261.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.011] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.011] SetErrorMode (uMode=0x0) returned 0x1 [0261.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.012] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.012] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.012] CoTaskMemFree (pv=0xfe030) [0261.012] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.013] SetErrorMode (uMode=0x1) returned 0x0 [0261.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.014] SetErrorMode (uMode=0x0) returned 0x1 [0261.014] GetFileType (hFile=0x18c) returned 0x1 [0261.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0261.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0261.016] SetErrorMode (uMode=0x1) returned 0x0 [0261.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.016] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.016] SetErrorMode (uMode=0x0) returned 0x1 [0261.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0261.017] SetErrorMode (uMode=0x1) returned 0x0 [0261.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.017] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.018] SetErrorMode (uMode=0x0) returned 0x1 [0261.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.019] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.019] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.019] CoTaskMemFree (pv=0xfe030) [0261.019] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.019] SetErrorMode (uMode=0x1) returned 0x0 [0261.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.020] SetErrorMode (uMode=0x0) returned 0x1 [0261.020] GetFileType (hFile=0x18c) returned 0x1 [0261.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0261.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0261.022] SetErrorMode (uMode=0x1) returned 0x0 [0261.022] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.023] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.023] SetErrorMode (uMode=0x0) returned 0x1 [0261.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0261.024] SetErrorMode (uMode=0x1) returned 0x0 [0261.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.024] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.024] SetErrorMode (uMode=0x0) returned 0x1 [0261.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.025] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.025] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.026] CoTaskMemFree (pv=0xfe030) [0261.026] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.026] SetErrorMode (uMode=0x1) returned 0x0 [0261.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.027] SetErrorMode (uMode=0x0) returned 0x1 [0261.027] GetFileType (hFile=0x18c) returned 0x1 [0261.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0261.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0261.029] SetErrorMode (uMode=0x1) returned 0x0 [0261.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.029] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.029] SetErrorMode (uMode=0x0) returned 0x1 [0261.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0261.030] SetErrorMode (uMode=0x1) returned 0x0 [0261.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.030] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.031] SetErrorMode (uMode=0x0) returned 0x1 [0261.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.032] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.032] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.032] CoTaskMemFree (pv=0xfe030) [0261.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.032] SetErrorMode (uMode=0x1) returned 0x0 [0261.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.033] SetErrorMode (uMode=0x0) returned 0x1 [0261.033] GetFileType (hFile=0x18c) returned 0x1 [0261.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0261.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0261.035] SetErrorMode (uMode=0x1) returned 0x0 [0261.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.036] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.036] SetErrorMode (uMode=0x0) returned 0x1 [0261.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0261.037] SetErrorMode (uMode=0x1) returned 0x0 [0261.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.037] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.037] SetErrorMode (uMode=0x0) returned 0x1 [0261.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.038] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.038] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.038] CoTaskMemFree (pv=0xfe030) [0261.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27dec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0xac [0261.039] SetErrorMode (uMode=0x1) returned 0x0 [0261.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.040] SetErrorMode (uMode=0x0) returned 0x1 [0261.040] GetFileType (hFile=0x18c) returned 0x1 [0261.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x27e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0261.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0261.042] SetErrorMode (uMode=0x1) returned 0x0 [0261.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.042] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.042] SetErrorMode (uMode=0x0) returned 0x1 [0261.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x27de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0261.043] SetErrorMode (uMode=0x1) returned 0x0 [0261.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.043] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.044] SetErrorMode (uMode=0x0) returned 0x1 [0261.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", nBufferLength=0x105, lpBuffer=0x27e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", lpFilePart=0x0) returned 0xa0 [0261.045] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.045] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.045] CoTaskMemFree (pv=0xfe030) [0261.062] SetErrorMode (uMode=0x1) returned 0x0 [0261.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.063] SetErrorMode (uMode=0x0) returned 0x1 [0261.063] GetFileType (hFile=0x18c) returned 0x1 [0261.064] SetErrorMode (uMode=0x1) returned 0x0 [0261.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.065] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.065] SetErrorMode (uMode=0x0) returned 0x1 [0261.066] SetErrorMode (uMode=0x1) returned 0x0 [0261.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.066] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.066] SetErrorMode (uMode=0x0) returned 0x1 [0261.067] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.067] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.067] CoTaskMemFree (pv=0xfe030) [0261.067] SetErrorMode (uMode=0x1) returned 0x0 [0261.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.068] SetErrorMode (uMode=0x0) returned 0x1 [0261.068] GetFileType (hFile=0x18c) returned 0x1 [0261.069] SetErrorMode (uMode=0x1) returned 0x0 [0261.069] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.070] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.070] SetErrorMode (uMode=0x0) returned 0x1 [0261.071] SetErrorMode (uMode=0x1) returned 0x0 [0261.071] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.071] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.071] SetErrorMode (uMode=0x0) returned 0x1 [0261.072] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.072] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.072] CoTaskMemFree (pv=0xfe030) [0261.072] SetErrorMode (uMode=0x1) returned 0x0 [0261.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.073] SetErrorMode (uMode=0x0) returned 0x1 [0261.073] GetFileType (hFile=0x18c) returned 0x1 [0261.074] SetErrorMode (uMode=0x1) returned 0x0 [0261.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.075] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.076] SetErrorMode (uMode=0x0) returned 0x1 [0261.076] SetErrorMode (uMode=0x1) returned 0x0 [0261.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.076] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.077] SetErrorMode (uMode=0x0) returned 0x1 [0261.077] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.077] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.077] CoTaskMemFree (pv=0xfe030) [0261.078] SetErrorMode (uMode=0x1) returned 0x0 [0261.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.078] SetErrorMode (uMode=0x0) returned 0x1 [0261.078] GetFileType (hFile=0x18c) returned 0x1 [0261.080] SetErrorMode (uMode=0x1) returned 0x0 [0261.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.080] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.080] SetErrorMode (uMode=0x0) returned 0x1 [0261.081] SetErrorMode (uMode=0x1) returned 0x0 [0261.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.081] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.081] SetErrorMode (uMode=0x0) returned 0x1 [0261.082] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.082] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.082] CoTaskMemFree (pv=0xfe030) [0261.082] SetErrorMode (uMode=0x1) returned 0x0 [0261.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.083] SetErrorMode (uMode=0x0) returned 0x1 [0261.083] GetFileType (hFile=0x18c) returned 0x1 [0261.084] SetErrorMode (uMode=0x1) returned 0x0 [0261.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.085] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.086] SetErrorMode (uMode=0x0) returned 0x1 [0261.086] SetErrorMode (uMode=0x1) returned 0x0 [0261.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.086] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.087] SetErrorMode (uMode=0x0) returned 0x1 [0261.087] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.087] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.087] CoTaskMemFree (pv=0xfe030) [0261.088] SetErrorMode (uMode=0x1) returned 0x0 [0261.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.088] SetErrorMode (uMode=0x0) returned 0x1 [0261.088] GetFileType (hFile=0x18c) returned 0x1 [0261.090] SetErrorMode (uMode=0x1) returned 0x0 [0261.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.090] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.091] SetErrorMode (uMode=0x0) returned 0x1 [0261.091] SetErrorMode (uMode=0x1) returned 0x0 [0261.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.092] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.092] SetErrorMode (uMode=0x0) returned 0x1 [0261.092] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.092] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.092] CoTaskMemFree (pv=0xfe030) [0261.093] SetErrorMode (uMode=0x1) returned 0x0 [0261.094] SetErrorMode (uMode=0x0) returned 0x1 [0261.094] GetFileType (hFile=0x18c) returned 0x1 [0261.095] SetErrorMode (uMode=0x1) returned 0x0 [0261.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.097] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.097] SetErrorMode (uMode=0x0) returned 0x1 [0261.097] SetErrorMode (uMode=0x1) returned 0x0 [0261.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.098] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.098] SetErrorMode (uMode=0x0) returned 0x1 [0261.098] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.098] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.099] CoTaskMemFree (pv=0xfe030) [0261.099] SetErrorMode (uMode=0x1) returned 0x0 [0261.099] SetErrorMode (uMode=0x0) returned 0x1 [0261.099] GetFileType (hFile=0x18c) returned 0x1 [0261.101] SetErrorMode (uMode=0x1) returned 0x0 [0261.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.102] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.102] SetErrorMode (uMode=0x0) returned 0x1 [0261.102] SetErrorMode (uMode=0x1) returned 0x0 [0261.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.103] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.103] SetErrorMode (uMode=0x0) returned 0x1 [0261.103] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.103] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.104] CoTaskMemFree (pv=0xfe030) [0261.104] SetErrorMode (uMode=0x1) returned 0x0 [0261.104] SetErrorMode (uMode=0x0) returned 0x1 [0261.104] GetFileType (hFile=0x18c) returned 0x1 [0261.106] SetErrorMode (uMode=0x1) returned 0x0 [0261.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.107] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.108] SetErrorMode (uMode=0x0) returned 0x1 [0261.108] SetErrorMode (uMode=0x1) returned 0x0 [0261.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.109] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.109] SetErrorMode (uMode=0x0) returned 0x1 [0261.109] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.109] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.109] CoTaskMemFree (pv=0xfe030) [0261.110] SetErrorMode (uMode=0x1) returned 0x0 [0261.110] SetErrorMode (uMode=0x0) returned 0x1 [0261.110] GetFileType (hFile=0x18c) returned 0x1 [0261.112] SetErrorMode (uMode=0x1) returned 0x0 [0261.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.112] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.113] SetErrorMode (uMode=0x0) returned 0x1 [0261.113] SetErrorMode (uMode=0x1) returned 0x0 [0261.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.114] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.114] SetErrorMode (uMode=0x0) returned 0x1 [0261.114] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.114] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.114] CoTaskMemFree (pv=0xfe030) [0261.115] SetErrorMode (uMode=0x1) returned 0x0 [0261.115] SetErrorMode (uMode=0x0) returned 0x1 [0261.115] GetFileType (hFile=0x18c) returned 0x1 [0261.117] SetErrorMode (uMode=0x1) returned 0x0 [0261.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.118] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.118] SetErrorMode (uMode=0x0) returned 0x1 [0261.119] SetErrorMode (uMode=0x1) returned 0x0 [0261.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.119] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.119] SetErrorMode (uMode=0x0) returned 0x1 [0261.120] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.120] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.120] CoTaskMemFree (pv=0xfe030) [0261.120] SetErrorMode (uMode=0x1) returned 0x0 [0261.121] SetErrorMode (uMode=0x0) returned 0x1 [0261.121] GetFileType (hFile=0x18c) returned 0x1 [0261.122] SetErrorMode (uMode=0x1) returned 0x0 [0261.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.123] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.123] SetErrorMode (uMode=0x0) returned 0x1 [0261.124] SetErrorMode (uMode=0x1) returned 0x0 [0261.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.124] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.124] SetErrorMode (uMode=0x0) returned 0x1 [0261.125] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.125] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.125] CoTaskMemFree (pv=0xfe030) [0261.125] SetErrorMode (uMode=0x1) returned 0x0 [0261.126] SetErrorMode (uMode=0x0) returned 0x1 [0261.126] GetFileType (hFile=0x18c) returned 0x1 [0261.127] SetErrorMode (uMode=0x1) returned 0x0 [0261.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.129] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.129] SetErrorMode (uMode=0x0) returned 0x1 [0261.129] SetErrorMode (uMode=0x1) returned 0x0 [0261.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.130] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.130] SetErrorMode (uMode=0x0) returned 0x1 [0261.131] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.131] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.131] CoTaskMemFree (pv=0xfe030) [0261.131] SetErrorMode (uMode=0x1) returned 0x0 [0261.132] SetErrorMode (uMode=0x0) returned 0x1 [0261.132] GetFileType (hFile=0x18c) returned 0x1 [0261.133] SetErrorMode (uMode=0x1) returned 0x0 [0261.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.134] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.134] SetErrorMode (uMode=0x0) returned 0x1 [0261.135] SetErrorMode (uMode=0x1) returned 0x0 [0261.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.135] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.135] SetErrorMode (uMode=0x0) returned 0x1 [0261.136] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.136] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.136] CoTaskMemFree (pv=0xfe030) [0261.136] SetErrorMode (uMode=0x1) returned 0x0 [0261.137] SetErrorMode (uMode=0x0) returned 0x1 [0261.137] GetFileType (hFile=0x18c) returned 0x1 [0261.220] SetErrorMode (uMode=0x1) returned 0x0 [0261.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.227] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.229] SetErrorMode (uMode=0x0) returned 0x1 [0261.232] SetErrorMode (uMode=0x1) returned 0x0 [0261.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.237] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.238] SetErrorMode (uMode=0x0) returned 0x1 [0261.238] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.254] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.258] CoTaskMemFree (pv=0xfe030) [0261.264] SetErrorMode (uMode=0x1) returned 0x0 [0261.265] SetErrorMode (uMode=0x0) returned 0x1 [0261.265] GetFileType (hFile=0x18c) returned 0x1 [0261.267] SetErrorMode (uMode=0x1) returned 0x0 [0261.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.268] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.269] SetErrorMode (uMode=0x0) returned 0x1 [0261.269] SetErrorMode (uMode=0x1) returned 0x0 [0261.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.270] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.270] SetErrorMode (uMode=0x0) returned 0x1 [0261.271] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.271] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.271] CoTaskMemFree (pv=0xfe030) [0261.272] SetErrorMode (uMode=0x1) returned 0x0 [0261.272] SetErrorMode (uMode=0x0) returned 0x1 [0261.272] GetFileType (hFile=0x18c) returned 0x1 [0261.274] SetErrorMode (uMode=0x1) returned 0x0 [0261.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.274] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.275] SetErrorMode (uMode=0x0) returned 0x1 [0261.275] SetErrorMode (uMode=0x1) returned 0x0 [0261.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x27dfb0 | out: lpFindFileData=0x27dfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.276] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.276] SetErrorMode (uMode=0x0) returned 0x1 [0261.276] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.276] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.277] CoTaskMemFree (pv=0xfe030) [0261.277] SetErrorMode (uMode=0x1) returned 0x0 [0261.278] SetErrorMode (uMode=0x0) returned 0x1 [0261.278] GetFileType (hFile=0x18c) returned 0x1 [0261.279] SetErrorMode (uMode=0x1) returned 0x0 [0261.280] SetErrorMode (uMode=0x0) returned 0x1 [0261.280] GetFileType (hFile=0x18c) returned 0x1 [0261.281] SetErrorMode (uMode=0x1) returned 0x0 [0261.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.282] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.282] SetErrorMode (uMode=0x0) returned 0x1 [0261.283] SetErrorMode (uMode=0x1) returned 0x0 [0261.283] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x27e050 | out: lpFindFileData=0x27e050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.283] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.284] SetErrorMode (uMode=0x0) returned 0x1 [0261.284] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.284] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.284] CoTaskMemFree (pv=0xfe030) [0261.284] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.284] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.285] CoTaskMemFree (pv=0xfe030) [0261.285] SetErrorMode (uMode=0x1) returned 0x0 [0261.291] SetErrorMode (uMode=0x0) returned 0x1 [0261.291] GetFileType (hFile=0x18c) returned 0x1 [0261.311] SetErrorMode (uMode=0x1) returned 0x0 [0261.317] SetErrorMode (uMode=0x0) returned 0x1 [0261.318] GetFileType (hFile=0x18c) returned 0x1 [0261.319] SetErrorMode (uMode=0x1) returned 0x0 [0261.320] SetErrorMode (uMode=0x0) returned 0x1 [0261.320] GetFileType (hFile=0x18c) returned 0x1 [0261.322] SetErrorMode (uMode=0x1) returned 0x0 [0261.322] SetErrorMode (uMode=0x0) returned 0x1 [0261.322] GetFileType (hFile=0x18c) returned 0x1 [0261.324] SetErrorMode (uMode=0x1) returned 0x0 [0261.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.326] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.326] SetErrorMode (uMode=0x0) returned 0x1 [0261.327] SetErrorMode (uMode=0x1) returned 0x0 [0261.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.328] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.328] SetErrorMode (uMode=0x0) returned 0x1 [0261.328] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.328] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.329] CoTaskMemFree (pv=0xfe030) [0261.329] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.329] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.329] CoTaskMemFree (pv=0xfe030) [0261.330] SetErrorMode (uMode=0x1) returned 0x0 [0261.330] SetErrorMode (uMode=0x0) returned 0x1 [0261.330] GetFileType (hFile=0x18c) returned 0x1 [0261.332] SetErrorMode (uMode=0x1) returned 0x0 [0261.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.332] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.332] SetErrorMode (uMode=0x0) returned 0x1 [0261.333] SetErrorMode (uMode=0x1) returned 0x0 [0261.333] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.334] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.334] SetErrorMode (uMode=0x0) returned 0x1 [0261.334] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.334] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.334] CoTaskMemFree (pv=0xfe030) [0261.335] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0261.335] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.335] CoTaskMemFree (pv=0xfe030) [0261.335] SetErrorMode (uMode=0x1) returned 0x0 [0261.336] SetErrorMode (uMode=0x0) returned 0x1 [0261.336] GetFileType (hFile=0x18c) returned 0x1 [0261.337] SetErrorMode (uMode=0x1) returned 0x0 [0261.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.338] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.338] SetErrorMode (uMode=0x0) returned 0x1 [0261.339] SetErrorMode (uMode=0x1) returned 0x0 [0261.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.339] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.340] SetErrorMode (uMode=0x0) returned 0x1 [0261.340] SetErrorMode (uMode=0x1) returned 0x0 [0261.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.345] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.346] SetErrorMode (uMode=0x0) returned 0x1 [0261.347] SetErrorMode (uMode=0x1) returned 0x0 [0261.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.348] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.349] SetErrorMode (uMode=0x0) returned 0x1 [0261.349] SetErrorMode (uMode=0x1) returned 0x0 [0261.350] SetErrorMode (uMode=0x0) returned 0x1 [0261.350] GetFileType (hFile=0x18c) returned 0x1 [0261.350] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e4e8 | out: lpFileSizeHigh=0x27e4e8*=0x0) returned 0x0 [0261.352] SetErrorMode (uMode=0x1) returned 0x0 [0261.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e3d0 | out: lpFileInformation=0x27e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0261.352] SetErrorMode (uMode=0x0) returned 0x1 [0261.430] SetErrorMode (uMode=0x1) returned 0x0 [0261.430] SetErrorMode (uMode=0x0) returned 0x1 [0261.430] GetFileType (hFile=0x18c) returned 0x1 [0261.431] SetErrorMode (uMode=0x1) returned 0x0 [0261.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e370 | out: lpFileInformation=0x27e370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c647b90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0261.432] SetErrorMode (uMode=0x0) returned 0x1 [0261.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\3atFUVmhhJfwXeyn_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\3atfuvmhhjfwxeyn_encrypted_by.whiterose")) returned 1 [0261.536] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.536] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.536] CoTaskMemFree (pv=0xffa70) [0261.536] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.536] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.536] CoTaskMemFree (pv=0xffa70) [0261.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.537] CoTaskMemFree (pv=0xffa70) [0261.537] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.537] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.537] CoTaskMemFree (pv=0xffa70) [0261.538] SetErrorMode (uMode=0x1) returned 0x0 [0261.538] SetErrorMode (uMode=0x0) returned 0x1 [0261.538] GetFileType (hFile=0x18c) returned 0x1 [0261.540] SetErrorMode (uMode=0x1) returned 0x0 [0261.540] SetErrorMode (uMode=0x0) returned 0x1 [0261.540] GetFileType (hFile=0x18c) returned 0x1 [0261.542] SetErrorMode (uMode=0x1) returned 0x0 [0261.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.544] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.545] SetErrorMode (uMode=0x0) returned 0x1 [0261.545] SetErrorMode (uMode=0x1) returned 0x0 [0261.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.547] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.547] SetErrorMode (uMode=0x0) returned 0x1 [0261.548] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.548] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.548] CoTaskMemFree (pv=0xffa70) [0261.548] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.548] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.549] CoTaskMemFree (pv=0xffa70) [0261.549] SetErrorMode (uMode=0x1) returned 0x0 [0261.550] SetErrorMode (uMode=0x0) returned 0x1 [0261.550] GetFileType (hFile=0x18c) returned 0x1 [0261.552] SetErrorMode (uMode=0x1) returned 0x0 [0261.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.554] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.554] SetErrorMode (uMode=0x0) returned 0x1 [0261.554] SetErrorMode (uMode=0x1) returned 0x0 [0261.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.555] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.555] SetErrorMode (uMode=0x0) returned 0x1 [0261.556] SetErrorMode (uMode=0x1) returned 0x0 [0261.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.558] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.559] SetErrorMode (uMode=0x0) returned 0x1 [0261.559] SetErrorMode (uMode=0x1) returned 0x0 [0261.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.560] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.561] SetErrorMode (uMode=0x0) returned 0x1 [0261.561] SetErrorMode (uMode=0x1) returned 0x0 [0261.563] SetErrorMode (uMode=0x0) returned 0x1 [0261.563] GetFileType (hFile=0x18c) returned 0x1 [0261.563] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e4e8 | out: lpFileSizeHigh=0x27e4e8*=0x0) returned 0x0 [0261.564] SetErrorMode (uMode=0x1) returned 0x0 [0261.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x27e3d0 | out: lpFileInformation=0x27e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0261.564] SetErrorMode (uMode=0x0) returned 0x1 [0261.655] SetErrorMode (uMode=0x1) returned 0x0 [0261.655] SetErrorMode (uMode=0x0) returned 0x1 [0261.655] GetFileType (hFile=0x18c) returned 0x1 [0261.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x27bc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x8f [0261.666] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log")) returned 1 [0261.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x8c [0261.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x8c [0261.670] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.670] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.671] CoTaskMemFree (pv=0xffa70) [0261.671] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x89 [0261.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x89 [0261.671] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.671] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.672] CoTaskMemFree (pv=0xffa70) [0261.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x88 [0261.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x88 [0261.672] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.672] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.672] CoTaskMemFree (pv=0xffa70) [0261.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x94 [0261.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x94 [0261.673] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.673] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.673] CoTaskMemFree (pv=0xffa70) [0261.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x9e [0261.675] SetErrorMode (uMode=0x1) returned 0x0 [0261.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.675] GetFileType (hFile=0x18c) returned 0x1 [0261.675] SetErrorMode (uMode=0x0) returned 0x1 [0261.675] GetFileType (hFile=0x18c) returned 0x1 [0261.677] WriteFile (in: hFile=0x18c, lpBuffer=0x28bb830*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e388, lpOverlapped=0x0 | out: lpBuffer=0x28bb830*, lpNumberOfBytesWritten=0x27e388*=0x1000, lpOverlapped=0x0) returned 1 [0261.678] WriteFile (in: hFile=0x18c, lpBuffer=0x28bb830*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e3e8, lpOverlapped=0x0 | out: lpBuffer=0x28bb830*, lpNumberOfBytesWritten=0x27e3e8*=0xb14, lpOverlapped=0x0) returned 1 [0261.679] CloseHandle (hObject=0x18c) returned 1 [0261.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7d [0261.680] SetErrorMode (uMode=0x1) returned 0x0 [0261.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.681] GetFileType (hFile=0x18c) returned 0x1 [0261.681] SetErrorMode (uMode=0x0) returned 0x1 [0261.681] GetFileType (hFile=0x18c) returned 0x1 [0261.682] WriteFile (in: hFile=0x18c, lpBuffer=0x28d19e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x28d19e0*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0261.684] WriteFile (in: hFile=0x18c, lpBuffer=0x28d19e0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e488, lpOverlapped=0x0 | out: lpBuffer=0x28d19e0*, lpNumberOfBytesWritten=0x27e488*=0xb14, lpOverlapped=0x0) returned 1 [0261.685] CloseHandle (hObject=0x18c) returned 1 [0261.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x5c [0261.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x5c [0261.685] SetErrorMode (uMode=0x1) returned 0x0 [0261.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0261.686] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0 [0261.686] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.686] SetErrorMode (uMode=0x0) returned 0x1 [0261.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x5c [0261.687] SetErrorMode (uMode=0x1) returned 0x0 [0261.687] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0261.687] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0 [0261.687] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.687] SetErrorMode (uMode=0x0) returned 0x1 [0261.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x82 [0261.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x82 [0261.688] SetErrorMode (uMode=0x1) returned 0x0 [0261.688] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0261.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0261.689] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0 [0261.689] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.689] SetErrorMode (uMode=0x0) returned 0x1 [0261.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x82 [0261.690] SetErrorMode (uMode=0x1) returned 0x0 [0261.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0261.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0261.690] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0 [0261.690] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.691] SetErrorMode (uMode=0x0) returned 0x1 [0261.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x92 [0261.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x92 [0261.691] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.691] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.691] CoTaskMemFree (pv=0xffa70) [0261.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x96 [0261.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x96 [0261.692] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.692] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.692] CoTaskMemFree (pv=0xffa70) [0261.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x9c [0261.692] SetErrorMode (uMode=0x1) returned 0x0 [0261.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.694] GetFileType (hFile=0x18c) returned 0x1 [0261.694] SetErrorMode (uMode=0x0) returned 0x1 [0261.694] GetFileType (hFile=0x18c) returned 0x1 [0261.694] WriteFile (in: hFile=0x18c, lpBuffer=0x28ef858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e388, lpOverlapped=0x0 | out: lpBuffer=0x28ef858*, lpNumberOfBytesWritten=0x27e388*=0x1000, lpOverlapped=0x0) returned 1 [0261.696] WriteFile (in: hFile=0x18c, lpBuffer=0x28ef858*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e3e8, lpOverlapped=0x0 | out: lpBuffer=0x28ef858*, lpNumberOfBytesWritten=0x27e3e8*=0xb14, lpOverlapped=0x0) returned 1 [0261.696] CloseHandle (hObject=0x18c) returned 1 [0261.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x76 [0261.697] SetErrorMode (uMode=0x1) returned 0x0 [0261.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.697] GetFileType (hFile=0x18c) returned 0x1 [0261.697] SetErrorMode (uMode=0x0) returned 0x1 [0261.697] GetFileType (hFile=0x18c) returned 0x1 [0261.698] WriteFile (in: hFile=0x18c, lpBuffer=0x29059e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x29059e8*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0261.699] WriteFile (in: hFile=0x18c, lpBuffer=0x29059e8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e488, lpOverlapped=0x0 | out: lpBuffer=0x29059e8*, lpNumberOfBytesWritten=0x27e488*=0xb14, lpOverlapped=0x0) returned 1 [0261.699] CloseHandle (hObject=0x18c) returned 1 [0261.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x65 [0261.700] SetErrorMode (uMode=0x1) returned 0x0 [0261.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.700] GetFileType (hFile=0x18c) returned 0x1 [0261.700] SetErrorMode (uMode=0x0) returned 0x1 [0261.700] GetFileType (hFile=0x18c) returned 0x1 [0261.701] WriteFile (in: hFile=0x18c, lpBuffer=0x291bb38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x291bb38*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.702] WriteFile (in: hFile=0x18c, lpBuffer=0x291bb38*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x291bb38*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.702] CloseHandle (hObject=0x18c) returned 1 [0261.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0261.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0261.703] SetErrorMode (uMode=0x1) returned 0x0 [0261.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.704] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.704] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.704] SetErrorMode (uMode=0x0) returned 0x1 [0261.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0261.704] SetErrorMode (uMode=0x1) returned 0x0 [0261.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.705] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.705] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.705] SetErrorMode (uMode=0x0) returned 0x1 [0261.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0261.714] SetErrorMode (uMode=0x1) returned 0x0 [0261.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.714] GetFileType (hFile=0x18c) returned 0x1 [0261.714] SetErrorMode (uMode=0x0) returned 0x1 [0261.715] GetFileType (hFile=0x18c) returned 0x1 [0261.715] WriteFile (in: hFile=0x18c, lpBuffer=0x2735688*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2735688*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.716] WriteFile (in: hFile=0x18c, lpBuffer=0x2735688*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2735688*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.716] CloseHandle (hObject=0x18c) returned 1 [0261.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0261.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0261.717] SetErrorMode (uMode=0x1) returned 0x0 [0261.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.717] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.717] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.718] SetErrorMode (uMode=0x0) returned 0x1 [0261.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0261.718] SetErrorMode (uMode=0x1) returned 0x0 [0261.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.718] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.718] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.718] SetErrorMode (uMode=0x0) returned 0x1 [0261.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6e [0261.719] SetErrorMode (uMode=0x1) returned 0x0 [0261.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.719] GetFileType (hFile=0x18c) returned 0x1 [0261.719] SetErrorMode (uMode=0x0) returned 0x1 [0261.719] GetFileType (hFile=0x18c) returned 0x1 [0261.720] WriteFile (in: hFile=0x18c, lpBuffer=0x274df00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x274df00*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.721] WriteFile (in: hFile=0x18c, lpBuffer=0x274df00*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x274df00*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.721] CloseHandle (hObject=0x18c) returned 1 [0261.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0261.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0261.722] SetErrorMode (uMode=0x1) returned 0x0 [0261.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.722] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.722] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.722] SetErrorMode (uMode=0x0) returned 0x1 [0261.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0261.723] SetErrorMode (uMode=0x1) returned 0x0 [0261.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.723] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.723] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.723] SetErrorMode (uMode=0x0) returned 0x1 [0261.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6a [0261.724] SetErrorMode (uMode=0x1) returned 0x0 [0261.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.724] GetFileType (hFile=0x18c) returned 0x1 [0261.724] SetErrorMode (uMode=0x0) returned 0x1 [0261.724] GetFileType (hFile=0x18c) returned 0x1 [0261.725] WriteFile (in: hFile=0x18c, lpBuffer=0x27666d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27666d8*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.726] WriteFile (in: hFile=0x18c, lpBuffer=0x27666d8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27666d8*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.726] CloseHandle (hObject=0x18c) returned 1 [0261.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0261.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0261.726] SetErrorMode (uMode=0x1) returned 0x0 [0261.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.727] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.727] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.729] SetErrorMode (uMode=0x0) returned 0x1 [0261.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0261.729] SetErrorMode (uMode=0x1) returned 0x0 [0261.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.729] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.729] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.730] SetErrorMode (uMode=0x0) returned 0x1 [0261.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0261.730] SetErrorMode (uMode=0x1) returned 0x0 [0261.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.731] GetFileType (hFile=0x18c) returned 0x1 [0261.731] SetErrorMode (uMode=0x0) returned 0x1 [0261.731] GetFileType (hFile=0x18c) returned 0x1 [0261.731] WriteFile (in: hFile=0x18c, lpBuffer=0x277ee68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x277ee68*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.732] WriteFile (in: hFile=0x18c, lpBuffer=0x277ee68*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x277ee68*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.733] CloseHandle (hObject=0x18c) returned 1 [0261.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0261.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0261.733] SetErrorMode (uMode=0x1) returned 0x0 [0261.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.733] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.734] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.734] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.734] SetErrorMode (uMode=0x0) returned 0x1 [0261.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0261.734] SetErrorMode (uMode=0x1) returned 0x0 [0261.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.735] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.736] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.736] SetErrorMode (uMode=0x0) returned 0x1 [0261.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x63 [0261.737] SetErrorMode (uMode=0x1) returned 0x0 [0261.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.737] GetFileType (hFile=0x18c) returned 0x1 [0261.737] SetErrorMode (uMode=0x0) returned 0x1 [0261.737] GetFileType (hFile=0x18c) returned 0x1 [0261.738] WriteFile (in: hFile=0x18c, lpBuffer=0x2797500*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x2797500*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.739] WriteFile (in: hFile=0x18c, lpBuffer=0x2797500*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x2797500*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.740] CloseHandle (hObject=0x18c) returned 1 [0261.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0261.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0261.740] SetErrorMode (uMode=0x1) returned 0x0 [0261.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.741] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.742] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.742] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.742] SetErrorMode (uMode=0x0) returned 0x1 [0261.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0261.743] SetErrorMode (uMode=0x1) returned 0x0 [0261.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.743] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.744] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.744] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.744] SetErrorMode (uMode=0x0) returned 0x1 [0261.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6f [0261.745] SetErrorMode (uMode=0x1) returned 0x0 [0261.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.746] GetFileType (hFile=0x18c) returned 0x1 [0261.758] SetErrorMode (uMode=0x0) returned 0x1 [0261.758] GetFileType (hFile=0x18c) returned 0x1 [0261.758] WriteFile (in: hFile=0x18c, lpBuffer=0x27afd78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27afd78*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.760] WriteFile (in: hFile=0x18c, lpBuffer=0x27afd78*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27afd78*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.760] CloseHandle (hObject=0x18c) returned 1 [0261.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0261.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0261.761] SetErrorMode (uMode=0x1) returned 0x0 [0261.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.761] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.762] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.762] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.762] SetErrorMode (uMode=0x0) returned 0x1 [0261.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0261.763] SetErrorMode (uMode=0x1) returned 0x0 [0261.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.763] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.764] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.764] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.764] SetErrorMode (uMode=0x0) returned 0x1 [0261.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x68 [0261.765] SetErrorMode (uMode=0x1) returned 0x0 [0261.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.766] GetFileType (hFile=0x18c) returned 0x1 [0261.766] SetErrorMode (uMode=0x0) returned 0x1 [0261.766] GetFileType (hFile=0x18c) returned 0x1 [0261.766] WriteFile (in: hFile=0x18c, lpBuffer=0x27c8508*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27c8508*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.767] WriteFile (in: hFile=0x18c, lpBuffer=0x27c8508*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27c8508*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.768] CloseHandle (hObject=0x18c) returned 1 [0261.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0261.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0261.768] SetErrorMode (uMode=0x1) returned 0x0 [0261.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.769] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.770] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.770] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.770] SetErrorMode (uMode=0x0) returned 0x1 [0261.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0261.770] SetErrorMode (uMode=0x1) returned 0x0 [0261.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.771] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.772] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.772] SetErrorMode (uMode=0x0) returned 0x1 [0261.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x69 [0261.773] SetErrorMode (uMode=0x1) returned 0x0 [0261.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.774] GetFileType (hFile=0x18c) returned 0x1 [0261.774] SetErrorMode (uMode=0x0) returned 0x1 [0261.774] GetFileType (hFile=0x18c) returned 0x1 [0261.774] WriteFile (in: hFile=0x18c, lpBuffer=0x27e0c98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27e0c98*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0261.775] WriteFile (in: hFile=0x18c, lpBuffer=0x27e0c98*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27e0c98*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0261.776] CloseHandle (hObject=0x18c) returned 1 [0261.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x5d [0261.777] SetErrorMode (uMode=0x1) returned 0x0 [0261.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.778] GetFileType (hFile=0x18c) returned 0x1 [0261.778] SetErrorMode (uMode=0x0) returned 0x1 [0261.778] GetFileType (hFile=0x18c) returned 0x1 [0261.778] WriteFile (in: hFile=0x18c, lpBuffer=0x27f6dc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x27f6dc8*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0261.779] WriteFile (in: hFile=0x18c, lpBuffer=0x27f6dc8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27f6dc8*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0261.780] CloseHandle (hObject=0x18c) returned 1 [0261.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x53 [0261.781] SetErrorMode (uMode=0x1) returned 0x0 [0261.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.782] GetFileType (hFile=0x18c) returned 0x1 [0261.782] SetErrorMode (uMode=0x0) returned 0x1 [0261.782] GetFileType (hFile=0x18c) returned 0x1 [0261.782] WriteFile (in: hFile=0x18c, lpBuffer=0x280cec8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x280cec8*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0261.783] WriteFile (in: hFile=0x18c, lpBuffer=0x280cec8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x280cec8*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0261.784] CloseHandle (hObject=0x18c) returned 1 [0261.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0261.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0261.784] SetErrorMode (uMode=0x1) returned 0x0 [0261.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.785] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.786] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.786] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.786] SetErrorMode (uMode=0x0) returned 0x1 [0261.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0261.786] SetErrorMode (uMode=0x1) returned 0x0 [0261.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.787] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.787] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.788] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.788] SetErrorMode (uMode=0x0) returned 0x1 [0261.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x59 [0261.789] SetErrorMode (uMode=0x1) returned 0x0 [0261.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.789] GetFileType (hFile=0x18c) returned 0x1 [0261.789] SetErrorMode (uMode=0x0) returned 0x1 [0261.790] GetFileType (hFile=0x18c) returned 0x1 [0261.790] WriteFile (in: hFile=0x18c, lpBuffer=0x2825478*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x2825478*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0261.791] WriteFile (in: hFile=0x18c, lpBuffer=0x2825478*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x2825478*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0261.792] CloseHandle (hObject=0x18c) returned 1 [0261.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4c [0261.793] SetErrorMode (uMode=0x1) returned 0x0 [0261.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.794] GetFileType (hFile=0x18c) returned 0x1 [0261.794] SetErrorMode (uMode=0x0) returned 0x1 [0261.794] GetFileType (hFile=0x18c) returned 0x1 [0261.794] WriteFile (in: hFile=0x18c, lpBuffer=0x283b568*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x283b568*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0261.795] WriteFile (in: hFile=0x18c, lpBuffer=0x283b568*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x283b568*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0261.796] CloseHandle (hObject=0x18c) returned 1 [0261.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", lpFilePart=0x0) returned 0x33 [0261.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", lpFilePart=0x0) returned 0x33 [0261.796] SetErrorMode (uMode=0x1) returned 0x0 [0261.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0261.813] SetErrorMode (uMode=0x0) returned 0x1 [0261.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4d [0261.818] SetErrorMode (uMode=0x1) returned 0x0 [0261.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.819] GetFileType (hFile=0x18c) returned 0x1 [0261.819] SetErrorMode (uMode=0x0) returned 0x1 [0261.819] GetFileType (hFile=0x18c) returned 0x1 [0261.820] WriteFile (in: hFile=0x18c, lpBuffer=0x2853708*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2853708*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0261.822] WriteFile (in: hFile=0x18c, lpBuffer=0x2853708*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2853708*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0261.822] CloseHandle (hObject=0x18c) returned 1 [0261.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x35 [0261.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0261.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0261.823] SetErrorMode (uMode=0x1) returned 0x0 [0261.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.824] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.825] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.825] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.825] SetErrorMode (uMode=0x0) returned 0x1 [0261.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0261.826] SetErrorMode (uMode=0x1) returned 0x0 [0261.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.826] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.827] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.827] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.827] SetErrorMode (uMode=0x0) returned 0x1 [0261.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x54 [0261.829] SetErrorMode (uMode=0x1) returned 0x0 [0261.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.829] GetFileType (hFile=0x18c) returned 0x1 [0261.829] SetErrorMode (uMode=0x0) returned 0x1 [0261.829] GetFileType (hFile=0x18c) returned 0x1 [0261.831] WriteFile (in: hFile=0x18c, lpBuffer=0x286c0b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x286c0b8*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0261.832] WriteFile (in: hFile=0x18c, lpBuffer=0x286c0b8*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x286c0b8*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0261.833] CloseHandle (hObject=0x18c) returned 1 [0261.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0261.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0261.834] SetErrorMode (uMode=0x1) returned 0x0 [0261.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.835] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0261.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0261.836] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0261.837] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.837] SetErrorMode (uMode=0x0) returned 0x1 [0261.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0261.838] SetErrorMode (uMode=0x1) returned 0x0 [0261.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.838] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0261.839] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0261.840] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0261.840] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.840] SetErrorMode (uMode=0x0) returned 0x1 [0261.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0261.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0261.841] SetErrorMode (uMode=0x1) returned 0x0 [0261.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.842] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0261.843] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0261.843] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.843] SetErrorMode (uMode=0x0) returned 0x1 [0261.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x27e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0261.844] SetErrorMode (uMode=0x1) returned 0x0 [0261.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.844] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0261.845] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e420 | out: lpFindFileData=0x27e420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0261.845] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.845] SetErrorMode (uMode=0x0) returned 0x1 [0261.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x27e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0261.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0261.846] SetErrorMode (uMode=0x1) returned 0x0 [0261.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.846] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0261.847] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0 [0261.847] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.847] SetErrorMode (uMode=0x0) returned 0x1 [0261.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x27e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0261.848] SetErrorMode (uMode=0x1) returned 0x0 [0261.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.848] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.849] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0261.849] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e380 | out: lpFindFileData=0x27e380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0 [0261.849] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.849] SetErrorMode (uMode=0x0) returned 0x1 [0261.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x27e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0261.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0261.850] SetErrorMode (uMode=0x1) returned 0x0 [0261.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.852] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0261.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0261.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0261.853] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0261.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0261.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0261.854] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0 [0261.854] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.855] SetErrorMode (uMode=0x0) returned 0x1 [0261.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x27e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0261.856] SetErrorMode (uMode=0x1) returned 0x0 [0261.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0261.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0261.857] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0261.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0261.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0261.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0261.858] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0 [0261.859] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.859] SetErrorMode (uMode=0x0) returned 0x1 [0261.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x63 [0261.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x63 [0261.860] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.860] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.860] CoTaskMemFree (pv=0xffa70) [0261.860] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0261.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0261.861] SetErrorMode (uMode=0x1) returned 0x0 [0261.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0261.864] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0261.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0261.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0261.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0261.865] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0261.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0261.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0261.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0261.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0261.866] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0261.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0261.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0261.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0261.867] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0261.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0261.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0261.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0261.868] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0261.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0261.869] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0 [0261.869] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.870] SetErrorMode (uMode=0x0) returned 0x1 [0261.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0261.870] SetErrorMode (uMode=0x1) returned 0x0 [0261.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.871] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0261.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0261.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0261.872] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0261.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0261.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0261.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0261.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0261.873] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0261.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0261.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0261.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0261.874] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0261.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0261.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0261.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0261.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0261.875] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0261.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0261.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0261.876] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0 [0261.876] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.877] SetErrorMode (uMode=0x0) returned 0x1 [0261.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_", lpFilePart=0x0) returned 0x67 [0261.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_", lpFilePart=0x0) returned 0x67 [0261.878] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.878] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.878] CoTaskMemFree (pv=0xffa70) [0261.878] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_", lpFilePart=0x0) returned 0x67 [0261.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_", lpFilePart=0x0) returned 0x67 [0261.879] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.879] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.879] CoTaskMemFree (pv=0xffa70) [0261.879] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_", lpFilePart=0x0) returned 0x67 [0261.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_", lpFilePart=0x0) returned 0x67 [0261.880] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.880] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.880] CoTaskMemFree (pv=0xffa70) [0261.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_", lpFilePart=0x0) returned 0x67 [0261.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_", lpFilePart=0x0) returned 0x67 [0261.881] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.881] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.881] CoTaskMemFree (pv=0xffa70) [0261.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0261.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0261.882] SetErrorMode (uMode=0x1) returned 0x0 [0261.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.883] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.884] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0261.884] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0261.884] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 0 [0261.884] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.885] SetErrorMode (uMode=0x0) returned 0x1 [0261.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0261.885] SetErrorMode (uMode=0x1) returned 0x0 [0261.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0261.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0261.886] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 0 [0261.887] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.887] SetErrorMode (uMode=0x0) returned 0x1 [0261.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0261.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0261.888] SetErrorMode (uMode=0x1) returned 0x0 [0261.888] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0261.889] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 0 [0261.890] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.890] SetErrorMode (uMode=0x0) returned 0x1 [0261.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0261.891] SetErrorMode (uMode=0x1) returned 0x0 [0261.891] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.891] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 0 [0261.892] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.892] SetErrorMode (uMode=0x0) returned 0x1 [0261.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01", lpFilePart=0x0) returned 0x69 [0261.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01", lpFilePart=0x0) returned 0x69 [0261.893] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.893] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.893] CoTaskMemFree (pv=0xffa70) [0261.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0261.894] SetErrorMode (uMode=0x1) returned 0x0 [0261.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.895] SetErrorMode (uMode=0x0) returned 0x1 [0261.895] GetFileType (hFile=0x18c) returned 0x1 [0261.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0261.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0261.897] SetErrorMode (uMode=0x1) returned 0x0 [0261.897] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0261.898] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0 [0261.899] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.899] SetErrorMode (uMode=0x0) returned 0x1 [0261.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0261.899] SetErrorMode (uMode=0x1) returned 0x0 [0261.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.900] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.900] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0261.900] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0 [0261.901] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.901] SetErrorMode (uMode=0x0) returned 0x1 [0261.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01", lpFilePart=0x0) returned 0x69 [0261.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01", lpFilePart=0x0) returned 0x69 [0261.902] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.902] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.902] CoTaskMemFree (pv=0xffa70) [0261.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0261.903] SetErrorMode (uMode=0x1) returned 0x0 [0261.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.904] SetErrorMode (uMode=0x0) returned 0x1 [0261.904] GetFileType (hFile=0x18c) returned 0x1 [0261.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.905] SetErrorMode (uMode=0x1) returned 0x0 [0261.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.906] SetErrorMode (uMode=0x0) returned 0x1 [0261.906] GetFileType (hFile=0x18c) returned 0x1 [0261.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0261.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0261.908] SetErrorMode (uMode=0x1) returned 0x0 [0261.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.908] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.909] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0261.909] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0261.909] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0261.909] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 0 [0261.909] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.910] SetErrorMode (uMode=0x0) returned 0x1 [0261.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0261.910] SetErrorMode (uMode=0x1) returned 0x0 [0261.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0261.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0261.911] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0261.912] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 0 [0261.912] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.912] SetErrorMode (uMode=0x0) returned 0x1 [0261.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0261.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0261.913] SetErrorMode (uMode=0x1) returned 0x0 [0261.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0261.914] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 0 [0261.914] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.914] SetErrorMode (uMode=0x0) returned 0x1 [0261.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0261.915] SetErrorMode (uMode=0x1) returned 0x0 [0261.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0261.916] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 0 [0261.916] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.916] SetErrorMode (uMode=0x0) returned 0x1 [0261.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01", lpFilePart=0x0) returned 0x69 [0261.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01", lpFilePart=0x0) returned 0x69 [0261.917] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.918] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.918] CoTaskMemFree (pv=0xffa70) [0261.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0261.918] SetErrorMode (uMode=0x1) returned 0x0 [0261.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.919] SetErrorMode (uMode=0x0) returned 0x1 [0261.919] GetFileType (hFile=0x18c) returned 0x1 [0261.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0261.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0261.921] SetErrorMode (uMode=0x1) returned 0x0 [0261.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0261.922] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 0 [0261.923] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.923] SetErrorMode (uMode=0x0) returned 0x1 [0261.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0261.923] SetErrorMode (uMode=0x1) returned 0x0 [0261.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0261.924] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 0 [0261.924] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.925] SetErrorMode (uMode=0x0) returned 0x1 [0261.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01", lpFilePart=0x0) returned 0x69 [0261.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01", lpFilePart=0x0) returned 0x69 [0261.926] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.926] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.926] CoTaskMemFree (pv=0xffa70) [0261.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0261.926] SetErrorMode (uMode=0x1) returned 0x0 [0261.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.927] SetErrorMode (uMode=0x0) returned 0x1 [0261.927] GetFileType (hFile=0x18c) returned 0x1 [0261.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0261.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0261.929] SetErrorMode (uMode=0x1) returned 0x0 [0261.929] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.929] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0261.930] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0 [0261.930] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.930] SetErrorMode (uMode=0x0) returned 0x1 [0261.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0261.931] SetErrorMode (uMode=0x1) returned 0x0 [0261.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.931] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0261.932] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0 [0261.932] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.932] SetErrorMode (uMode=0x0) returned 0x1 [0261.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01", lpFilePart=0x0) returned 0x69 [0261.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01", lpFilePart=0x0) returned 0x69 [0261.933] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.933] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.933] CoTaskMemFree (pv=0xffa70) [0261.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0261.934] SetErrorMode (uMode=0x1) returned 0x0 [0261.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.935] SetErrorMode (uMode=0x0) returned 0x1 [0261.935] GetFileType (hFile=0x18c) returned 0x1 [0261.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.939] SetErrorMode (uMode=0x1) returned 0x0 [0261.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.942] SetErrorMode (uMode=0x0) returned 0x1 [0261.942] GetFileType (hFile=0x18c) returned 0x1 [0261.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0261.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0261.944] SetErrorMode (uMode=0x1) returned 0x0 [0261.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.945] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.945] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.945] SetErrorMode (uMode=0x0) returned 0x1 [0261.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0261.946] SetErrorMode (uMode=0x1) returned 0x0 [0261.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.947] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.947] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.947] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.947] SetErrorMode (uMode=0x0) returned 0x1 [0261.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.948] SetErrorMode (uMode=0x1) returned 0x0 [0261.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.950] SetErrorMode (uMode=0x0) returned 0x1 [0261.950] GetFileType (hFile=0x18c) returned 0x1 [0261.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0261.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0261.952] SetErrorMode (uMode=0x1) returned 0x0 [0261.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.953] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.953] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0261.953] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0 [0261.954] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.954] SetErrorMode (uMode=0x0) returned 0x1 [0261.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0261.955] SetErrorMode (uMode=0x1) returned 0x0 [0261.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0261.955] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0 [0261.956] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.956] SetErrorMode (uMode=0x0) returned 0x1 [0261.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0261.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0261.957] SetErrorMode (uMode=0x1) returned 0x0 [0261.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0261.958] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0 [0261.959] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.959] SetErrorMode (uMode=0x0) returned 0x1 [0261.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0261.959] SetErrorMode (uMode=0x1) returned 0x0 [0261.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.960] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.960] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0261.960] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0 [0261.961] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.961] SetErrorMode (uMode=0x0) returned 0x1 [0261.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01", lpFilePart=0x0) returned 0x69 [0261.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01", lpFilePart=0x0) returned 0x69 [0261.962] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0261.962] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0261.962] CoTaskMemFree (pv=0xffa70) [0261.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0261.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0261.962] SetErrorMode (uMode=0x1) returned 0x0 [0261.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.963] SetErrorMode (uMode=0x0) returned 0x1 [0261.963] GetFileType (hFile=0x18c) returned 0x1 [0261.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.965] SetErrorMode (uMode=0x1) returned 0x0 [0261.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.965] SetErrorMode (uMode=0x0) returned 0x1 [0261.965] GetFileType (hFile=0x18c) returned 0x1 [0261.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0261.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0261.967] SetErrorMode (uMode=0x1) returned 0x0 [0261.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.968] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.968] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.968] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.968] SetErrorMode (uMode=0x0) returned 0x1 [0261.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0261.969] SetErrorMode (uMode=0x1) returned 0x0 [0261.969] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.969] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.970] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.970] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.970] SetErrorMode (uMode=0x0) returned 0x1 [0261.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.971] SetErrorMode (uMode=0x1) returned 0x0 [0261.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.971] SetErrorMode (uMode=0x0) returned 0x1 [0261.972] GetFileType (hFile=0x18c) returned 0x1 [0261.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0261.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0261.973] SetErrorMode (uMode=0x1) returned 0x0 [0261.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.975] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.975] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.975] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.975] SetErrorMode (uMode=0x0) returned 0x1 [0261.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0261.976] SetErrorMode (uMode=0x1) returned 0x0 [0261.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.976] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.976] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.977] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.977] SetErrorMode (uMode=0x0) returned 0x1 [0261.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.978] SetErrorMode (uMode=0x1) returned 0x0 [0261.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.978] SetErrorMode (uMode=0x0) returned 0x1 [0261.978] GetFileType (hFile=0x18c) returned 0x1 [0261.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0261.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0261.980] SetErrorMode (uMode=0x1) returned 0x0 [0261.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.981] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.981] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.981] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.981] SetErrorMode (uMode=0x0) returned 0x1 [0261.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0261.982] SetErrorMode (uMode=0x1) returned 0x0 [0261.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.982] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.983] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.983] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.983] SetErrorMode (uMode=0x0) returned 0x1 [0261.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.984] SetErrorMode (uMode=0x1) returned 0x0 [0261.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.984] SetErrorMode (uMode=0x0) returned 0x1 [0261.985] GetFileType (hFile=0x18c) returned 0x1 [0261.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0261.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0261.986] SetErrorMode (uMode=0x1) returned 0x0 [0261.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.987] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.988] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.988] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.988] SetErrorMode (uMode=0x0) returned 0x1 [0261.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0261.989] SetErrorMode (uMode=0x1) returned 0x0 [0261.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.989] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.989] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.990] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.990] SetErrorMode (uMode=0x0) returned 0x1 [0261.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.990] SetErrorMode (uMode=0x1) returned 0x0 [0261.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.991] SetErrorMode (uMode=0x0) returned 0x1 [0261.991] GetFileType (hFile=0x18c) returned 0x1 [0261.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0261.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0261.993] SetErrorMode (uMode=0x1) returned 0x0 [0261.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.993] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.994] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.994] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.994] SetErrorMode (uMode=0x0) returned 0x1 [0261.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0261.995] SetErrorMode (uMode=0x1) returned 0x0 [0261.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0261.995] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.995] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.996] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0261.996] SetErrorMode (uMode=0x0) returned 0x1 [0261.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0261.997] SetErrorMode (uMode=0x1) returned 0x0 [0261.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0261.997] SetErrorMode (uMode=0x0) returned 0x1 [0261.997] GetFileType (hFile=0x18c) returned 0x1 [0261.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0261.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0261.999] SetErrorMode (uMode=0x1) returned 0x0 [0261.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.000] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.000] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0 [0262.002] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.002] SetErrorMode (uMode=0x0) returned 0x1 [0262.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0262.002] SetErrorMode (uMode=0x1) returned 0x0 [0262.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.003] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.003] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0262.003] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0262.004] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0262.004] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0262.004] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e1a0 | out: lpFindFileData=0x27e1a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0 [0262.004] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.004] SetErrorMode (uMode=0x0) returned 0x1 [0262.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0262.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0262.005] SetErrorMode (uMode=0x1) returned 0x0 [0262.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.006] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.006] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0262.006] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0 [0262.007] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.007] SetErrorMode (uMode=0x0) returned 0x1 [0262.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0262.007] SetErrorMode (uMode=0x1) returned 0x0 [0262.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0262.008] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0 [0262.009] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.009] SetErrorMode (uMode=0x0) returned 0x1 [0262.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01", lpFilePart=0x0) returned 0x69 [0262.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01", lpFilePart=0x0) returned 0x69 [0262.010] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.010] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.010] CoTaskMemFree (pv=0xffa70) [0262.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0262.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0262.010] SetErrorMode (uMode=0x1) returned 0x0 [0262.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.011] SetErrorMode (uMode=0x0) returned 0x1 [0262.011] GetFileType (hFile=0x18c) returned 0x1 [0262.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0262.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0262.013] SetErrorMode (uMode=0x1) returned 0x0 [0262.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0262.014] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0 [0262.014] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.015] SetErrorMode (uMode=0x0) returned 0x1 [0262.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0262.015] SetErrorMode (uMode=0x1) returned 0x0 [0262.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0262.016] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0 [0262.016] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.017] SetErrorMode (uMode=0x0) returned 0x1 [0262.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01", lpFilePart=0x0) returned 0x69 [0262.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01", lpFilePart=0x0) returned 0x69 [0262.017] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.018] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.018] CoTaskMemFree (pv=0xffa70) [0262.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0262.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0262.018] SetErrorMode (uMode=0x1) returned 0x0 [0262.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.019] SetErrorMode (uMode=0x0) returned 0x1 [0262.019] GetFileType (hFile=0x18c) returned 0x1 [0262.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0262.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0262.021] SetErrorMode (uMode=0x1) returned 0x0 [0262.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.021] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0262.022] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0 [0262.022] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.022] SetErrorMode (uMode=0x0) returned 0x1 [0262.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0262.023] SetErrorMode (uMode=0x1) returned 0x0 [0262.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.023] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0262.024] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0 [0262.024] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.024] SetErrorMode (uMode=0x0) returned 0x1 [0262.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01", lpFilePart=0x0) returned 0x69 [0262.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01", lpFilePart=0x0) returned 0x69 [0262.025] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.025] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.025] CoTaskMemFree (pv=0xffa70) [0262.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0262.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0262.026] SetErrorMode (uMode=0x1) returned 0x0 [0262.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.027] SetErrorMode (uMode=0x0) returned 0x1 [0262.027] GetFileType (hFile=0x18c) returned 0x1 [0262.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0262.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0262.029] SetErrorMode (uMode=0x1) returned 0x0 [0262.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.030] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e100 | out: lpFindFileData=0x27e100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.030] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.030] SetErrorMode (uMode=0x0) returned 0x1 [0262.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0262.031] SetErrorMode (uMode=0x1) returned 0x0 [0262.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.032] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.032] SetErrorMode (uMode=0x0) returned 0x1 [0262.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01", lpFilePart=0x0) returned 0x69 [0262.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01", lpFilePart=0x0) returned 0x69 [0262.033] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.033] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.033] CoTaskMemFree (pv=0xffa70) [0262.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0262.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0262.033] SetErrorMode (uMode=0x1) returned 0x0 [0262.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.034] SetErrorMode (uMode=0x0) returned 0x1 [0262.034] GetFileType (hFile=0x18c) returned 0x1 [0262.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0262.036] SetErrorMode (uMode=0x1) returned 0x0 [0262.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.036] SetErrorMode (uMode=0x0) returned 0x1 [0262.036] GetFileType (hFile=0x18c) returned 0x1 [0262.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0262.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0262.038] SetErrorMode (uMode=0x1) returned 0x0 [0262.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.039] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.039] SetErrorMode (uMode=0x0) returned 0x1 [0262.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0262.040] SetErrorMode (uMode=0x1) returned 0x0 [0262.040] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.040] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.040] SetErrorMode (uMode=0x0) returned 0x1 [0262.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0262.041] SetErrorMode (uMode=0x1) returned 0x0 [0262.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.041] SetErrorMode (uMode=0x0) returned 0x1 [0262.042] GetFileType (hFile=0x18c) returned 0x1 [0262.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0262.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0262.043] SetErrorMode (uMode=0x1) returned 0x0 [0262.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.044] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.045] SetErrorMode (uMode=0x0) returned 0x1 [0262.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0262.045] SetErrorMode (uMode=0x1) returned 0x0 [0262.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.046] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.046] SetErrorMode (uMode=0x0) returned 0x1 [0262.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0262.047] SetErrorMode (uMode=0x1) returned 0x0 [0262.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.047] SetErrorMode (uMode=0x0) returned 0x1 [0262.047] GetFileType (hFile=0x18c) returned 0x1 [0262.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0262.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0262.049] SetErrorMode (uMode=0x1) returned 0x0 [0262.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.049] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.050] SetErrorMode (uMode=0x0) returned 0x1 [0262.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0262.050] SetErrorMode (uMode=0x1) returned 0x0 [0262.050] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.051] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.051] SetErrorMode (uMode=0x0) returned 0x1 [0262.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0262.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0262.052] SetErrorMode (uMode=0x1) returned 0x0 [0262.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.052] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.052] SetErrorMode (uMode=0x0) returned 0x1 [0262.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0262.053] SetErrorMode (uMode=0x1) returned 0x0 [0262.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.054] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.054] SetErrorMode (uMode=0x0) returned 0x1 [0262.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01", lpFilePart=0x0) returned 0x69 [0262.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01", lpFilePart=0x0) returned 0x69 [0262.055] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.055] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.055] CoTaskMemFree (pv=0xffa70) [0262.055] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0262.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0262.055] SetErrorMode (uMode=0x1) returned 0x0 [0262.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.056] SetErrorMode (uMode=0x0) returned 0x1 [0262.056] GetFileType (hFile=0x18c) returned 0x1 [0262.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0262.058] SetErrorMode (uMode=0x1) returned 0x0 [0262.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.058] SetErrorMode (uMode=0x0) returned 0x1 [0262.058] GetFileType (hFile=0x18c) returned 0x1 [0262.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0262.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0262.060] SetErrorMode (uMode=0x1) returned 0x0 [0262.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.061] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.062] SetErrorMode (uMode=0x0) returned 0x1 [0262.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0262.062] SetErrorMode (uMode=0x1) returned 0x0 [0262.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.063] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.063] SetErrorMode (uMode=0x0) returned 0x1 [0262.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x27e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0262.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0262.064] SetErrorMode (uMode=0x1) returned 0x0 [0262.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.065] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.065] SetErrorMode (uMode=0x0) returned 0x1 [0262.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x27df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0262.066] SetErrorMode (uMode=0x1) returned 0x0 [0262.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.066] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.066] SetErrorMode (uMode=0x0) returned 0x1 [0262.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01", nBufferLength=0x105, lpBuffer=0x27e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01", lpFilePart=0x0) returned 0x69 [0262.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01", lpFilePart=0x0) returned 0x69 [0262.067] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.067] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.067] CoTaskMemFree (pv=0xffa70) [0262.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0262.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x7a [0262.068] SetErrorMode (uMode=0x1) returned 0x0 [0262.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.069] SetErrorMode (uMode=0x0) returned 0x1 [0262.069] GetFileType (hFile=0x18c) returned 0x1 [0262.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x77 [0262.070] SetErrorMode (uMode=0x1) returned 0x0 [0262.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.071] SetErrorMode (uMode=0x0) returned 0x1 [0262.071] GetFileType (hFile=0x18c) returned 0x1 [0262.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0262.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x27dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0262.073] SetErrorMode (uMode=0x1) returned 0x0 [0262.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.073] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.073] SetErrorMode (uMode=0x0) returned 0x1 [0262.074] SetErrorMode (uMode=0x1) returned 0x0 [0262.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.075] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.075] SetErrorMode (uMode=0x0) returned 0x1 [0262.075] SetErrorMode (uMode=0x1) returned 0x0 [0262.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.076] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.076] SetErrorMode (uMode=0x0) returned 0x1 [0262.076] SetErrorMode (uMode=0x1) returned 0x0 [0262.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.077] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.077] SetErrorMode (uMode=0x0) returned 0x1 [0262.077] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.077] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.078] CoTaskMemFree (pv=0xffa70) [0262.078] SetErrorMode (uMode=0x1) returned 0x0 [0262.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.079] SetErrorMode (uMode=0x0) returned 0x1 [0262.079] GetFileType (hFile=0x18c) returned 0x1 [0262.083] SetErrorMode (uMode=0x1) returned 0x0 [0262.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.084] SetErrorMode (uMode=0x0) returned 0x1 [0262.084] GetFileType (hFile=0x18c) returned 0x1 [0262.085] SetErrorMode (uMode=0x1) returned 0x0 [0262.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.086] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.087] SetErrorMode (uMode=0x0) returned 0x1 [0262.087] SetErrorMode (uMode=0x1) returned 0x0 [0262.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x27e190 | out: lpFindFileData=0x27e190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.087] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.088] SetErrorMode (uMode=0x0) returned 0x1 [0262.088] SetErrorMode (uMode=0x1) returned 0x0 [0262.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.089] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.089] SetErrorMode (uMode=0x0) returned 0x1 [0262.089] SetErrorMode (uMode=0x1) returned 0x0 [0262.089] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.090] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.090] SetErrorMode (uMode=0x0) returned 0x1 [0262.090] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.090] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.090] CoTaskMemFree (pv=0xffa70) [0262.091] SetErrorMode (uMode=0x1) returned 0x0 [0262.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.091] SetErrorMode (uMode=0x0) returned 0x1 [0262.091] GetFileType (hFile=0x18c) returned 0x1 [0262.093] SetErrorMode (uMode=0x1) returned 0x0 [0262.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.094] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.094] SetErrorMode (uMode=0x0) returned 0x1 [0262.094] SetErrorMode (uMode=0x1) returned 0x0 [0262.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x27e0f0 | out: lpFindFileData=0x27e0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.095] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.095] SetErrorMode (uMode=0x0) returned 0x1 [0262.095] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0262.095] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.096] CoTaskMemFree (pv=0xffa70) [0262.096] SetErrorMode (uMode=0x1) returned 0x0 [0262.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.097] SetErrorMode (uMode=0x0) returned 0x1 [0262.097] GetFileType (hFile=0x18c) returned 0x1 [0262.098] SetErrorMode (uMode=0x1) returned 0x0 [0262.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.099] SetErrorMode (uMode=0x0) returned 0x1 [0262.099] GetFileType (hFile=0x18c) returned 0x1 [0262.100] SetErrorMode (uMode=0x1) returned 0x0 [0262.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0262.101] SetErrorMode (uMode=0x0) returned 0x1 [0262.101] GetFileType (hFile=0x18c) returned 0x1 [0262.102] SetErrorMode (uMode=0x1) returned 0x0 [0262.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.103] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.103] SetErrorMode (uMode=0x0) returned 0x1 [0262.104] SetErrorMode (uMode=0x1) returned 0x0 [0262.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.104] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.104] SetErrorMode (uMode=0x0) returned 0x1 [0262.105] SetErrorMode (uMode=0x1) returned 0x0 [0262.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0262.105] SetErrorMode (uMode=0x0) returned 0x1 [0262.105] GetFileType (hFile=0x18c) returned 0x1 [0262.105] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x40000 [0262.114] SetErrorMode (uMode=0x1) returned 0x0 [0262.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0262.115] SetErrorMode (uMode=0x0) returned 0x1 [0262.288] SetErrorMode (uMode=0x1) returned 0x0 [0262.290] SetErrorMode (uMode=0x0) returned 0x1 [0262.291] GetFileType (hFile=0x18c) returned 0x1 [0262.291] WriteFile (in: hFile=0x18c, lpBuffer=0x12792778*, nNumberOfBytesToWrite=0x40110, lpNumberOfBytesWritten=0x27e4e8, lpOverlapped=0x0 | out: lpBuffer=0x12792778*, lpNumberOfBytesWritten=0x27e4e8*=0x40110, lpOverlapped=0x0) returned 1 [0262.296] SetErrorMode (uMode=0x1) returned 0x0 [0262.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x27e410 | out: lpFileInformation=0x27e410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x6ce9c890, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x40110)) returned 1 [0262.297] SetErrorMode (uMode=0x0) returned 0x1 [0262.297] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\GDcWhr96VPQLRe39_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\gdcwhr96vpqlre39_encrypted_by.whiterose")) returned 1 [0262.402] SetErrorMode (uMode=0x1) returned 0x0 [0262.403] SetErrorMode (uMode=0x0) returned 0x1 [0262.403] GetFileType (hFile=0x18c) returned 0x1 [0262.405] SetErrorMode (uMode=0x1) returned 0x0 [0262.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.407] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.408] SetErrorMode (uMode=0x0) returned 0x1 [0262.409] SetErrorMode (uMode=0x1) returned 0x0 [0262.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.410] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.410] SetErrorMode (uMode=0x0) returned 0x1 [0262.411] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.411] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.411] CoTaskMemFree (pv=0xfe030) [0262.411] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.411] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.412] CoTaskMemFree (pv=0xfe030) [0262.412] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.412] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.412] CoTaskMemFree (pv=0xfe030) [0262.412] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.413] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.413] CoTaskMemFree (pv=0xfe030) [0262.413] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.413] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.413] CoTaskMemFree (pv=0xfe030) [0262.413] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.414] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.414] CoTaskMemFree (pv=0xfe030) [0262.414] SetErrorMode (uMode=0x1) returned 0x0 [0262.415] SetErrorMode (uMode=0x0) returned 0x1 [0262.415] GetFileType (hFile=0x18c) returned 0x1 [0262.417] SetErrorMode (uMode=0x1) returned 0x0 [0262.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.418] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.418] SetErrorMode (uMode=0x0) returned 0x1 [0262.418] SetErrorMode (uMode=0x1) returned 0x0 [0262.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.419] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.419] SetErrorMode (uMode=0x0) returned 0x1 [0262.420] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0262.420] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.420] CoTaskMemFree (pv=0xfe030) [0262.420] SetErrorMode (uMode=0x1) returned 0x0 [0262.421] SetErrorMode (uMode=0x0) returned 0x1 [0262.421] GetFileType (hFile=0x18c) returned 0x1 [0262.422] SetErrorMode (uMode=0x1) returned 0x0 [0262.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.425] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.426] SetErrorMode (uMode=0x0) returned 0x1 [0262.426] SetErrorMode (uMode=0x1) returned 0x0 [0262.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.427] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.428] SetErrorMode (uMode=0x0) returned 0x1 [0262.429] SetErrorMode (uMode=0x1) returned 0x0 [0262.430] SetErrorMode (uMode=0x0) returned 0x1 [0262.430] GetFileType (hFile=0x18c) returned 0x1 [0262.430] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x40b0 [0262.432] SetErrorMode (uMode=0x1) returned 0x0 [0262.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1 [0262.432] SetErrorMode (uMode=0x0) returned 0x1 [0262.495] SetErrorMode (uMode=0x1) returned 0x0 [0262.496] SetErrorMode (uMode=0x0) returned 0x1 [0262.496] GetFileType (hFile=0x18c) returned 0x1 [0262.496] WriteFile (in: hFile=0x18c, lpBuffer=0x27bfc78*, nNumberOfBytesToWrite=0x41c0, lpNumberOfBytesWritten=0x27e4e8, lpOverlapped=0x0 | out: lpBuffer=0x27bfc78*, lpNumberOfBytesWritten=0x27e4e8*=0x41c0, lpOverlapped=0x0) returned 1 [0262.498] SetErrorMode (uMode=0x1) returned 0x0 [0262.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x27e410 | out: lpFileInformation=0x27e410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6d08ba70, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x41c0)) returned 1 [0262.498] SetErrorMode (uMode=0x0) returned 0x1 [0262.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\Gbhx08VBwSIlkyqZ_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\gbhx08vbwsilkyqz_encrypted_by.whiterose")) returned 1 [0262.604] SetErrorMode (uMode=0x1) returned 0x0 [0262.606] SetErrorMode (uMode=0x0) returned 0x1 [0262.606] GetFileType (hFile=0x18c) returned 0x1 [0262.606] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x40b0 [0262.609] SetErrorMode (uMode=0x1) returned 0x0 [0262.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1 [0262.609] SetErrorMode (uMode=0x0) returned 0x1 [0262.672] SetErrorMode (uMode=0x1) returned 0x0 [0262.673] SetErrorMode (uMode=0x0) returned 0x1 [0262.674] GetFileType (hFile=0x18c) returned 0x1 [0262.674] WriteFile (in: hFile=0x18c, lpBuffer=0x2845ec8*, nNumberOfBytesToWrite=0x41c0, lpNumberOfBytesWritten=0x27e4e8, lpOverlapped=0x0 | out: lpBuffer=0x2845ec8*, lpNumberOfBytesWritten=0x27e4e8*=0x41c0, lpOverlapped=0x0) returned 1 [0262.676] SetErrorMode (uMode=0x1) returned 0x0 [0262.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x27e410 | out: lpFileInformation=0x27e410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6d22e990, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x41c0)) returned 1 [0262.676] SetErrorMode (uMode=0x0) returned 0x1 [0262.676] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\n41rzwHpFQtkTQjM_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\n41rzwhpfqtktqjm_encrypted_by.whiterose")) returned 1 [0262.776] SetErrorMode (uMode=0x1) returned 0x0 [0262.777] SetErrorMode (uMode=0x0) returned 0x1 [0262.777] GetFileType (hFile=0x18c) returned 0x1 [0262.777] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e588 | out: lpFileSizeHigh=0x27e588*=0x0) returned 0x1c362 [0262.783] SetErrorMode (uMode=0x1) returned 0x0 [0262.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x27e470 | out: lpFileInformation=0x27e470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362)) returned 1 [0262.784] SetErrorMode (uMode=0x0) returned 0x1 [0262.850] SetErrorMode (uMode=0x1) returned 0x0 [0262.852] SetErrorMode (uMode=0x0) returned 0x1 [0262.852] GetFileType (hFile=0x18c) returned 0x1 [0262.852] WriteFile (in: hFile=0x18c, lpBuffer=0x1287c2f8*, nNumberOfBytesToWrite=0x1c470, lpNumberOfBytesWritten=0x27e4e8, lpOverlapped=0x0 | out: lpBuffer=0x1287c2f8*, lpNumberOfBytesWritten=0x27e4e8*=0x1c470, lpOverlapped=0x0) returned 1 [0262.855] SetErrorMode (uMode=0x1) returned 0x0 [0262.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x27e410 | out: lpFileInformation=0x27e410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x6d3f7a10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x1c470)) returned 1 [0262.855] SetErrorMode (uMode=0x0) returned 0x1 [0262.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\IdwXMXjcPTsQrO2z_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\idwxmxjcptsqro2z_encrypted_by.whiterose")) returned 1 [0262.963] SetErrorMode (uMode=0x1) returned 0x0 [0262.964] SetErrorMode (uMode=0x0) returned 0x1 [0262.964] GetFileType (hFile=0x18c) returned 0x1 [0262.965] SetErrorMode (uMode=0x1) returned 0x0 [0262.966] SetErrorMode (uMode=0x0) returned 0x1 [0262.966] GetFileType (hFile=0x18c) returned 0x1 [0262.967] SetErrorMode (uMode=0x1) returned 0x0 [0262.968] SetErrorMode (uMode=0x0) returned 0x1 [0262.968] GetFileType (hFile=0x18c) returned 0x1 [0262.969] SetErrorMode (uMode=0x1) returned 0x0 [0262.970] SetErrorMode (uMode=0x0) returned 0x1 [0262.970] GetFileType (hFile=0x18c) returned 0x1 [0262.971] SetErrorMode (uMode=0x1) returned 0x0 [0262.971] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.972] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.972] SetErrorMode (uMode=0x0) returned 0x1 [0262.973] SetErrorMode (uMode=0x1) returned 0x0 [0262.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x27e410 | out: lpFindFileData=0x27e410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.973] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.973] SetErrorMode (uMode=0x0) returned 0x1 [0262.974] SetErrorMode (uMode=0x1) returned 0x0 [0262.974] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.977] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.977] SetErrorMode (uMode=0x0) returned 0x1 [0262.978] SetErrorMode (uMode=0x1) returned 0x0 [0262.978] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x27e370 | out: lpFindFileData=0x27e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0262.979] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0262.980] SetErrorMode (uMode=0x0) returned 0x1 [0262.983] SetErrorMode (uMode=0x1) returned 0x0 [0262.985] SetErrorMode (uMode=0x0) returned 0x1 [0262.985] GetFileType (hFile=0x18c) returned 0x1 [0262.985] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0x464 [0262.987] SetErrorMode (uMode=0x1) returned 0x0 [0262.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1 [0262.987] SetErrorMode (uMode=0x0) returned 0x1 [0263.051] SetErrorMode (uMode=0x1) returned 0x0 [0263.052] SetErrorMode (uMode=0x0) returned 0x1 [0263.052] GetFileType (hFile=0x18c) returned 0x1 [0263.052] WriteFile (in: hFile=0x18c, lpBuffer=0x2770148*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x27e548, lpOverlapped=0x0 | out: lpBuffer=0x2770148*, lpNumberOfBytesWritten=0x27e548*=0x570, lpOverlapped=0x0) returned 1 [0263.053] SetErrorMode (uMode=0x1) returned 0x0 [0263.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6d5c0a90, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0263.054] SetErrorMode (uMode=0x0) returned 0x1 [0263.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\LNphqmh4WK2k1q8l_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\lnphqmh4wk2k1q8l_encrypted_by.whiterose")) returned 1 [0263.151] SetErrorMode (uMode=0x1) returned 0x0 [0263.152] SetErrorMode (uMode=0x0) returned 0x1 [0263.152] GetFileType (hFile=0x18c) returned 0x1 [0263.152] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e6c8 | out: lpFileSizeHigh=0x27e6c8*=0x0) returned 0x39 [0263.152] ReadFile (in: hFile=0x18c, lpBuffer=0x27728b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e5a8, lpOverlapped=0x0 | out: lpBuffer=0x27728b0*, lpNumberOfBytesRead=0x27e5a8*=0x39, lpOverlapped=0x0) returned 1 [0263.153] SetErrorMode (uMode=0x1) returned 0x0 [0263.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e5b0 | out: lpFileInformation=0x27e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0263.153] SetErrorMode (uMode=0x0) returned 0x1 [0263.239] SetErrorMode (uMode=0x1) returned 0x0 [0263.240] SetErrorMode (uMode=0x0) returned 0x1 [0263.240] GetFileType (hFile=0x18c) returned 0x1 [0263.240] WriteFile (in: hFile=0x18c, lpBuffer=0x27ceaf8*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x27e548, lpOverlapped=0x0 | out: lpBuffer=0x27ceaf8*, lpNumberOfBytesWritten=0x27e548*=0x140, lpOverlapped=0x0) returned 1 [0263.241] SetErrorMode (uMode=0x1) returned 0x0 [0263.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x27e550 | out: lpFileInformation=0x27e550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6d789b10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0263.242] SetErrorMode (uMode=0x0) returned 0x1 [0263.242] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\CfEZ7FlkcaJBeUvL_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\cfez7flkcajbeuvl_encrypted_by.whiterose")) returned 1 [0263.337] SetErrorMode (uMode=0x1) returned 0x0 [0263.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0263.339] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0263.339] SetErrorMode (uMode=0x0) returned 0x1 [0263.339] SetErrorMode (uMode=0x1) returned 0x0 [0263.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x27e2d0 | out: lpFindFileData=0x27e2d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0263.340] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.341] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0263.341] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e2e0 | out: lpFindFileData=0x27e2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 0 [0263.341] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0263.342] SetErrorMode (uMode=0x0) returned 0x1 [0263.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x27e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0263.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0263.342] SetErrorMode (uMode=0x1) returned 0x0 [0263.342] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0263.343] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.344] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0263.344] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0263.344] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0 [0263.345] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0263.345] SetErrorMode (uMode=0x0) returned 0x1 [0263.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x27e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0263.345] SetErrorMode (uMode=0x1) returned 0x0 [0263.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x27e230 | out: lpFindFileData=0x27e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0263.346] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0263.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0263.347] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e240 | out: lpFindFileData=0x27e240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0 [0263.348] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0263.348] SetErrorMode (uMode=0x0) returned 0x1 [0263.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar", lpFilePart=0x0) returned 0x61 [0263.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar", lpFilePart=0x0) returned 0x61 [0263.349] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0263.349] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0263.349] CoTaskMemFree (pv=0xffa70) [0263.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0263.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status", nBufferLength=0x105, lpBuffer=0x27e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status", lpFilePart=0x0) returned 0x64 [0263.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status", lpFilePart=0x0) returned 0x64 [0263.350] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0263.350] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0263.350] CoTaskMemFree (pv=0xffa70) [0263.350] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0263.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x70 [0263.351] SetErrorMode (uMode=0x1) returned 0x0 [0263.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0263.352] GetFileType (hFile=0x18c) returned 0x1 [0263.352] SetErrorMode (uMode=0x0) returned 0x1 [0263.352] GetFileType (hFile=0x18c) returned 0x1 [0263.353] WriteFile (in: hFile=0x18c, lpBuffer=0x27e8fd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e428, lpOverlapped=0x0 | out: lpBuffer=0x27e8fd0*, lpNumberOfBytesWritten=0x27e428*=0x1000, lpOverlapped=0x0) returned 1 [0263.355] WriteFile (in: hFile=0x18c, lpBuffer=0x27e8fd0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e488, lpOverlapped=0x0 | out: lpBuffer=0x27e8fd0*, lpNumberOfBytesWritten=0x27e488*=0xb14, lpOverlapped=0x0) returned 1 [0263.355] CloseHandle (hObject=0x18c) returned 1 [0263.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x6e [0263.356] SetErrorMode (uMode=0x1) returned 0x0 [0263.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0263.357] GetFileType (hFile=0x18c) returned 0x1 [0263.357] SetErrorMode (uMode=0x0) returned 0x1 [0263.357] GetFileType (hFile=0x18c) returned 0x1 [0263.358] WriteFile (in: hFile=0x18c, lpBuffer=0x27ff140*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e4c8, lpOverlapped=0x0 | out: lpBuffer=0x27ff140*, lpNumberOfBytesWritten=0x27e4c8*=0x1000, lpOverlapped=0x0) returned 1 [0263.360] WriteFile (in: hFile=0x18c, lpBuffer=0x27ff140*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e528, lpOverlapped=0x0 | out: lpBuffer=0x27ff140*, lpNumberOfBytesWritten=0x27e528*=0xb14, lpOverlapped=0x0) returned 1 [0263.360] CloseHandle (hObject=0x18c) returned 1 [0263.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x66 [0263.360] SetErrorMode (uMode=0x1) returned 0x0 [0263.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0263.361] GetFileType (hFile=0x18c) returned 0x1 [0263.361] SetErrorMode (uMode=0x0) returned 0x1 [0263.361] GetFileType (hFile=0x18c) returned 0x1 [0263.361] WriteFile (in: hFile=0x18c, lpBuffer=0x2815290*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e568, lpOverlapped=0x0 | out: lpBuffer=0x2815290*, lpNumberOfBytesWritten=0x27e568*=0x1000, lpOverlapped=0x0) returned 1 [0263.363] WriteFile (in: hFile=0x18c, lpBuffer=0x2815290*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2815290*, lpNumberOfBytesWritten=0x27e5c8*=0xb14, lpOverlapped=0x0) returned 1 [0263.363] CloseHandle (hObject=0x18c) returned 1 [0263.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x55 [0263.363] SetErrorMode (uMode=0x1) returned 0x0 [0263.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0263.364] GetFileType (hFile=0x18c) returned 0x1 [0263.364] SetErrorMode (uMode=0x0) returned 0x1 [0263.364] GetFileType (hFile=0x18c) returned 0x1 [0263.364] WriteFile (in: hFile=0x18c, lpBuffer=0x282b3a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e608, lpOverlapped=0x0 | out: lpBuffer=0x282b3a0*, lpNumberOfBytesWritten=0x27e608*=0x1000, lpOverlapped=0x0) returned 1 [0263.365] WriteFile (in: hFile=0x18c, lpBuffer=0x282b3a0*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e668, lpOverlapped=0x0 | out: lpBuffer=0x282b3a0*, lpNumberOfBytesWritten=0x27e668*=0xb14, lpOverlapped=0x0) returned 1 [0263.366] CloseHandle (hObject=0x18c) returned 1 [0263.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\HOW-TO-RECOVERY-FILES.TXT", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\HOW-TO-RECOVERY-FILES.TXT", lpFilePart=0x0) returned 0x4d [0263.367] SetErrorMode (uMode=0x1) returned 0x0 [0263.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\HOW-TO-RECOVERY-FILES.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\how-to-recovery-files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x18c [0263.368] GetFileType (hFile=0x18c) returned 0x1 [0263.368] SetErrorMode (uMode=0x0) returned 0x1 [0263.368] GetFileType (hFile=0x18c) returned 0x1 [0263.368] WriteFile (in: hFile=0x18c, lpBuffer=0x2841490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x27e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2841490*, lpNumberOfBytesWritten=0x27e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0263.370] WriteFile (in: hFile=0x18c, lpBuffer=0x2841490*, nNumberOfBytesToWrite=0xb14, lpNumberOfBytesWritten=0x27e708, lpOverlapped=0x0 | out: lpBuffer=0x2841490*, lpNumberOfBytesWritten=0x27e708*=0xb14, lpOverlapped=0x0) returned 1 [0263.370] CloseHandle (hObject=0x18c) returned 1 [0263.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x27e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0263.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0263.370] SetErrorMode (uMode=0x1) returned 0x0 [0263.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0d752f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe0d752f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0d752f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe0d752f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cb3a920, ftCreationTime.dwHighDateTime=0x1d4cc11, ftLastAccessTime.dwLowDateTime=0x7930c500, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0x7930c500, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0x2b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="16rSoPuZ1qv-.swf", cAlternateFileName="16RSOP~1.SWF")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8b6ae80, ftCreationTime.dwHighDateTime=0x1d4c8db, ftLastAccessTime.dwLowDateTime=0x87672ce0, ftLastAccessTime.dwHighDateTime=0x1d4c7de, ftLastWriteTime.dwLowDateTime=0x87672ce0, ftLastWriteTime.dwHighDateTime=0x1d4c7de, nFileSizeHigh=0x0, nFileSizeLow=0x14555, dwReserved0=0x0, dwReserved1=0x0, cFileName="2aa-Boe9Sxh.swf", cAlternateFileName="2AA-BO~1.SWF")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x191bf8c0, ftCreationTime.dwHighDateTime=0x1d4d205, ftLastAccessTime.dwLowDateTime=0x380bdf80, ftLastAccessTime.dwHighDateTime=0x1d4d54c, ftLastWriteTime.dwLowDateTime=0x380bdf80, ftLastWriteTime.dwHighDateTime=0x1d4d54c, nFileSizeHigh=0x0, nFileSizeLow=0x10030, dwReserved0=0x0, dwReserved1=0x0, cFileName="6XcCSOAuN2uqc.doc", cAlternateFileName="6XCCSO~1.DOC")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x842e0fc0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54dc9650, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xefa5f940, ftLastAccessTime.dwHighDateTime=0x1d4cf67, ftLastWriteTime.dwLowDateTime=0xefa5f940, ftLastWriteTime.dwHighDateTime=0x1d4cf67, nFileSizeHigh=0x0, nFileSizeLow=0x7059, dwReserved0=0x0, dwReserved1=0x0, cFileName="caBGnSXYC.m4a", cAlternateFileName="CABGNS~1.M4A")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0263.371] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x385dce10, ftCreationTime.dwHighDateTime=0x1d4ce0f, ftLastAccessTime.dwLowDateTime=0xb3620790, ftLastAccessTime.dwHighDateTime=0x1d4d5b5, ftLastWriteTime.dwLowDateTime=0xb3620790, ftLastWriteTime.dwHighDateTime=0x1d4d5b5, nFileSizeHigh=0x0, nFileSizeLow=0xf6e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CxmsUH1E1Go.png", cAlternateFileName="CXMSUH~1.PNG")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5c93160, ftCreationTime.dwHighDateTime=0x1d4cf9f, ftLastAccessTime.dwLowDateTime=0x40154790, ftLastAccessTime.dwHighDateTime=0x1d4c8b1, ftLastWriteTime.dwLowDateTime=0x40154790, ftLastWriteTime.dwHighDateTime=0x1d4c8b1, nFileSizeHigh=0x0, nFileSizeLow=0x15309, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfxvS6m.flv", cAlternateFileName="")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97632b0, ftCreationTime.dwHighDateTime=0x1d4c943, ftLastAccessTime.dwLowDateTime=0xfdc09180, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0xfdc09180, ftLastWriteTime.dwHighDateTime=0x1d4c7b9, nFileSizeHigh=0x0, nFileSizeLow=0x1876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL5C.mp3", cAlternateFileName="")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8670b940, ftCreationTime.dwHighDateTime=0x1d4d563, ftLastAccessTime.dwLowDateTime=0x7f9bd810, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0x7f9bd810, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x187d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eIakVV.png", cAlternateFileName="")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe57800, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0xf8887d80, ftLastAccessTime.dwHighDateTime=0x1d4d115, ftLastWriteTime.dwLowDateTime=0xf8887d80, ftLastWriteTime.dwHighDateTime=0x1d4d115, nFileSizeHigh=0x0, nFileSizeLow=0x17efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="fh93AKAvtknamxDTPKd.mp4", cAlternateFileName="FH93AK~1.MP4")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b7c5880, ftCreationTime.dwHighDateTime=0x1d4d01f, ftLastAccessTime.dwLowDateTime=0xfa0aa530, ftLastAccessTime.dwHighDateTime=0x1d4d53d, ftLastWriteTime.dwLowDateTime=0xfa0aa530, ftLastWriteTime.dwHighDateTime=0x1d4d53d, nFileSizeHigh=0x0, nFileSizeLow=0xe9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQx AKHh2ppG_EGqk.mp3", cAlternateFileName="FQXAKH~1.MP3")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca775250, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0x5126fe00, ftLastAccessTime.dwHighDateTime=0x1d4ca3e, ftLastWriteTime.dwLowDateTime=0x5126fe00, ftLastWriteTime.dwHighDateTime=0x1d4ca3e, nFileSizeHigh=0x0, nFileSizeLow=0x991, dwReserved0=0x0, dwReserved1=0x0, cFileName="fR BgKrKddnOz -dLax.png", cAlternateFileName="FRBGKR~1.PNG")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c830f80, ftCreationTime.dwHighDateTime=0x1d4c76c, ftLastAccessTime.dwLowDateTime=0xf3d72760, ftLastAccessTime.dwHighDateTime=0x1d4d1fa, ftLastWriteTime.dwLowDateTime=0xf3d72760, ftLastWriteTime.dwHighDateTime=0x1d4d1fa, nFileSizeHigh=0x0, nFileSizeLow=0x716e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxi1tJu.gif", cAlternateFileName="")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e205a0, ftCreationTime.dwHighDateTime=0x1d4c6cb, ftLastAccessTime.dwLowDateTime=0x8e4d5bd0, ftLastAccessTime.dwHighDateTime=0x1d4cbc4, ftLastWriteTime.dwLowDateTime=0x8e4d5bd0, ftLastWriteTime.dwHighDateTime=0x1d4cbc4, nFileSizeHigh=0x0, nFileSizeLow=0xe9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GCA1 VpB5EYW.wav", cAlternateFileName="GCA1VP~1.WAV")) returned 1 [0263.372] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb57402b0, ftCreationTime.dwHighDateTime=0x1d4cd25, ftLastAccessTime.dwLowDateTime=0x79600e30, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0x79600e30, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x94f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gr za3ZENMQO.m4a", cAlternateFileName="GRZA3Z~1.M4A")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce0de830, ftCreationTime.dwHighDateTime=0x1d4ced9, ftLastAccessTime.dwLowDateTime=0x84506ab0, ftLastAccessTime.dwHighDateTime=0x1d4cea7, ftLastWriteTime.dwLowDateTime=0x84506ab0, ftLastWriteTime.dwHighDateTime=0x1d4cea7, nFileSizeHigh=0x0, nFileSizeLow=0xabd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GuF2Ij8USTttawc8H.flv", cAlternateFileName="GUF2IJ~1.FLV")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93fb53f0, ftCreationTime.dwHighDateTime=0x1d4c559, ftLastAccessTime.dwLowDateTime=0x3a6e37d0, ftLastAccessTime.dwHighDateTime=0x1d4c559, ftLastWriteTime.dwLowDateTime=0x3a6e37d0, ftLastWriteTime.dwHighDateTime=0x1d4c559, nFileSizeHigh=0x0, nFileSizeLow=0x69c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gV9VrERnONVVTdx.ods", cAlternateFileName="GV9VRE~1.ODS")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa50923e0, ftCreationTime.dwHighDateTime=0x1d4c985, ftLastAccessTime.dwLowDateTime=0xcf1fec70, ftLastAccessTime.dwHighDateTime=0x1d4c56d, ftLastWriteTime.dwLowDateTime=0xcf1fec70, ftLastWriteTime.dwHighDateTime=0x1d4c56d, nFileSizeHigh=0x0, nFileSizeLow=0x72bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho01.ppt", cAlternateFileName="")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x352610c0, ftCreationTime.dwHighDateTime=0x1d4d082, ftLastAccessTime.dwLowDateTime=0x7f660140, ftLastAccessTime.dwHighDateTime=0x1d4cede, ftLastWriteTime.dwLowDateTime=0x7f660140, ftLastWriteTime.dwHighDateTime=0x1d4cede, nFileSizeHigh=0x0, nFileSizeLow=0x14c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hrm0mMg5uP.avi", cAlternateFileName="HRM0MM~1.AVI")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbbe31c0, ftCreationTime.dwHighDateTime=0x1d4d241, ftLastAccessTime.dwLowDateTime=0x7f565e60, ftLastAccessTime.dwHighDateTime=0x1d4c98f, ftLastWriteTime.dwLowDateTime=0x7f565e60, ftLastWriteTime.dwHighDateTime=0x1d4c98f, nFileSizeHigh=0x0, nFileSizeLow=0x13331, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixUidvhEF3aEzhva.flv", cAlternateFileName="IXUIDV~1.FLV")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc14cd230, ftCreationTime.dwHighDateTime=0x1d4ca62, ftLastAccessTime.dwLowDateTime=0x749d3310, ftLastAccessTime.dwHighDateTime=0x1d4ca0a, ftLastWriteTime.dwLowDateTime=0x749d3310, ftLastWriteTime.dwHighDateTime=0x1d4ca0a, nFileSizeHigh=0x0, nFileSizeLow=0x146ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="nxUD.rtf", cAlternateFileName="")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70ef21f0, ftCreationTime.dwHighDateTime=0x1d4ccf9, ftLastAccessTime.dwLowDateTime=0x23508a20, ftLastAccessTime.dwHighDateTime=0x1d4d450, ftLastWriteTime.dwLowDateTime=0x23508a20, ftLastWriteTime.dwHighDateTime=0x1d4d450, nFileSizeHigh=0x0, nFileSizeLow=0x182ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORlSdZnZKYxg0-.avi", cAlternateFileName="ORLSDZ~1.AVI")) returned 1 [0263.373] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca4b630, ftCreationTime.dwHighDateTime=0x1d4d071, ftLastAccessTime.dwLowDateTime=0x8eefca80, ftLastAccessTime.dwHighDateTime=0x1d4c89c, ftLastWriteTime.dwLowDateTime=0x8eefca80, ftLastWriteTime.dwHighDateTime=0x1d4c89c, nFileSizeHigh=0x0, nFileSizeLow=0x22a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="pBwAn_.jpg", cAlternateFileName="")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f030b20, ftCreationTime.dwHighDateTime=0x1d4ca9c, ftLastAccessTime.dwLowDateTime=0x82ff4e30, ftLastAccessTime.dwHighDateTime=0x1d4d20b, ftLastWriteTime.dwLowDateTime=0x82ff4e30, ftLastWriteTime.dwHighDateTime=0x1d4d20b, nFileSizeHigh=0x0, nFileSizeLow=0x1893b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pO5HwsELaC.odt", cAlternateFileName="PO5HWS~1.ODT")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f80b6a0, ftCreationTime.dwHighDateTime=0x1d4d02e, ftLastAccessTime.dwLowDateTime=0x1e031e60, ftLastAccessTime.dwHighDateTime=0x1d4cc5e, ftLastWriteTime.dwLowDateTime=0x1e031e60, ftLastWriteTime.dwHighDateTime=0x1d4cc5e, nFileSizeHigh=0x0, nFileSizeLow=0x986c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PZ7 uW2.gif", cAlternateFileName="PZ7UW2~1.GIF")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44e3bd50, ftCreationTime.dwHighDateTime=0x1d4d32a, ftLastAccessTime.dwLowDateTime=0x763cba20, ftLastAccessTime.dwHighDateTime=0x1d4d4fe, ftLastWriteTime.dwLowDateTime=0x763cba20, ftLastWriteTime.dwHighDateTime=0x1d4d4fe, nFileSizeHigh=0x0, nFileSizeLow=0xfa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJH9.mp4", cAlternateFileName="")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b42d4e0, ftCreationTime.dwHighDateTime=0x1d4d333, ftLastAccessTime.dwLowDateTime=0x8c9b7b90, ftLastAccessTime.dwHighDateTime=0x1d4c99f, ftLastWriteTime.dwLowDateTime=0x8c9b7b90, ftLastWriteTime.dwHighDateTime=0x1d4c99f, nFileSizeHigh=0x0, nFileSizeLow=0xd05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="QPz uHR1rJV2CyscOXX.wav", cAlternateFileName="QPZUHR~1.WAV")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be75070, ftCreationTime.dwHighDateTime=0x1d4c712, ftLastAccessTime.dwLowDateTime=0x817f54a0, ftLastAccessTime.dwHighDateTime=0x1d4ca5a, ftLastWriteTime.dwLowDateTime=0x817f54a0, ftLastWriteTime.dwHighDateTime=0x1d4ca5a, nFileSizeHigh=0x0, nFileSizeLow=0xb885, dwReserved0=0x0, dwReserved1=0x0, cFileName="tlfehOifvYw.png", cAlternateFileName="TLFEHO~1.PNG")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c3382a0, ftCreationTime.dwHighDateTime=0x1d4c985, ftLastAccessTime.dwLowDateTime=0xf202e230, ftLastAccessTime.dwHighDateTime=0x1d4cc8c, ftLastWriteTime.dwLowDateTime=0xf202e230, ftLastWriteTime.dwHighDateTime=0x1d4cc8c, nFileSizeHigh=0x0, nFileSizeLow=0x1395d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tN1wsQiA7.ods", cAlternateFileName="TN1WSQ~1.ODS")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4da951d0, ftCreationTime.dwHighDateTime=0x1d4c8f2, ftLastAccessTime.dwLowDateTime=0x22e0fbe0, ftLastAccessTime.dwHighDateTime=0x1d4cf20, ftLastWriteTime.dwLowDateTime=0x22e0fbe0, ftLastWriteTime.dwHighDateTime=0x1d4cf20, nFileSizeHigh=0x0, nFileSizeLow=0xb5b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tOE8ohmaoulkDp4i7.jpg", cAlternateFileName="TOE8OH~1.JPG")) returned 1 [0263.374] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2f44380, ftCreationTime.dwHighDateTime=0x1d4d53f, ftLastAccessTime.dwLowDateTime=0x82c06600, ftLastAccessTime.dwHighDateTime=0x1d4d2f3, ftLastWriteTime.dwLowDateTime=0x82c06600, ftLastWriteTime.dwHighDateTime=0x1d4d2f3, nFileSizeHigh=0x0, nFileSizeLow=0x1261c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WcLw6FKM1OdaBtmcI1_.png", cAlternateFileName="WCLW6F~1.PNG")) returned 1 [0263.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13d07c60, ftCreationTime.dwHighDateTime=0x1d4cff3, ftLastAccessTime.dwLowDateTime=0x8ca5b110, ftLastAccessTime.dwHighDateTime=0x1d4cfbb, ftLastWriteTime.dwLowDateTime=0x8ca5b110, ftLastWriteTime.dwHighDateTime=0x1d4cfbb, nFileSizeHigh=0x0, nFileSizeLow=0x88c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSQrVXlZQyjm.mkv", cAlternateFileName="WMSQRV~1.MKV")) returned 1 [0263.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x874c95a0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x874c95a0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0263.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d5635c0, ftCreationTime.dwHighDateTime=0x1d4cd45, ftLastAccessTime.dwLowDateTime=0x30a13120, ftLastAccessTime.dwHighDateTime=0x1d4ca7d, ftLastWriteTime.dwLowDateTime=0x30a13120, ftLastWriteTime.dwHighDateTime=0x1d4ca7d, nFileSizeHigh=0x0, nFileSizeLow=0x76c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="XZPvY34fVutV3dpKU.m4a", cAlternateFileName="XZPVY3~1.M4A")) returned 1 [0263.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4a0cc40, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x310bc0a0, ftLastAccessTime.dwHighDateTime=0x1d4d2be, ftLastWriteTime.dwLowDateTime=0x310bc0a0, ftLastWriteTime.dwHighDateTime=0x1d4d2be, nFileSizeHigh=0x0, nFileSizeLow=0x116e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZSccbHFeETyoj.bmp", cAlternateFileName="ZSCCBH~1.BMP")) returned 1 [0263.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d4c7e80, ftCreationTime.dwHighDateTime=0x1d4d089, ftLastAccessTime.dwLowDateTime=0x85259420, ftLastAccessTime.dwHighDateTime=0x1d4c5d7, ftLastWriteTime.dwLowDateTime=0x85259420, ftLastWriteTime.dwHighDateTime=0x1d4c5d7, nFileSizeHigh=0x0, nFileSizeLow=0x17ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="_woKgpCv6Zk.swf", cAlternateFileName="_WOKGP~1.SWF")) returned 1 [0263.375] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d4c7e80, ftCreationTime.dwHighDateTime=0x1d4d089, ftLastAccessTime.dwLowDateTime=0x85259420, ftLastAccessTime.dwHighDateTime=0x1d4c5d7, ftLastWriteTime.dwLowDateTime=0x85259420, ftLastWriteTime.dwHighDateTime=0x1d4c5d7, nFileSizeHigh=0x0, nFileSizeLow=0x17ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="_woKgpCv6Zk.swf", cAlternateFileName="_WOKGP~1.SWF")) returned 0 [0263.375] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0263.375] SetErrorMode (uMode=0x0) returned 0x1 [0263.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x27e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0263.376] SetErrorMode (uMode=0x1) returned 0x0 [0263.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x27e4b0 | out: lpFindFileData=0x27e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0d752f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe0d752f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd2ad0 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0d752f0, ftLastAccessTime.dwHighDateTime=0x1d533c7, ftLastWriteTime.dwLowDateTime=0xe0d752f0, ftLastWriteTime.dwHighDateTime=0x1d533c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cb3a920, ftCreationTime.dwHighDateTime=0x1d4cc11, ftLastAccessTime.dwLowDateTime=0x7930c500, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0x7930c500, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0x2b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="16rSoPuZ1qv-.swf", cAlternateFileName="16RSOP~1.SWF")) returned 1 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8b6ae80, ftCreationTime.dwHighDateTime=0x1d4c8db, ftLastAccessTime.dwLowDateTime=0x87672ce0, ftLastAccessTime.dwHighDateTime=0x1d4c7de, ftLastWriteTime.dwLowDateTime=0x87672ce0, ftLastWriteTime.dwHighDateTime=0x1d4c7de, nFileSizeHigh=0x0, nFileSizeLow=0x14555, dwReserved0=0x0, dwReserved1=0x0, cFileName="2aa-Boe9Sxh.swf", cAlternateFileName="2AA-BO~1.SWF")) returned 1 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x191bf8c0, ftCreationTime.dwHighDateTime=0x1d4d205, ftLastAccessTime.dwLowDateTime=0x380bdf80, ftLastAccessTime.dwHighDateTime=0x1d4d54c, ftLastWriteTime.dwLowDateTime=0x380bdf80, ftLastWriteTime.dwHighDateTime=0x1d4d54c, nFileSizeHigh=0x0, nFileSizeLow=0x10030, dwReserved0=0x0, dwReserved1=0x0, cFileName="6XcCSOAuN2uqc.doc", cAlternateFileName="6XCCSO~1.DOC")) returned 1 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x842e0fc0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54dc9650, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xefa5f940, ftLastAccessTime.dwHighDateTime=0x1d4cf67, ftLastWriteTime.dwLowDateTime=0xefa5f940, ftLastWriteTime.dwHighDateTime=0x1d4cf67, nFileSizeHigh=0x0, nFileSizeLow=0x7059, dwReserved0=0x0, dwReserved1=0x0, cFileName="caBGnSXYC.m4a", cAlternateFileName="CABGNS~1.M4A")) returned 1 [0263.376] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x385dce10, ftCreationTime.dwHighDateTime=0x1d4ce0f, ftLastAccessTime.dwLowDateTime=0xb3620790, ftLastAccessTime.dwHighDateTime=0x1d4d5b5, ftLastWriteTime.dwLowDateTime=0xb3620790, ftLastWriteTime.dwHighDateTime=0x1d4d5b5, nFileSizeHigh=0x0, nFileSizeLow=0xf6e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CxmsUH1E1Go.png", cAlternateFileName="CXMSUH~1.PNG")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5c93160, ftCreationTime.dwHighDateTime=0x1d4cf9f, ftLastAccessTime.dwLowDateTime=0x40154790, ftLastAccessTime.dwHighDateTime=0x1d4c8b1, ftLastWriteTime.dwLowDateTime=0x40154790, ftLastWriteTime.dwHighDateTime=0x1d4c8b1, nFileSizeHigh=0x0, nFileSizeLow=0x15309, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfxvS6m.flv", cAlternateFileName="")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97632b0, ftCreationTime.dwHighDateTime=0x1d4c943, ftLastAccessTime.dwLowDateTime=0xfdc09180, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0xfdc09180, ftLastWriteTime.dwHighDateTime=0x1d4c7b9, nFileSizeHigh=0x0, nFileSizeLow=0x1876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL5C.mp3", cAlternateFileName="")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8670b940, ftCreationTime.dwHighDateTime=0x1d4d563, ftLastAccessTime.dwLowDateTime=0x7f9bd810, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0x7f9bd810, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x187d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eIakVV.png", cAlternateFileName="")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe57800, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0xf8887d80, ftLastAccessTime.dwHighDateTime=0x1d4d115, ftLastWriteTime.dwLowDateTime=0xf8887d80, ftLastWriteTime.dwHighDateTime=0x1d4d115, nFileSizeHigh=0x0, nFileSizeLow=0x17efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="fh93AKAvtknamxDTPKd.mp4", cAlternateFileName="FH93AK~1.MP4")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b7c5880, ftCreationTime.dwHighDateTime=0x1d4d01f, ftLastAccessTime.dwLowDateTime=0xfa0aa530, ftLastAccessTime.dwHighDateTime=0x1d4d53d, ftLastWriteTime.dwLowDateTime=0xfa0aa530, ftLastWriteTime.dwHighDateTime=0x1d4d53d, nFileSizeHigh=0x0, nFileSizeLow=0xe9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQx AKHh2ppG_EGqk.mp3", cAlternateFileName="FQXAKH~1.MP3")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca775250, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0x5126fe00, ftLastAccessTime.dwHighDateTime=0x1d4ca3e, ftLastWriteTime.dwLowDateTime=0x5126fe00, ftLastWriteTime.dwHighDateTime=0x1d4ca3e, nFileSizeHigh=0x0, nFileSizeLow=0x991, dwReserved0=0x0, dwReserved1=0x0, cFileName="fR BgKrKddnOz -dLax.png", cAlternateFileName="FRBGKR~1.PNG")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c830f80, ftCreationTime.dwHighDateTime=0x1d4c76c, ftLastAccessTime.dwLowDateTime=0xf3d72760, ftLastAccessTime.dwHighDateTime=0x1d4d1fa, ftLastWriteTime.dwLowDateTime=0xf3d72760, ftLastWriteTime.dwHighDateTime=0x1d4d1fa, nFileSizeHigh=0x0, nFileSizeLow=0x716e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxi1tJu.gif", cAlternateFileName="")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0263.377] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e205a0, ftCreationTime.dwHighDateTime=0x1d4c6cb, ftLastAccessTime.dwLowDateTime=0x8e4d5bd0, ftLastAccessTime.dwHighDateTime=0x1d4cbc4, ftLastWriteTime.dwLowDateTime=0x8e4d5bd0, ftLastWriteTime.dwHighDateTime=0x1d4cbc4, nFileSizeHigh=0x0, nFileSizeLow=0xe9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GCA1 VpB5EYW.wav", cAlternateFileName="GCA1VP~1.WAV")) returned 1 [0263.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb57402b0, ftCreationTime.dwHighDateTime=0x1d4cd25, ftLastAccessTime.dwLowDateTime=0x79600e30, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0x79600e30, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x94f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gr za3ZENMQO.m4a", cAlternateFileName="GRZA3Z~1.M4A")) returned 1 [0263.378] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce0de830, ftCreationTime.dwHighDateTime=0x1d4ced9, ftLastAccessTime.dwLowDateTime=0x84506ab0, ftLastAccessTime.dwHighDateTime=0x1d4cea7, ftLastWriteTime.dwLowDateTime=0x84506ab0, ftLastWriteTime.dwHighDateTime=0x1d4cea7, nFileSizeHigh=0x0, nFileSizeLow=0xabd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GuF2Ij8USTttawc8H.flv", cAlternateFileName="GUF2IJ~1.FLV")) returned 1 [0263.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93fb53f0, ftCreationTime.dwHighDateTime=0x1d4c559, ftLastAccessTime.dwLowDateTime=0x3a6e37d0, ftLastAccessTime.dwHighDateTime=0x1d4c559, ftLastWriteTime.dwLowDateTime=0x3a6e37d0, ftLastWriteTime.dwHighDateTime=0x1d4c559, nFileSizeHigh=0x0, nFileSizeLow=0x69c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gV9VrERnONVVTdx.ods", cAlternateFileName="GV9VRE~1.ODS")) returned 1 [0263.379] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0263.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa50923e0, ftCreationTime.dwHighDateTime=0x1d4c985, ftLastAccessTime.dwLowDateTime=0xcf1fec70, ftLastAccessTime.dwHighDateTime=0x1d4c56d, ftLastWriteTime.dwLowDateTime=0xcf1fec70, ftLastWriteTime.dwHighDateTime=0x1d4c56d, nFileSizeHigh=0x0, nFileSizeLow=0x72bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho01.ppt", cAlternateFileName="")) returned 1 [0263.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x352610c0, ftCreationTime.dwHighDateTime=0x1d4d082, ftLastAccessTime.dwLowDateTime=0x7f660140, ftLastAccessTime.dwHighDateTime=0x1d4cede, ftLastWriteTime.dwLowDateTime=0x7f660140, ftLastWriteTime.dwHighDateTime=0x1d4cede, nFileSizeHigh=0x0, nFileSizeLow=0x14c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hrm0mMg5uP.avi", cAlternateFileName="HRM0MM~1.AVI")) returned 1 [0263.380] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbbe31c0, ftCreationTime.dwHighDateTime=0x1d4d241, ftLastAccessTime.dwLowDateTime=0x7f565e60, ftLastAccessTime.dwHighDateTime=0x1d4c98f, ftLastWriteTime.dwLowDateTime=0x7f565e60, ftLastWriteTime.dwHighDateTime=0x1d4c98f, nFileSizeHigh=0x0, nFileSizeLow=0x13331, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixUidvhEF3aEzhva.flv", cAlternateFileName="IXUIDV~1.FLV")) returned 1 [0263.381] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc14cd230, ftCreationTime.dwHighDateTime=0x1d4ca62, ftLastAccessTime.dwLowDateTime=0x749d3310, ftLastAccessTime.dwHighDateTime=0x1d4ca0a, ftLastWriteTime.dwLowDateTime=0x749d3310, ftLastWriteTime.dwHighDateTime=0x1d4ca0a, nFileSizeHigh=0x0, nFileSizeLow=0x146ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="nxUD.rtf", cAlternateFileName="")) returned 1 [0263.381] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70ef21f0, ftCreationTime.dwHighDateTime=0x1d4ccf9, ftLastAccessTime.dwLowDateTime=0x23508a20, ftLastAccessTime.dwHighDateTime=0x1d4d450, ftLastWriteTime.dwLowDateTime=0x23508a20, ftLastWriteTime.dwHighDateTime=0x1d4d450, nFileSizeHigh=0x0, nFileSizeLow=0x182ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORlSdZnZKYxg0-.avi", cAlternateFileName="ORLSDZ~1.AVI")) returned 1 [0263.382] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca4b630, ftCreationTime.dwHighDateTime=0x1d4d071, ftLastAccessTime.dwLowDateTime=0x8eefca80, ftLastAccessTime.dwHighDateTime=0x1d4c89c, ftLastWriteTime.dwLowDateTime=0x8eefca80, ftLastWriteTime.dwHighDateTime=0x1d4c89c, nFileSizeHigh=0x0, nFileSizeLow=0x22a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="pBwAn_.jpg", cAlternateFileName="")) returned 1 [0263.382] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f030b20, ftCreationTime.dwHighDateTime=0x1d4ca9c, ftLastAccessTime.dwLowDateTime=0x82ff4e30, ftLastAccessTime.dwHighDateTime=0x1d4d20b, ftLastWriteTime.dwLowDateTime=0x82ff4e30, ftLastWriteTime.dwHighDateTime=0x1d4d20b, nFileSizeHigh=0x0, nFileSizeLow=0x1893b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pO5HwsELaC.odt", cAlternateFileName="PO5HWS~1.ODT")) returned 1 [0263.382] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f80b6a0, ftCreationTime.dwHighDateTime=0x1d4d02e, ftLastAccessTime.dwLowDateTime=0x1e031e60, ftLastAccessTime.dwHighDateTime=0x1d4cc5e, ftLastWriteTime.dwLowDateTime=0x1e031e60, ftLastWriteTime.dwHighDateTime=0x1d4cc5e, nFileSizeHigh=0x0, nFileSizeLow=0x986c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PZ7 uW2.gif", cAlternateFileName="PZ7UW2~1.GIF")) returned 1 [0263.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44e3bd50, ftCreationTime.dwHighDateTime=0x1d4d32a, ftLastAccessTime.dwLowDateTime=0x763cba20, ftLastAccessTime.dwHighDateTime=0x1d4d4fe, ftLastWriteTime.dwLowDateTime=0x763cba20, ftLastWriteTime.dwHighDateTime=0x1d4d4fe, nFileSizeHigh=0x0, nFileSizeLow=0xfa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJH9.mp4", cAlternateFileName="")) returned 1 [0263.383] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b42d4e0, ftCreationTime.dwHighDateTime=0x1d4d333, ftLastAccessTime.dwLowDateTime=0x8c9b7b90, ftLastAccessTime.dwHighDateTime=0x1d4c99f, ftLastWriteTime.dwLowDateTime=0x8c9b7b90, ftLastWriteTime.dwHighDateTime=0x1d4c99f, nFileSizeHigh=0x0, nFileSizeLow=0xd05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="QPz uHR1rJV2CyscOXX.wav", cAlternateFileName="QPZUHR~1.WAV")) returned 1 [0263.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0263.384] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be75070, ftCreationTime.dwHighDateTime=0x1d4c712, ftLastAccessTime.dwLowDateTime=0x817f54a0, ftLastAccessTime.dwHighDateTime=0x1d4ca5a, ftLastWriteTime.dwLowDateTime=0x817f54a0, ftLastWriteTime.dwHighDateTime=0x1d4ca5a, nFileSizeHigh=0x0, nFileSizeLow=0xb885, dwReserved0=0x0, dwReserved1=0x0, cFileName="tlfehOifvYw.png", cAlternateFileName="TLFEHO~1.PNG")) returned 1 [0263.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c3382a0, ftCreationTime.dwHighDateTime=0x1d4c985, ftLastAccessTime.dwLowDateTime=0xf202e230, ftLastAccessTime.dwHighDateTime=0x1d4cc8c, ftLastWriteTime.dwLowDateTime=0xf202e230, ftLastWriteTime.dwHighDateTime=0x1d4cc8c, nFileSizeHigh=0x0, nFileSizeLow=0x1395d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tN1wsQiA7.ods", cAlternateFileName="TN1WSQ~1.ODS")) returned 1 [0263.385] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4da951d0, ftCreationTime.dwHighDateTime=0x1d4c8f2, ftLastAccessTime.dwLowDateTime=0x22e0fbe0, ftLastAccessTime.dwHighDateTime=0x1d4cf20, ftLastWriteTime.dwLowDateTime=0x22e0fbe0, ftLastWriteTime.dwHighDateTime=0x1d4cf20, nFileSizeHigh=0x0, nFileSizeLow=0xb5b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tOE8ohmaoulkDp4i7.jpg", cAlternateFileName="TOE8OH~1.JPG")) returned 1 [0263.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2f44380, ftCreationTime.dwHighDateTime=0x1d4d53f, ftLastAccessTime.dwLowDateTime=0x82c06600, ftLastAccessTime.dwHighDateTime=0x1d4d2f3, ftLastWriteTime.dwLowDateTime=0x82c06600, ftLastWriteTime.dwHighDateTime=0x1d4d2f3, nFileSizeHigh=0x0, nFileSizeLow=0x1261c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WcLw6FKM1OdaBtmcI1_.png", cAlternateFileName="WCLW6F~1.PNG")) returned 1 [0263.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13d07c60, ftCreationTime.dwHighDateTime=0x1d4cff3, ftLastAccessTime.dwLowDateTime=0x8ca5b110, ftLastAccessTime.dwHighDateTime=0x1d4cfbb, ftLastWriteTime.dwLowDateTime=0x8ca5b110, ftLastWriteTime.dwHighDateTime=0x1d4cfbb, nFileSizeHigh=0x0, nFileSizeLow=0x88c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSQrVXlZQyjm.mkv", cAlternateFileName="WMSQRV~1.MKV")) returned 1 [0263.386] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x874c95a0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x874c95a0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0263.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d5635c0, ftCreationTime.dwHighDateTime=0x1d4cd45, ftLastAccessTime.dwLowDateTime=0x30a13120, ftLastAccessTime.dwHighDateTime=0x1d4ca7d, ftLastWriteTime.dwLowDateTime=0x30a13120, ftLastWriteTime.dwHighDateTime=0x1d4ca7d, nFileSizeHigh=0x0, nFileSizeLow=0x76c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="XZPvY34fVutV3dpKU.m4a", cAlternateFileName="XZPVY3~1.M4A")) returned 1 [0263.387] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4a0cc40, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x310bc0a0, ftLastAccessTime.dwHighDateTime=0x1d4d2be, ftLastWriteTime.dwLowDateTime=0x310bc0a0, ftLastWriteTime.dwHighDateTime=0x1d4d2be, nFileSizeHigh=0x0, nFileSizeLow=0x116e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZSccbHFeETyoj.bmp", cAlternateFileName="ZSCCBH~1.BMP")) returned 1 [0263.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d4c7e80, ftCreationTime.dwHighDateTime=0x1d4d089, ftLastAccessTime.dwLowDateTime=0x85259420, ftLastAccessTime.dwHighDateTime=0x1d4c5d7, ftLastWriteTime.dwLowDateTime=0x85259420, ftLastWriteTime.dwHighDateTime=0x1d4c5d7, nFileSizeHigh=0x0, nFileSizeLow=0x17ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="_woKgpCv6Zk.swf", cAlternateFileName="_WOKGP~1.SWF")) returned 1 [0263.388] FindNextFileW (in: hFindFile=0xd2ad0, lpFindFileData=0x27e4c0 | out: lpFindFileData=0x27e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d4c7e80, ftCreationTime.dwHighDateTime=0x1d4d089, ftLastAccessTime.dwLowDateTime=0x85259420, ftLastAccessTime.dwHighDateTime=0x1d4c5d7, ftLastWriteTime.dwLowDateTime=0x85259420, ftLastWriteTime.dwHighDateTime=0x1d4c5d7, nFileSizeHigh=0x0, nFileSizeLow=0x17ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="_woKgpCv6Zk.swf", cAlternateFileName="_WOKGP~1.SWF")) returned 0 [0263.389] FindClose (in: hFindFile=0xd2ad0 | out: hFindFile=0xd2ad0) returned 1 [0263.389] SetErrorMode (uMode=0x0) returned 0x1 [0263.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.389] SetErrorMode (uMode=0x1) returned 0x0 [0263.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\16rsopuz1qv-.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0263.390] GetFileType (hFile=0x18c) returned 0x1 [0263.390] SetErrorMode (uMode=0x0) returned 0x1 [0263.390] GetFileType (hFile=0x18c) returned 0x1 [0263.390] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2b96 [0263.390] ReadFile (in: hFile=0x18c, lpBuffer=0x284d428, nNumberOfBytesToRead=0x2b96, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x284d428*, lpNumberOfBytesRead=0x27e6e8*=0x2b96, lpOverlapped=0x0) returned 1 [0263.391] CloseHandle (hObject=0x18c) returned 1 [0263.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.393] SetErrorMode (uMode=0x1) returned 0x0 [0263.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\16rsopuz1qv-.swf"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cb3a920, ftCreationTime.dwHighDateTime=0x1d4cc11, ftLastAccessTime.dwLowDateTime=0x7930c500, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0x7930c500, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0x2b96)) returned 1 [0263.393] SetErrorMode (uMode=0x0) returned 0x1 [0263.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.592] SetErrorMode (uMode=0x1) returned 0x0 [0263.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\16rsopuz1qv-.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0263.593] GetFileType (hFile=0x18c) returned 0x1 [0263.593] SetErrorMode (uMode=0x0) returned 0x1 [0263.593] GetFileType (hFile=0x18c) returned 0x1 [0263.593] WriteFile (in: hFile=0x18c, lpBuffer=0x28bbd38*, nNumberOfBytesToWrite=0x2ca0, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x28bbd38*, lpNumberOfBytesWritten=0x27e768*=0x2ca0, lpOverlapped=0x0) returned 1 [0263.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\SVcWJ*bJ*s9i7EiU_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\SVcWJ*bJ*s9i7EiU_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0263.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf", lpFilePart=0x0) returned 0x41 [0263.603] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\16rSoPuZ1qv-.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\16rsopuz1qv-.swf")) returned 1 [0263.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.605] SetErrorMode (uMode=0x1) returned 0x0 [0263.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2aa-boe9sxh.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0263.605] GetFileType (hFile=0x18c) returned 0x1 [0263.605] SetErrorMode (uMode=0x0) returned 0x1 [0263.605] GetFileType (hFile=0x18c) returned 0x1 [0263.605] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x14555 [0263.606] ReadFile (in: hFile=0x18c, lpBuffer=0x28c06d8, nNumberOfBytesToRead=0x14555, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c06d8*, lpNumberOfBytesRead=0x27e6e8*=0x14555, lpOverlapped=0x0) returned 1 [0263.607] CloseHandle (hObject=0x18c) returned 1 [0263.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.608] SetErrorMode (uMode=0x1) returned 0x0 [0263.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2aa-boe9sxh.swf"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8b6ae80, ftCreationTime.dwHighDateTime=0x1d4c8db, ftLastAccessTime.dwLowDateTime=0x87672ce0, ftLastAccessTime.dwHighDateTime=0x1d4c7de, ftLastWriteTime.dwLowDateTime=0x87672ce0, ftLastWriteTime.dwHighDateTime=0x1d4c7de, nFileSizeHigh=0x0, nFileSizeLow=0x14555)) returned 1 [0263.608] SetErrorMode (uMode=0x0) returned 0x1 [0263.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.793] SetErrorMode (uMode=0x1) returned 0x0 [0263.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2aa-boe9sxh.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0263.797] GetFileType (hFile=0x18c) returned 0x1 [0263.797] SetErrorMode (uMode=0x0) returned 0x1 [0263.797] GetFileType (hFile=0x18c) returned 0x1 [0263.797] WriteFile (in: hFile=0x18c, lpBuffer=0x277e5b0*, nNumberOfBytesToWrite=0x14660, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x277e5b0*, lpNumberOfBytesWritten=0x27e768*=0x14660, lpOverlapped=0x0) returned 1 [0263.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LTAs*FS79QJuY5T4_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LTAs*FS79QJuY5T4_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0263.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf", lpFilePart=0x0) returned 0x40 [0263.808] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2aa-Boe9Sxh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2aa-boe9sxh.swf")) returned 1 [0263.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", lpFilePart=0x0) returned 0x42 [0263.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", lpFilePart=0x0) returned 0x42 [0263.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", lpFilePart=0x0) returned 0x42 [0263.811] SetErrorMode (uMode=0x1) returned 0x0 [0263.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6xccsoaun2uqc.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0263.811] GetFileType (hFile=0x18c) returned 0x1 [0263.811] SetErrorMode (uMode=0x0) returned 0x1 [0263.812] GetFileType (hFile=0x18c) returned 0x1 [0263.812] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x10030 [0263.812] ReadFile (in: hFile=0x18c, lpBuffer=0x2794920, nNumberOfBytesToRead=0x10030, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2794920*, lpNumberOfBytesRead=0x27e6e8*=0x10030, lpOverlapped=0x0) returned 1 [0263.813] CloseHandle (hObject=0x18c) returned 1 [0263.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", lpFilePart=0x0) returned 0x42 [0263.814] SetErrorMode (uMode=0x1) returned 0x0 [0263.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6xccsoaun2uqc.doc"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x191bf8c0, ftCreationTime.dwHighDateTime=0x1d4d205, ftLastAccessTime.dwLowDateTime=0x380bdf80, ftLastAccessTime.dwHighDateTime=0x1d4d54c, ftLastWriteTime.dwLowDateTime=0x380bdf80, ftLastWriteTime.dwHighDateTime=0x1d4d54c, nFileSizeHigh=0x0, nFileSizeLow=0x10030)) returned 1 [0263.814] SetErrorMode (uMode=0x0) returned 0x1 [0263.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", lpFilePart=0x0) returned 0x42 [0263.927] SetErrorMode (uMode=0x1) returned 0x0 [0263.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6xccsoaun2uqc.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0263.929] GetFileType (hFile=0x18c) returned 0x1 [0263.929] SetErrorMode (uMode=0x0) returned 0x1 [0263.929] GetFileType (hFile=0x18c) returned 0x1 [0263.929] WriteFile (in: hFile=0x18c, lpBuffer=0x282b310*, nNumberOfBytesToWrite=0x10140, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x282b310*, lpNumberOfBytesWritten=0x27e768*=0x10140, lpOverlapped=0x0) returned 1 [0263.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc", lpFilePart=0x0) returned 0x42 [0263.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OrtNO6PWfHhZwFZP_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OrtNO6PWfHhZwFZP_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0263.932] SetErrorMode (uMode=0x1) returned 0x0 [0263.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6xccsoaun2uqc.doc"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x191bf8c0, ftCreationTime.dwHighDateTime=0x1d4d205, ftLastAccessTime.dwLowDateTime=0x380bdf80, ftLastAccessTime.dwHighDateTime=0x1d4d54c, ftLastWriteTime.dwLowDateTime=0x6de3b8f0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x10140)) returned 1 [0263.932] SetErrorMode (uMode=0x0) returned 0x1 [0263.933] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6XcCSOAuN2uqc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6xccsoaun2uqc.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OrtNO6PWfHhZwFZP_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ortno6pwfhhzwfzp_encrypted_by.whiterose")) returned 1 [0264.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", lpFilePart=0x0) returned 0x3d [0264.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", lpFilePart=0x0) returned 0x3d [0264.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", lpFilePart=0x0) returned 0x3d [0264.040] SetErrorMode (uMode=0x1) returned 0x0 [0264.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.040] GetFileType (hFile=0x18c) returned 0x1 [0264.040] SetErrorMode (uMode=0x0) returned 0x1 [0264.040] GetFileType (hFile=0x18c) returned 0x1 [0264.040] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x2fc [0264.040] ReadFile (in: hFile=0x18c, lpBuffer=0x283d028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x283d028*, lpNumberOfBytesRead=0x27e6e8*=0x2fc, lpOverlapped=0x0) returned 1 [0264.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", lpFilePart=0x0) returned 0x3d [0264.042] SetErrorMode (uMode=0x1) returned 0x0 [0264.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x842e0fc0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x2fc)) returned 1 [0264.042] SetErrorMode (uMode=0x0) returned 0x1 [0264.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", lpFilePart=0x0) returned 0x3d [0264.112] SetErrorMode (uMode=0x1) returned 0x0 [0264.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.113] GetFileType (hFile=0x18c) returned 0x1 [0264.113] SetErrorMode (uMode=0x0) returned 0x1 [0264.113] GetFileType (hFile=0x18c) returned 0x1 [0264.113] WriteFile (in: hFile=0x18c, lpBuffer=0x288a910*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x288a910*, lpNumberOfBytesWritten=0x27e688*=0x400, lpOverlapped=0x0) returned 1 [0264.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log", lpFilePart=0x0) returned 0x3d [0264.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\584KszFkb1GFnpMX_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\584KszFkb1GFnpMX_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0264.115] SetErrorMode (uMode=0x1) returned 0x0 [0264.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x6dfde810, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0264.115] SetErrorMode (uMode=0x0) returned 0x1 [0264.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\584KszFkb1GFnpMX_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\584kszfkb1gfnpmx_encrypted_by.whiterose")) returned 1 [0264.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\caBGnSXYC.m4a", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\caBGnSXYC.m4a", lpFilePart=0x0) returned 0x3e [0264.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\caBGnSXYC.m4a", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\caBGnSXYC.m4a", lpFilePart=0x0) returned 0x3e [0264.211] CoTaskMemAlloc (cb=0x20c) returned 0xffa70 [0264.211] GetSystemDirectoryW (in: lpBuffer=0xffa70, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0264.212] CoTaskMemFree (pv=0xffa70) [0264.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0264.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", lpFilePart=0x0) returned 0x40 [0264.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", lpFilePart=0x0) returned 0x40 [0264.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", lpFilePart=0x0) returned 0x40 [0264.212] SetErrorMode (uMode=0x1) returned 0x0 [0264.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cxmsuh1e1go.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.213] GetFileType (hFile=0x18c) returned 0x1 [0264.213] SetErrorMode (uMode=0x0) returned 0x1 [0264.213] GetFileType (hFile=0x18c) returned 0x1 [0264.213] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xf6e2 [0264.213] ReadFile (in: hFile=0x18c, lpBuffer=0x288d8f8, nNumberOfBytesToRead=0xf6e2, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x288d8f8*, lpNumberOfBytesRead=0x27e6e8*=0xf6e2, lpOverlapped=0x0) returned 1 [0264.215] CloseHandle (hObject=0x18c) returned 1 [0264.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", lpFilePart=0x0) returned 0x40 [0264.216] SetErrorMode (uMode=0x1) returned 0x0 [0264.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cxmsuh1e1go.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x385dce10, ftCreationTime.dwHighDateTime=0x1d4ce0f, ftLastAccessTime.dwLowDateTime=0xb3620790, ftLastAccessTime.dwHighDateTime=0x1d4d5b5, ftLastWriteTime.dwLowDateTime=0xb3620790, ftLastWriteTime.dwHighDateTime=0x1d4d5b5, nFileSizeHigh=0x0, nFileSizeLow=0xf6e2)) returned 1 [0264.217] SetErrorMode (uMode=0x0) returned 0x1 [0264.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", lpFilePart=0x0) returned 0x40 [0264.288] SetErrorMode (uMode=0x1) returned 0x0 [0264.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cxmsuh1e1go.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.290] GetFileType (hFile=0x18c) returned 0x1 [0264.290] SetErrorMode (uMode=0x0) returned 0x1 [0264.290] GetFileType (hFile=0x18c) returned 0x1 [0264.290] WriteFile (in: hFile=0x18c, lpBuffer=0x27407a8*, nNumberOfBytesToWrite=0xf7f0, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x27407a8*, lpNumberOfBytesWritten=0x27e768*=0xf7f0, lpOverlapped=0x0) returned 1 [0264.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png", lpFilePart=0x0) returned 0x40 [0264.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Vzgs8SJCtpoXCTan_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Vzgs8SJCtpoXCTan_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0264.292] SetErrorMode (uMode=0x1) returned 0x0 [0264.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cxmsuh1e1go.png"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x385dce10, ftCreationTime.dwHighDateTime=0x1d4ce0f, ftLastAccessTime.dwLowDateTime=0xb3620790, ftLastAccessTime.dwHighDateTime=0x1d4d5b5, ftLastWriteTime.dwLowDateTime=0x6e1a7890, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xf7f0)) returned 1 [0264.293] SetErrorMode (uMode=0x0) returned 0x1 [0264.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CxmsUH1E1Go.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cxmsuh1e1go.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Vzgs8SJCtpoXCTan_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vzgs8sjctpoxctan_encrypted_by.whiterose")) returned 1 [0264.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.399] SetErrorMode (uMode=0x1) returned 0x0 [0264.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dfxvs6m.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.399] GetFileType (hFile=0x18c) returned 0x1 [0264.399] SetErrorMode (uMode=0x0) returned 0x1 [0264.399] GetFileType (hFile=0x18c) returned 0x1 [0264.399] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x15309 [0264.401] ReadFile (in: hFile=0x18c, lpBuffer=0x129006e8, nNumberOfBytesToRead=0x15309, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x129006e8*, lpNumberOfBytesRead=0x27e6e8*=0x15309, lpOverlapped=0x0) returned 1 [0264.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.404] SetErrorMode (uMode=0x1) returned 0x0 [0264.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dfxvs6m.flv"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5c93160, ftCreationTime.dwHighDateTime=0x1d4cf9f, ftLastAccessTime.dwLowDateTime=0x40154790, ftLastAccessTime.dwHighDateTime=0x1d4c8b1, ftLastWriteTime.dwLowDateTime=0x40154790, ftLastWriteTime.dwHighDateTime=0x1d4c8b1, nFileSizeHigh=0x0, nFileSizeLow=0x15309)) returned 1 [0264.404] SetErrorMode (uMode=0x0) returned 0x1 [0264.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.494] SetErrorMode (uMode=0x1) returned 0x0 [0264.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dfxvs6m.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.496] GetFileType (hFile=0x18c) returned 0x1 [0264.496] SetErrorMode (uMode=0x0) returned 0x1 [0264.496] GetFileType (hFile=0x18c) returned 0x1 [0264.496] WriteFile (in: hFile=0x18c, lpBuffer=0x1297fef8*, nNumberOfBytesToWrite=0x15410, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x1297fef8*, lpNumberOfBytesWritten=0x27e768*=0x15410, lpOverlapped=0x0) returned 1 [0264.499] CloseHandle (hObject=0x18c) returned 1 [0264.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\BrZmxiwqBnaWab6*_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\BrZmxiwqBnaWab6*_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0264.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv", lpFilePart=0x0) returned 0x3c [0264.512] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dfxvS6m.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dfxvs6m.flv")) returned 1 [0264.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", lpFilePart=0x0) returned 0x39 [0264.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", lpFilePart=0x0) returned 0x39 [0264.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", lpFilePart=0x0) returned 0x39 [0264.514] SetErrorMode (uMode=0x1) returned 0x0 [0264.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dl5c.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.514] GetFileType (hFile=0x18c) returned 0x1 [0264.514] SetErrorMode (uMode=0x0) returned 0x1 [0264.514] GetFileType (hFile=0x18c) returned 0x1 [0264.514] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x1876e [0264.515] ReadFile (in: hFile=0x18c, lpBuffer=0x12995338, nNumberOfBytesToRead=0x1876e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x12995338*, lpNumberOfBytesRead=0x27e6e8*=0x1876e, lpOverlapped=0x0) returned 1 [0264.517] CloseHandle (hObject=0x18c) returned 1 [0264.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", lpFilePart=0x0) returned 0x39 [0264.518] SetErrorMode (uMode=0x1) returned 0x0 [0264.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dl5c.mp3"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97632b0, ftCreationTime.dwHighDateTime=0x1d4c943, ftLastAccessTime.dwLowDateTime=0xfdc09180, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0xfdc09180, ftLastWriteTime.dwHighDateTime=0x1d4c7b9, nFileSizeHigh=0x0, nFileSizeLow=0x1876e)) returned 1 [0264.519] SetErrorMode (uMode=0x0) returned 0x1 [0264.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", lpFilePart=0x0) returned 0x39 [0264.686] SetErrorMode (uMode=0x1) returned 0x0 [0264.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dl5c.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.688] GetFileType (hFile=0x18c) returned 0x1 [0264.688] SetErrorMode (uMode=0x0) returned 0x1 [0264.688] GetFileType (hFile=0x18c) returned 0x1 [0264.688] WriteFile (in: hFile=0x18c, lpBuffer=0x1271bd98*, nNumberOfBytesToWrite=0x18870, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x1271bd98*, lpNumberOfBytesWritten=0x27e768*=0x18870, lpOverlapped=0x0) returned 1 [0264.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3", lpFilePart=0x0) returned 0x39 [0264.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\yqaDLym87zt48Tme_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\yqaDLym87zt48Tme_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0264.692] SetErrorMode (uMode=0x1) returned 0x0 [0264.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dl5c.mp3"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97632b0, ftCreationTime.dwHighDateTime=0x1d4c943, ftLastAccessTime.dwLowDateTime=0xfdc09180, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0x6e55faf0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x18870)) returned 1 [0264.692] SetErrorMode (uMode=0x0) returned 0x1 [0264.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DL5C.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dl5c.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\yqaDLym87zt48Tme_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yqadlym87zt48tme_encrypted_by.whiterose")) returned 1 [0264.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", lpFilePart=0x0) returned 0x3b [0264.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", lpFilePart=0x0) returned 0x3b [0264.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", lpFilePart=0x0) returned 0x3b [0264.789] SetErrorMode (uMode=0x1) returned 0x0 [0264.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eiakvv.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.790] GetFileType (hFile=0x18c) returned 0x1 [0264.790] SetErrorMode (uMode=0x0) returned 0x1 [0264.790] GetFileType (hFile=0x18c) returned 0x1 [0264.790] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x187d5 [0264.791] ReadFile (in: hFile=0x18c, lpBuffer=0x12734638, nNumberOfBytesToRead=0x187d5, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x12734638*, lpNumberOfBytesRead=0x27e6e8*=0x187d5, lpOverlapped=0x0) returned 1 [0264.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", lpFilePart=0x0) returned 0x3b [0264.794] SetErrorMode (uMode=0x1) returned 0x0 [0264.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eiakvv.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8670b940, ftCreationTime.dwHighDateTime=0x1d4d563, ftLastAccessTime.dwLowDateTime=0x7f9bd810, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0x7f9bd810, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x187d5)) returned 1 [0264.794] SetErrorMode (uMode=0x0) returned 0x1 [0264.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", lpFilePart=0x0) returned 0x3b [0264.861] SetErrorMode (uMode=0x1) returned 0x0 [0264.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eiakvv.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.863] GetFileType (hFile=0x18c) returned 0x1 [0264.863] SetErrorMode (uMode=0x0) returned 0x1 [0264.863] GetFileType (hFile=0x18c) returned 0x1 [0264.863] WriteFile (in: hFile=0x18c, lpBuffer=0x127c7b18*, nNumberOfBytesToWrite=0x188e0, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x127c7b18*, lpNumberOfBytesWritten=0x27e768*=0x188e0, lpOverlapped=0x0) returned 1 [0264.865] CloseHandle (hObject=0x18c) returned 1 [0264.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png", lpFilePart=0x0) returned 0x3b [0264.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lSABC8f7Rbuqh65J_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lSABC8f7Rbuqh65J_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0264.866] SetErrorMode (uMode=0x1) returned 0x0 [0264.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eiakvv.png"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8670b940, ftCreationTime.dwHighDateTime=0x1d4d563, ftLastAccessTime.dwLowDateTime=0x7f9bd810, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0x6e702a10, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x188e0)) returned 1 [0264.866] SetErrorMode (uMode=0x0) returned 0x1 [0264.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eIakVV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eiakvv.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lSABC8f7Rbuqh65J_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsabc8f7rbuqh65j_encrypted_by.whiterose")) returned 1 [0264.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", lpFilePart=0x0) returned 0x48 [0264.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", lpFilePart=0x0) returned 0x48 [0264.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", lpFilePart=0x0) returned 0x48 [0264.976] SetErrorMode (uMode=0x1) returned 0x0 [0264.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fh93akavtknamxdtpkd.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0264.976] GetFileType (hFile=0x18c) returned 0x1 [0264.976] SetErrorMode (uMode=0x0) returned 0x1 [0264.976] GetFileType (hFile=0x18c) returned 0x1 [0264.976] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x17efe [0264.977] ReadFile (in: hFile=0x18c, lpBuffer=0x127e0428, nNumberOfBytesToRead=0x17efe, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x127e0428*, lpNumberOfBytesRead=0x27e6e8*=0x17efe, lpOverlapped=0x0) returned 1 [0264.979] CloseHandle (hObject=0x18c) returned 1 [0264.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", lpFilePart=0x0) returned 0x48 [0264.980] SetErrorMode (uMode=0x1) returned 0x0 [0264.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fh93akavtknamxdtpkd.mp4"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe57800, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0xf8887d80, ftLastAccessTime.dwHighDateTime=0x1d4d115, ftLastWriteTime.dwLowDateTime=0xf8887d80, ftLastWriteTime.dwHighDateTime=0x1d4d115, nFileSizeHigh=0x0, nFileSizeLow=0x17efe)) returned 1 [0264.980] SetErrorMode (uMode=0x0) returned 0x1 [0265.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", lpFilePart=0x0) returned 0x48 [0265.128] SetErrorMode (uMode=0x1) returned 0x0 [0265.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fh93akavtknamxdtpkd.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.130] GetFileType (hFile=0x18c) returned 0x1 [0265.130] SetErrorMode (uMode=0x0) returned 0x1 [0265.131] GetFileType (hFile=0x18c) returned 0x1 [0265.131] WriteFile (in: hFile=0x18c, lpBuffer=0x128703d8*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x128703d8*, lpNumberOfBytesWritten=0x27e768*=0x18000, lpOverlapped=0x0) returned 1 [0265.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4", lpFilePart=0x0) returned 0x48 [0265.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4Kiw4x4U10gpQmXv_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4Kiw4x4U10gpQmXv_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0265.134] SetErrorMode (uMode=0x1) returned 0x0 [0265.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fh93akavtknamxdtpkd.mp4"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe57800, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0xf8887d80, ftLastAccessTime.dwHighDateTime=0x1d4d115, ftLastWriteTime.dwLowDateTime=0x6e9b02d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0265.134] SetErrorMode (uMode=0x0) returned 0x1 [0265.135] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fh93AKAvtknamxDTPKd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fh93akavtknamxdtpkd.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4Kiw4x4U10gpQmXv_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4kiw4x4u10gpqmxv_encrypted_by.whiterose")) returned 1 [0265.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", lpFilePart=0x0) returned 0x46 [0265.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", lpFilePart=0x0) returned 0x46 [0265.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", lpFilePart=0x0) returned 0x46 [0265.241] SetErrorMode (uMode=0x1) returned 0x0 [0265.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fqx akhh2ppg_egqk.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.241] GetFileType (hFile=0x18c) returned 0x1 [0265.241] SetErrorMode (uMode=0x0) returned 0x1 [0265.241] GetFileType (hFile=0x18c) returned 0x1 [0265.241] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xe9ef [0265.241] ReadFile (in: hFile=0x18c, lpBuffer=0x27abdd0, nNumberOfBytesToRead=0xe9ef, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x27abdd0*, lpNumberOfBytesRead=0x27e6e8*=0xe9ef, lpOverlapped=0x0) returned 1 [0265.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", lpFilePart=0x0) returned 0x46 [0265.243] SetErrorMode (uMode=0x1) returned 0x0 [0265.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fqx akhh2ppg_egqk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b7c5880, ftCreationTime.dwHighDateTime=0x1d4d01f, ftLastAccessTime.dwLowDateTime=0xfa0aa530, ftLastAccessTime.dwHighDateTime=0x1d4d53d, ftLastWriteTime.dwLowDateTime=0xfa0aa530, ftLastWriteTime.dwHighDateTime=0x1d4d53d, nFileSizeHigh=0x0, nFileSizeLow=0xe9ef)) returned 1 [0265.243] SetErrorMode (uMode=0x0) returned 0x1 [0265.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", lpFilePart=0x0) returned 0x46 [0265.327] SetErrorMode (uMode=0x1) returned 0x0 [0265.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fqx akhh2ppg_egqk.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.329] GetFileType (hFile=0x18c) returned 0x1 [0265.329] SetErrorMode (uMode=0x0) returned 0x1 [0265.329] GetFileType (hFile=0x18c) returned 0x1 [0265.329] WriteFile (in: hFile=0x18c, lpBuffer=0x2850690*, nNumberOfBytesToWrite=0xeaf0, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x2850690*, lpNumberOfBytesWritten=0x27e768*=0xeaf0, lpOverlapped=0x0) returned 1 [0265.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3", lpFilePart=0x0) returned 0x46 [0265.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uvw6H8MRMRui2er1_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uvw6H8MRMRui2er1_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0265.331] SetErrorMode (uMode=0x1) returned 0x0 [0265.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fqx akhh2ppg_egqk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b7c5880, ftCreationTime.dwHighDateTime=0x1d4d01f, ftLastAccessTime.dwLowDateTime=0xfa0aa530, ftLastAccessTime.dwHighDateTime=0x1d4d53d, ftLastWriteTime.dwLowDateTime=0x6eb79350, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xeaf0)) returned 1 [0265.332] SetErrorMode (uMode=0x0) returned 0x1 [0265.332] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FQx AKHh2ppG_EGqk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fqx akhh2ppg_egqk.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uvw6H8MRMRui2er1_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uvw6h8mrmrui2er1_encrypted_by.whiterose")) returned 1 [0265.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", lpFilePart=0x0) returned 0x48 [0265.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", lpFilePart=0x0) returned 0x48 [0265.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", lpFilePart=0x0) returned 0x48 [0265.428] SetErrorMode (uMode=0x1) returned 0x0 [0265.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fr bgkrkddnoz -dlax.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.428] GetFileType (hFile=0x18c) returned 0x1 [0265.428] SetErrorMode (uMode=0x0) returned 0x1 [0265.428] GetFileType (hFile=0x18c) returned 0x1 [0265.428] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x991 [0265.429] ReadFile (in: hFile=0x18c, lpBuffer=0x2861488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x2861488*, lpNumberOfBytesRead=0x27e6e8*=0x991, lpOverlapped=0x0) returned 1 [0265.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", lpFilePart=0x0) returned 0x48 [0265.430] SetErrorMode (uMode=0x1) returned 0x0 [0265.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fr bgkrkddnoz -dlax.png"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca775250, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0x5126fe00, ftLastAccessTime.dwHighDateTime=0x1d4ca3e, ftLastWriteTime.dwLowDateTime=0x5126fe00, ftLastWriteTime.dwHighDateTime=0x1d4ca3e, nFileSizeHigh=0x0, nFileSizeLow=0x991)) returned 1 [0265.430] SetErrorMode (uMode=0x0) returned 0x1 [0265.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", lpFilePart=0x0) returned 0x48 [0265.512] SetErrorMode (uMode=0x1) returned 0x0 [0265.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fr bgkrkddnoz -dlax.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.513] GetFileType (hFile=0x18c) returned 0x1 [0265.513] SetErrorMode (uMode=0x0) returned 0x1 [0265.513] GetFileType (hFile=0x18c) returned 0x1 [0265.514] WriteFile (in: hFile=0x18c, lpBuffer=0x28c24d0*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x27e688, lpOverlapped=0x0 | out: lpBuffer=0x28c24d0*, lpNumberOfBytesWritten=0x27e688*=0xaa0, lpOverlapped=0x0) returned 1 [0265.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png", lpFilePart=0x0) returned 0x48 [0265.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ame19xzFVPgizwlN_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ame19xzFVPgizwlN_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0265.515] SetErrorMode (uMode=0x1) returned 0x0 [0265.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fr bgkrkddnoz -dlax.png"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca775250, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0x5126fe00, ftLastAccessTime.dwHighDateTime=0x1d4ca3e, ftLastWriteTime.dwLowDateTime=0x6ed423d0, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0265.515] SetErrorMode (uMode=0x0) returned 0x1 [0265.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fR BgKrKddnOz -dLax.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fr bgkrkddnoz -dlax.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ame19xzFVPgizwlN_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ame19xzfvpgizwln_encrypted_by.whiterose")) returned 1 [0265.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", lpFilePart=0x0) returned 0x3c [0265.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", lpFilePart=0x0) returned 0x3c [0265.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", lpFilePart=0x0) returned 0x3c [0265.617] SetErrorMode (uMode=0x1) returned 0x0 [0265.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxi1tju.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.617] GetFileType (hFile=0x18c) returned 0x1 [0265.617] SetErrorMode (uMode=0x0) returned 0x1 [0265.617] GetFileType (hFile=0x18c) returned 0x1 [0265.617] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0x716e [0265.617] ReadFile (in: hFile=0x18c, lpBuffer=0x28c4a40, nNumberOfBytesToRead=0x716e, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28c4a40*, lpNumberOfBytesRead=0x27e6e8*=0x716e, lpOverlapped=0x0) returned 1 [0265.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", lpFilePart=0x0) returned 0x3c [0265.619] SetErrorMode (uMode=0x1) returned 0x0 [0265.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxi1tju.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c830f80, ftCreationTime.dwHighDateTime=0x1d4c76c, ftLastAccessTime.dwLowDateTime=0xf3d72760, ftLastAccessTime.dwHighDateTime=0x1d4d1fa, ftLastWriteTime.dwLowDateTime=0xf3d72760, ftLastWriteTime.dwHighDateTime=0x1d4d1fa, nFileSizeHigh=0x0, nFileSizeLow=0x716e)) returned 1 [0265.620] SetErrorMode (uMode=0x0) returned 0x1 [0265.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", lpFilePart=0x0) returned 0x3c [0265.733] SetErrorMode (uMode=0x1) returned 0x0 [0265.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxi1tju.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.735] GetFileType (hFile=0x18c) returned 0x1 [0265.735] SetErrorMode (uMode=0x0) returned 0x1 [0265.735] GetFileType (hFile=0x18c) returned 0x1 [0265.735] WriteFile (in: hFile=0x18c, lpBuffer=0x27532c0*, nNumberOfBytesToWrite=0x7270, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x27532c0*, lpNumberOfBytesWritten=0x27e768*=0x7270, lpOverlapped=0x0) returned 1 [0265.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif", lpFilePart=0x0) returned 0x3c [0265.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\oxE91POZa0M6OkWc_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\oxE91POZa0M6OkWc_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0265.737] SetErrorMode (uMode=0x1) returned 0x0 [0265.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxi1tju.gif"), fInfoLevelId=0x0, lpFileInformation=0x27e690 | out: lpFileInformation=0x27e690*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c830f80, ftCreationTime.dwHighDateTime=0x1d4c76c, ftLastAccessTime.dwLowDateTime=0xf3d72760, ftLastAccessTime.dwHighDateTime=0x1d4d1fa, ftLastWriteTime.dwLowDateTime=0x6ef57710, ftLastWriteTime.dwHighDateTime=0x1d533c8, nFileSizeHigh=0x0, nFileSizeLow=0x7270)) returned 1 [0265.737] SetErrorMode (uMode=0x0) returned 0x1 [0265.737] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fxi1tJu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxi1tju.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\oxE91POZa0M6OkWc_ENCRYPTED_BY.WHITEROSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxe91poza0m6okwc_encrypted_by.whiterose")) returned 1 [0265.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0265.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0265.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0265.834] SetErrorMode (uMode=0x1) returned 0x0 [0265.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.843] SetErrorMode (uMode=0x0) returned 0x1 [0265.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x27bd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0265.845] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt")) returned 0 [0265.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0265.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0265.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0265.853] SetErrorMode (uMode=0x1) returned 0x0 [0265.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gca1 vpb5eyw.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.853] GetFileType (hFile=0x18c) returned 0x1 [0265.853] SetErrorMode (uMode=0x0) returned 0x1 [0265.853] GetFileType (hFile=0x18c) returned 0x1 [0265.853] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xe9f4 [0265.853] ReadFile (in: hFile=0x18c, lpBuffer=0x275e020, nNumberOfBytesToRead=0xe9f4, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x275e020*, lpNumberOfBytesRead=0x27e6e8*=0xe9f4, lpOverlapped=0x0) returned 1 [0265.854] CloseHandle (hObject=0x18c) returned 1 [0265.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0265.855] SetErrorMode (uMode=0x1) returned 0x0 [0265.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gca1 vpb5eyw.wav"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e205a0, ftCreationTime.dwHighDateTime=0x1d4c6cb, ftLastAccessTime.dwLowDateTime=0x8e4d5bd0, ftLastAccessTime.dwHighDateTime=0x1d4cbc4, ftLastWriteTime.dwLowDateTime=0x8e4d5bd0, ftLastWriteTime.dwHighDateTime=0x1d4cbc4, nFileSizeHigh=0x0, nFileSizeLow=0xe9f4)) returned 1 [0265.855] SetErrorMode (uMode=0x0) returned 0x1 [0265.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27e1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0265.989] SetErrorMode (uMode=0x1) returned 0x0 [0265.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gca1 vpb5eyw.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0265.991] GetFileType (hFile=0x18c) returned 0x1 [0265.991] SetErrorMode (uMode=0x0) returned 0x1 [0265.991] GetFileType (hFile=0x18c) returned 0x1 [0265.991] WriteFile (in: hFile=0x18c, lpBuffer=0x28053e0*, nNumberOfBytesToWrite=0xeb00, lpNumberOfBytesWritten=0x27e768, lpOverlapped=0x0 | out: lpBuffer=0x28053e0*, lpNumberOfBytesWritten=0x27e768*=0xeb00, lpOverlapped=0x0) returned 1 [0265.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0265.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Ebd6EjEn9q*LF6Jk_ENCRYPTED_BY.WHITEROSE", nBufferLength=0x105, lpBuffer=0x27e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Ebd6EjEn9q*LF6Jk_ENCRYPTED_BY.WHITEROSE", lpFilePart=0x0) returned 0x58 [0266.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", nBufferLength=0x105, lpBuffer=0x27bf50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav", lpFilePart=0x0) returned 0x41 [0266.008] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCA1 VpB5EYW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gca1 vpb5eyw.wav")) returned 1 [0266.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gr za3ZENMQO.m4a", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gr za3ZENMQO.m4a", lpFilePart=0x0) returned 0x41 [0266.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gr za3ZENMQO.m4a", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gr za3ZENMQO.m4a", lpFilePart=0x0) returned 0x41 [0266.010] CoTaskMemAlloc (cb=0x20c) returned 0xfe030 [0266.010] GetSystemDirectoryW (in: lpBuffer=0xfe030, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0266.010] CoTaskMemFree (pv=0xfe030) [0266.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x27e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0266.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", nBufferLength=0x105, lpBuffer=0x27e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", lpFilePart=0x0) returned 0x46 [0266.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", nBufferLength=0x105, lpBuffer=0x27e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", lpFilePart=0x0) returned 0x46 [0266.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", nBufferLength=0x105, lpBuffer=0x27e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", lpFilePart=0x0) returned 0x46 [0266.011] SetErrorMode (uMode=0x1) returned 0x0 [0266.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guf2ij8ustttawc8h.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x18c [0266.011] GetFileType (hFile=0x18c) returned 0x1 [0266.011] SetErrorMode (uMode=0x0) returned 0x1 [0266.011] GetFileType (hFile=0x18c) returned 0x1 [0266.011] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x27e808 | out: lpFileSizeHigh=0x27e808*=0x0) returned 0xabd8 [0266.011] ReadFile (in: hFile=0x18c, lpBuffer=0x28166b8, nNumberOfBytesToRead=0xabd8, lpNumberOfBytesRead=0x27e6e8, lpOverlapped=0x0 | out: lpBuffer=0x28166b8*, lpNumberOfBytesRead=0x27e6e8*=0xabd8, lpOverlapped=0x0) returned 1 [0266.012] CloseHandle (hObject=0x18c) returned 1 [0266.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", nBufferLength=0x105, lpBuffer=0x27e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv", lpFilePart=0x0) returned 0x46 [0266.013] SetErrorMode (uMode=0x1) returned 0x0 [0266.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GuF2Ij8USTttawc8H.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guf2ij8ustttawc8h.flv"), fInfoLevelId=0x0, lpFileInformation=0x27e6f0 | out: lpFileInformation=0x27e6f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce0de830, ftCreationTime.dwHighDateTime=0x1d4ced9, ftLastAccessTime.dwLowDateTime=0x84506ab0, ftLastAccessTime.dwHighDateTime=0x1d4cea7, ftLastWriteTime.dwLowDateTime=0x84506ab0, ftLastWriteTime.dwHighDateTime=0x1d4cea7, nFileSizeHigh=0x0, nFileSizeLow=0xabd8)) returned 1 [0266.013] SetErrorMode (uMode=0x0) returned 0x1 Thread: id = 2 os_tid = 0x960 Thread: id = 3 os_tid = 0x964 [0031.652] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 4 os_tid = 0x970